https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 23:37:53 +0000 https://cve.radiocsirt.org/vuln/bdu:2024-02377 bdu:2024-02377 https://cve.radiocsirt.org/vuln/bdu:2024-02377 https://cve.radiocsirt.org/vuln/cnvd-2024-16112 cnvd-2024-16112 https://cve.radiocsirt.org/vuln/cnvd-2024-16112 https://cve.radiocsirt.org/vuln/euvd-2026-217348 EUVD-2026-217348 https://cve.radiocsirt.org/vuln/euvd-2026-217348 https://cve.radiocsirt.org/vuln/fkie_cve-2024-27438 <p>Download of Code Without Integrity Check vulnerability in Apache Doris. The jdbc driver files used for JDBC catalog is not checked and may resulting in remote command execution. Once the attacker is authorized to create a JDBC catalog, he/she can use arbitrary driver jar file with unchecked code snippet. This code snippet will be run when catalog is initializing without any check. This issue affects Apache Doris: from 1.2.0 through 2.0.4.</p> <p>Users are recommended to upgrade to version 2.0.5 or 2.1.x, which fixes the issue.</p> <p>Download of Code Without Integrity Check vulnerability in Apache Doris. The jdbc driver files used for JDBC catalog is not checked and may resulting in remote command execution. Once the attacker is authorized to create a JDBC catalog, he/she can use arbitrary driver jar file with unchecked code snippet. This code snippet will be run when catalog is initializing without any check. This issue affects Apache Doris: from 1.2.0 through 2.0.4.</p> <p>Users are recommended to upgrade to version 2.0.5 or 2.1.x, which fixes the issue.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-27438 https://cve.radiocsirt.org/vuln/ghsa-8mxv-pm3p-xvgq <p>Download of Code Without Integrity Check vulnerability in Apache Doris. The jdbc driver files used for JDBC catalog is not checked and may resulting in remote command execution. Once the attacker is authorized to create a JDBC catalog, he/she can use arbitrary driver jar file with unchecked code snippet. This code snippet will be run when catalog is initializing without any check. This issue affects Apache Doris: from 1.2.0 through 2.0.4.</p> <p>Users are recommended to upgrade to version 2.0.5 or 2.1.x, which fixes the issue.</p> <p>Download of Code Without Integrity Check vulnerability in Apache Doris. The jdbc driver files used for JDBC catalog is not checked and may resulting in remote command execution. Once the attacker is authorized to create a JDBC catalog, he/she can use arbitrary driver jar file with unchecked code snippet. This code snippet will be run when catalog is initializing without any check. This issue affects Apache Doris: from 1.2.0 through 2.0.4.</p> <p>Users are recommended to upgrade to version 2.0.5 or 2.1.x, which fixes the issue.</p> https://cve.radiocsirt.org/vuln/ghsa-8mxv-pm3p-xvgq https://cve.radiocsirt.org/vuln/gsd-2024-27438 gsd-2024-27438 https://cve.radiocsirt.org/vuln/gsd-2024-27438