Archerydms
Archerydms Archery: vulnerabilidades y CVE
Archerydms Archery tiene 15 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 6 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE15
Últimos 12 meses0
Críticas6
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2023-48053 | Alta (7.5) | 0.37% | — | 16 nov 2023 | Archery v1.10.0 uses a non-random or static IV for Cipher Block Chaining (CBC) mode in AES encryption. This vulnerability can lead to the disclosure of information and communications. |
| CVE-2023-30605 | Media (6.5) | 0.84% | — | 19 abr 2023 | Archery is an open source SQL audit platform. The Archery project contains multiple SQL injection vulnerabilities, that may allow an attacker to query the connected databases. User input coming from the `variable_name`… |
| CVE-2023-30558 | Media (6.5) | 0.83% | — | 19 abr 2023 | Archery is an open source SQL audit platform. The Archery project contains multiple SQL injection vulnerabilities, that may allow an attacker to query the connected databases. User input coming from the `db_name` in the… |
| CVE-2023-30557 | Media (6.5) | 0.84% | — | 19 abr 2023 | Archery is an open source SQL audit platform. The Archery project contains multiple SQL injection vulnerabilities, that may allow an attacker to query the connected databases. Affected versions are subject to SQL… |
| CVE-2023-30556 | Media (6.5) | 0.83% | — | 19 abr 2023 | Archery is an open source SQL audit platform. The Archery project contains multiple SQL injection vulnerabilities, that may allow an attacker to query the connected databases. Affected versions are subject to SQL… |
| CVE-2023-30555 | Media (6.5) | 0.83% | — | 19 abr 2023 | Archery is an open source SQL audit platform. The Archery project contains multiple SQL injection vulnerabilities, that may allow an attacker to query the connected databases.Affected versions are subject to SQL… |
| CVE-2023-30554 | Media (6.5) | 0.83% | — | 19 abr 2023 | Archery is an open source SQL audit platform. The Archery project contains multiple SQL injection vulnerabilities, that may allow an attacker to query the connected databases. Affected versions are subject to SQL… |
| CVE-2023-30553 | Media (6.5) | 0.83% | — | 19 abr 2023 | Archery is an open source SQL audit platform. The Archery project contains multiple SQL injection vulnerabilities, that may allow an attacker to query the connected databases. Affected versions are subject to multiple… |
| CVE-2023-30552 | Media (6.5) | 0.83% | — | 19 abr 2023 | Archery is an open source SQL audit platform. The Archery project contains multiple SQL injection vulnerabilities, that may allow an attacker to query the connected databases. Affected versions are subject to SQL… |
| CVE-2022-38542 | Crítica (9.8) | 1.1% | — | 13 sept 2022 | Archery v1.4.0 to v1.8.5 was discovered to contain a SQL injection vulnerability via the ThreadIDs parameter in the kill_session interface. The project has released an update, please upgrade to v1.9.0 and above. |
| CVE-2022-38541 | Crítica (9.8) | 1.2% | — | 13 sept 2022 | Archery v1.8.3 to v1.8.5 was discovered to contain multiple SQL injection vulnerabilities via the start_time and stop_time parameters in the my2sql interface. |
| CVE-2022-38540 | Crítica (9.8) | 1.1% | — | 13 sept 2022 | Archery v1.4.0 to v1.8.5 was discovered to contain a SQL injection vulnerability via the ThreadIDs parameter in the create_kill_session interface. |
| CVE-2022-38539 | Crítica (9.8) | 1.1% | — | 13 sept 2022 | Archery v1.7.5 to v1.8.5 was discovered to contain a SQL injection vulnerability via the where parameter at /archive/apply. |
| CVE-2022-38538 | Crítica (9.8) | 1.1% | — | 13 sept 2022 | Archery v1.7.0 to v1.8.5 was discovered to contain a SQL injection vulnerability via the checksum parameter in the report module. |
| CVE-2022-38537 | Crítica (9.8) | 1.1% | — | 13 sept 2022 | Archery v1.4.5 to v1.8.5 was discovered to contain multiple SQL injection vulnerabilities via the start_file, end_file, start_time, and stop_time parameters in the binlog2sql interface. |