https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 19 Oct 2026 03:25:44 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-250645 EUVD-2026-250645 https://cve.radiocsirt.org/vuln/euvd-2026-250645 https://cve.radiocsirt.org/vuln/fkie_cve-2025-57772 <p>DataEase is an open source business intelligence and data visualization tool. Prior to version 2.10.12, there is a H2 JDBC RCE bypass in DataEase. If the JDBC URL meets criteria, the getJdbcUrl method is returned, which acts as the getter for the JdbcUrl parameter provided. This bypasses H2&#39;s filtering logic and returns the H2 JDBC URL, allowing the &#34;driver&#34;:&#34;org.h2.Driver&#34; to specify the H2 driver for the JDBC connection. The vulnerability has been fixed in version 2.10.12.</p> <p>DataEase is an open source business intelligence and data visualization tool. Prior to version 2.10.12, there is a H2 JDBC RCE bypass in DataEase. If the JDBC URL meets criteria, the getJdbcUrl method is returned, which acts as the getter for the JdbcUrl parameter provided. This bypasses H2&#39;s filtering logic and returns the H2 JDBC URL, allowing the &#34;driver&#34;:&#34;org.h2.Driver&#34; to specify the H2 driver for the JDBC connection. The vulnerability has been fixed in version 2.10.12.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-57772