Archery
Archerydms · 15 CVEs
Archery v1.10.0 uses a non-random or static IV for Cipher Block Chaining (CBC) mode in AES encryption. This vulnerabili…
Nov 16, 2023
Multiple SQL injections in sql/instance.py param_edit method in Archery - GHSL-2022-104
Apr 18, 2023
Multiple SQL injections in sql/data_dictionary.py table_list method in Archery - GHSL-2022-105
Apr 18, 2023
SQL injection in data_dictionary.py table_info method in Archery - GHSL-2022-106
Apr 18, 2023
SQL injection in sql_optimize.py optimize_sqltuningadvisor method in Archery - GHSL-2022-107
Apr 18, 2023
SQL injection in sql_optimize.py explain method in Archery - GHSL-2022-108
Apr 18, 2023
SQL injection in sql_api/api_workflow.py endpoint in Archery - GHSL-2022-103
Apr 18, 2023
Multiple SQL injections in sql_api/api_workflow.py endpoint in Archery - GHSL-2022-102
Apr 18, 2023
SQL injection in sql/instance.py endpoint in Archery - GHSL-2022-101
Apr 18, 2023
Archery v1.4.0 to v1.8.5 was discovered to contain a SQL injection vulnerability via the ThreadIDs parameter in the kil…
Sep 13, 2022
Archery v1.7.5 to v1.8.5 was discovered to contain a SQL injection vulnerability via the where parameter at /archive/ap…
Sep 13, 2022
Archery v1.8.3 to v1.8.5 was discovered to contain multiple SQL injection vulnerabilities via the start_time and stop_t…
Sep 13, 2022
Archery v1.4.0 to v1.8.5 was discovered to contain a SQL injection vulnerability via the ThreadIDs parameter in the cre…
Sep 13, 2022
Archery v1.7.0 to v1.8.5 was discovered to contain a SQL injection vulnerability via the checksum parameter in the repo…
Sep 13, 2022
Archery v1.4.5 to v1.8.5 was discovered to contain multiple SQL injection vulnerabilities via the start_file, end_file,…
Sep 13, 2022
| CVE ID | Description | Severity | EPSS | Published |
|---|---|---|---|---|
| CVE-2023-48053 | Archery v1.10.0 uses a non-random or static IV for Cipher Block Chaining (CBC) mode in AES encryption. This vulnerability can lead to the disclosure of informa… | HIGH | 0.37% | Nov 16, 2023 |
| CVE-2023-30605 | Multiple SQL injections in sql/instance.py param_edit method in Archery - GHSL-2022-104 | MEDIUM | 0.84% | Apr 18, 2023 |
| CVE-2023-30558 | Multiple SQL injections in sql/data_dictionary.py table_list method in Archery - GHSL-2022-105 | MEDIUM | 0.83% | Apr 18, 2023 |
| CVE-2023-30557 | SQL injection in data_dictionary.py table_info method in Archery - GHSL-2022-106 | MEDIUM | 0.84% | Apr 18, 2023 |
| CVE-2023-30556 | SQL injection in sql_optimize.py optimize_sqltuningadvisor method in Archery - GHSL-2022-107 | MEDIUM | 0.83% | Apr 18, 2023 |
| CVE-2023-30555 | SQL injection in sql_optimize.py explain method in Archery - GHSL-2022-108 | MEDIUM | 0.83% | Apr 18, 2023 |
| CVE-2023-30554 | SQL injection in sql_api/api_workflow.py endpoint in Archery - GHSL-2022-103 | MEDIUM | 0.83% | Apr 18, 2023 |
| CVE-2023-30553 | Multiple SQL injections in sql_api/api_workflow.py endpoint in Archery - GHSL-2022-102 | MEDIUM | 0.83% | Apr 18, 2023 |
| CVE-2023-30552 | SQL injection in sql/instance.py endpoint in Archery - GHSL-2022-101 | MEDIUM | 0.83% | Apr 18, 2023 |
| CVE-2022-38542 | Archery v1.4.0 to v1.8.5 was discovered to contain a SQL injection vulnerability via the ThreadIDs parameter in the kill_session interface. The project has rel… | CRITICAL | 1.15% | Sep 13, 2022 |
| CVE-2022-38539 | Archery v1.7.5 to v1.8.5 was discovered to contain a SQL injection vulnerability via the where parameter at /archive/apply. | CRITICAL | 1.15% | Sep 13, 2022 |
| CVE-2022-38541 | Archery v1.8.3 to v1.8.5 was discovered to contain multiple SQL injection vulnerabilities via the start_time and stop_time parameters in the my2sql interface. | CRITICAL | 1.22% | Sep 13, 2022 |
| CVE-2022-38540 | Archery v1.4.0 to v1.8.5 was discovered to contain a SQL injection vulnerability via the ThreadIDs parameter in the create_kill_session interface. | CRITICAL | 1.13% | Sep 13, 2022 |
| CVE-2022-38538 | Archery v1.7.0 to v1.8.5 was discovered to contain a SQL injection vulnerability via the checksum parameter in the report module. | CRITICAL | 1.13% | Sep 13, 2022 |
| CVE-2022-38537 | Archery v1.4.5 to v1.8.5 was discovered to contain multiple SQL injection vulnerabilities via the start_file, end_file, start_time, and stop_time parameters in… | CRITICAL | 1.10% | Sep 13, 2022 |
Showing 1 to 15 of 15 CVEs