https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 09:18:50 +0000 https://cve.radiocsirt.org/vuln/bdu:2022-00307 bdu:2022-00307 https://cve.radiocsirt.org/vuln/bdu:2022-00307 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0325 certfr-2023-avi-0325 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0325 https://cve.radiocsirt.org/vuln/euvd-2026-234797 EUVD-2026-234797 https://cve.radiocsirt.org/vuln/euvd-2026-234797 https://cve.radiocsirt.org/vuln/fkie_cve-2020-25638 <p>A flaw was found in hibernate-core in versions prior to and including 5.4.23.Final. A SQL injection in the implementation of the JPA Criteria API can permit unsanitized literals when a literal is used in the SQL comments of the query. This flaw could allow an attacker to access unauthorized information or possibly conduct further attacks. The highest threat from this vulnerability is to data confidentiality and integrity.</p> <p>A flaw was found in hibernate-core in versions prior to and including 5.4.23.Final. A SQL injection in the implementation of the JPA Criteria API can permit unsanitized literals when a literal is used in the SQL comments of the query. This flaw could allow an attacker to access unauthorized information or possibly conduct further attacks. The highest threat from this vulnerability is to data confidentiality and integrity.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-25638 https://cve.radiocsirt.org/vuln/ghsa-j8jw-g6fq-mp7h <p><strong>Affected:</strong> Maven: org.hibernate:hibernate-core</p> <p>A flaw was found in hibernate-core in versions prior to 5.3.20.Final and in 5.4.0.Final up to and including 5.4.23.Final. A SQL injection in the implementation of the JPA Criteria API can permit unsanitized literals when a literal is used in the SQL comments of the query. This flaw could allow an attacker to access unauthorized information or possibly conduct further attacks. The highest threat from this vulnerability is to data confidentiality and integrity.</p> <p><strong>Affected:</strong> Maven: org.hibernate:hibernate-core</p> <p>A flaw was found in hibernate-core in versions prior to 5.3.20.Final and in 5.4.0.Final up to and including 5.4.23.Final. A SQL injection in the implementation of the JPA Criteria API can permit unsanitized literals when a literal is used in the SQL comments of the query. This flaw could allow an attacker to access unauthorized information or possibly conduct further attacks. The highest threat from this vulnerability is to data confidentiality and integrity.</p> https://cve.radiocsirt.org/vuln/ghsa-j8jw-g6fq-mp7h https://cve.radiocsirt.org/vuln/gsd-2020-25638 gsd-2020-25638 https://cve.radiocsirt.org/vuln/gsd-2020-25638 https://cve.radiocsirt.org/vuln/jvndb-2020-000074 <p>Hibernate ORM is an ORM framework for Java. Hibernate ORM can be configured (hibernate.use_sql_comments to true, which is false by default) to add comments to generated SQL statements, aimed at debugging purpose. When hibernate.use_sql_comments is configured to true, malicious input may produce unexpected SQL statements (CWE-89). TERASOLUNA Framework Development Team of NTT DATA reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.</p> <p>Hibernate ORM is an ORM framework for Java. Hibernate ORM can be configured (hibernate.use_sql_comments to true, which is false by default) to add comments to generated SQL statements, aimed at debugging purpose. When hibernate.use_sql_comments is configured to true, malicious input may produce unexpected SQL statements (CWE-89). TERASOLUNA Framework Development Team of NTT DATA reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.</p> https://cve.radiocsirt.org/vuln/jvndb-2020-000074 https://cve.radiocsirt.org/vuln/rhsa-2020:5174 <p>hibernate-core: SQL injection vulnerability when both hibernate.use_sql_comments and JPQL String literals are used</p> <p>hibernate-core: SQL injection vulnerability when both hibernate.use_sql_comments and JPQL String literals are used</p> https://cve.radiocsirt.org/vuln/rhsa-2020:5174 https://cve.radiocsirt.org/vuln/suse-su-2022:0225-1 <p>Security update for SUSE Manager Server 4.1</p> <p>Security update for SUSE Manager Server 4.1</p> https://cve.radiocsirt.org/vuln/suse-su-2022:0225-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-25638 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: libhibernate3-java, Ubuntu:Pro:18.04:LTS: libhibernate3-java, Ubuntu:20.04:LTS: libhibernate3-java</p> <p>A flaw was found in hibernate-core in versions prior to and including 5.4.23.Final. A SQL injection in the implementation of the JPA Criteria API can permit unsanitized literals when a literal is used in the SQL comments of the query. This flaw could allow an attacker to access unauthorized information or possibly conduct further attacks. The highest threat from this vulnerability is to data confidentiality and integrity.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: libhibernate3-java, Ubuntu:Pro:18.04:LTS: libhibernate3-java, Ubuntu:20.04:LTS: libhibernate3-java</p> <p>A flaw was found in hibernate-core in versions prior to and including 5.4.23.Final. A SQL injection in the implementation of the JPA Criteria API can permit unsanitized literals when a literal is used in the SQL comments of the query. This flaw could allow an attacker to access unauthorized information or possibly conduct further attacks. The highest threat from this vulnerability is to data confidentiality and integrity.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-25638 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1911 <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Red Hat JBoss Enterprise Application Platform für eine SQL-Injection ausnutzen.</p> <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Red Hat JBoss Enterprise Application Platform für eine SQL-Injection ausnutzen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1911