| CVE-2026-59229 |
The Legacy Pipe receiver protocol (handshake / sendPipeData) uses a hardcoded SUPER_USER (root) identity when…
|
Non notée
|
21 oct. 2026 |
| CVE-2026-59562 |
Missing authentication for critical function vulnerability in Apache IoTDB
|
Non notée
|
21 oct. 2026 |
| CVE-2026-58663 |
An authentication bypass vulnerability exists in Apache IoTDB's Thrift RPC service This issue affects Apache IoTDB: from…
|
Non notée
|
21 oct. 2026 |
| CVE-2026-44630 |
Improper validation of length fields in the Apache IoTDB RPC service may allow a remote unauthenticated attacker to…
|
Non notée
|
10 août 2026 |
| CVE-2026-40452 |
Incorrect Authorization, Improper Access Control vulnerability in Apache IoTDB
|
Non notée
|
10 juil. 2026 |
| CVE-2026-40009 |
Improper Privilege Management, Improper Access Control vulnerability in Apache IoTDB
|
Non notée
|
10 juil. 2026 |
| CVE-2026-40008 |
Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Apache IoTDB
|
Non notée
|
10 juil. 2026 |
| CVE-2026-40007 |
Uncontrolled Recursion, Uncontrolled Resource Consumption vulnerability in Apache IoTDB
|
Non notée
|
10 juil. 2026 |
| CVE-2026-40006 |
Memory Allocation with Excessive Size Value, Allocation of Resources Without Limits or Throttling, Missing…
|
Non notée
|
10 juil. 2026 |
| CVE-2026-40005 |
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache IoTDB
|
Non notée
|
10 juil. 2026 |
| CVE-2026-28564 |
Insufficient Session Expiration, Authentication Bypass by Capture-replay vulnerability in Apache IoTDB
|
Non notée
|
10 juil. 2026 |
| CVE-2026-24013 |
Authentication Bypass by Spoofing vulnerability in Apache IoTDB
|
Non notée
|
6 juil. 2026 |
| CVE-2026-24012 |
Uncontrolled Resource Consumption vulnerability in Apache IoTDB. Some interface fails to impose reasonable limits on…
|
Non notée
|
6 juil. 2026 |
| CVE-2026-24014 |
Apache IoTDB DataNode’s internal RPC interface for creating Trigger instances uses the uploaded Trigger JAR name to…
|
Non notée
|
6 juil. 2026 |
| CVE-2025-64152 |
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache IoTDB
|
Non notée
|
26 juin 2026 |
| CVE-2025-55017 |
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache IoTDB
|
Non notée
|
26 juin 2026 |
| CVE-2026-24713 |
Improper Input Validation vulnerability in Apache IoTDB
|
Non notée
|
9 mars 2026 |
| CVE-2026-24015 |
A vulnerability in Apache IoTDB
|
Non notée
|
9 mars 2026 |
| CVE-2025-48392 |
A vulnerability in Apache IoTDB
|
Non notée
|
24 sept. 2025 |
| CVE-2025-48459 |
Deserialization of Untrusted Data vulnerability in Apache IoTDB
|
Non notée
|
24 sept. 2025 |
| CVE-2025-26864 |
Exposure of Sensitive Information to an Unauthorized Actor, Insertion of Sensitive Information into Log File…
|
Non notée
|
14 mai 2025 |
| CVE-2024-24780 |
Remote Code Execution with untrusted URI of UDF vulnerability in Apache IoTDB
|
Non notée
|
14 mai 2025 |
| CVE-2023-46226 |
Remote Code Execution vulnerability in Apache IoTDB.This issue affects Apache IoTDB: from 1.0.0 through 1.2.2
|
Non notée
|
15 janv. 2024 |
| CVE-2023-51656 |
Deserialization of Untrusted Data vulnerability in Apache IoTDB.This issue affects Apache IoTDB: from 0.13.0 through…
|
Non notée
|
21 déc. 2023 |
| CVE-2023-24831 |
Improper Authentication vulnerability in Apache Software Foundation Apache IoTDB.This issue affects Apache IoTDB Grafana…
|
Non notée
|
17 avr. 2023 |