Most recent entries from all

cnvd-2018-17648

EUVD-2026-198325

fkie_cve-2018-14335

An issue was discovered in H2 1.4.197. Insecure handling of permissions in the backup function allows attackers to read sensitive files (outside of their permissions) via a symlink to a fake database file.

GHSA-wm64-883p-84j3

gsd-2018-14335

RHSA-2020:0727 — Red Hat Security Advisory: Red Hat Data Grid 7.3.3 security update

h2: Information Exposure due to insecure handling of permissions in the backup wildfly: Race condition on PID file allows for termination of arbitrary processes by local users undertow: leak credentials to log files UndertowLogger.REQUEST_LOGGER.undertowRequestFailed HTTP/2: flood using PING frames results in unbounded memory growth HTTP/2: flood using HEADERS frames results in unbounded memory growth HTTP/2: flood using SETTINGS frames results in unbounded memory growth HTTP/2: flood using empty frames results in excessive resource consumption xstream: remote code execution due to insecure XML deserialization (regression of CVE-2013-7285) infinispan: invokeAccessibly method from ReflectionUtil class allows to invoke private methods undertow: Information leak in requests for directories without trailing slashes undertow: DEBUG log for io.undertow.request.security if enabled leaks credentials to log files jackson-databind: default typing mishandling leading to remote code execution

UBUNTU-CVE-2018-14335

Affected: Ubuntu:Pro:16.04:LTS: h2database, Ubuntu:Pro:18.04:LTS: h2database, Ubuntu:20.04:LTS: h2database