hhyo

Records15All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical6CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

hhyo records in CISA KEV

No hhyo vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Archery 15 records MEDIUM

Records

15 records in Archery · all components

TI-2023-14421 CVE-2023-30605

Multiple SQL injections in sql/instance.py param_edit method in Archery - GHSL-2022-104

MEDIUM 62

Archery is an open source SQL audit platform.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00844 Published 2023-04-18 No fix listed CWE-89

TI-2023-14391 CVE-2023-30556

SQL injection in sql_optimize.py optimize_sqltuningadvisor method in Archery - GHSL-2022-107

MEDIUM 62

Archery is an open source SQL audit platform.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00842 Published 2023-04-18 No fix listed CWE-89

TI-2022-18131 CVE-2022-38541 · GHSA-c2j6-3xrr-37xg

Archery v1.8.3 to v1.8.5 was discovered to contain multiple SQL injection vulnerabilities…

MEDIUM 45

Archery v1.8.3 to v1.8.5 was discovered to contain multiple SQL injection vulnerabilities via the start_time and stop_time parameters in the my2sql interface.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01251 Published 2022-09-13 No fix listed CWE-89

TI-2022-18132 CVE-2022-38542 · GHSA-635h-w2x6-r5pm

Archery v1.4.0 to v1.8.5 was discovered to contain a SQL injection vulnerability via the…

MEDIUM 44

Archery v1.4.0 to v1.8.5 was discovered to contain a SQL injection vulnerability via the ThreadIDs parameter in the kill_session interface.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0117 Published 2022-09-13 No fix listed CWE-89

TI-2022-18130 CVE-2022-38540 · GHSA-f7qm-cmwf-vvjv

Archery v1.4.0 to v1.8.5 was discovered to contain a SQL injection vulnerability via the…

MEDIUM 44

Archery v1.4.0 to v1.8.5 was discovered to contain a SQL injection vulnerability via the ThreadIDs parameter in the create_kill_session interface.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01155 Published 2022-09-13 No fix listed CWE-89

TI-2022-18129 CVE-2022-38539 · GHSA-8w4p-7655-wfgh

Archery v1.7.5 to v1.8.5 was discovered to contain a SQL injection vulnerability via the…

MEDIUM 44

Archery v1.7.5 to v1.8.5 was discovered to contain a SQL injection vulnerability via the where parameter at /archive/apply.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0117 Published 2022-09-13 No fix listed CWE-89

TI-2022-18128 CVE-2022-38538 · GHSA-qcwf-6cm5-8pqv

Archery v1.7.0 to v1.8.5 was discovered to contain a SQL injection vulnerability via the…

MEDIUM 44

Archery v1.7.0 to v1.8.5 was discovered to contain a SQL injection vulnerability via the checksum parameter in the report module.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01155 Published 2022-09-13 No fix listed CWE-89

TI-2022-18127 CVE-2022-38537 · GHSA-pvrr-8hj3-p99x

Archery v1.4.5 to v1.8.5 was discovered to contain multiple SQL injection vulnerabilities…

MEDIUM 44

Archery v1.4.5 to v1.8.5 was discovered to contain multiple SQL injection vulnerabilities via the start_file, end_file, start_time, and stop_time parameters in the binlog2sql interface.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01129 Published 2022-09-13 No fix listed CWE-89

TI-2023-26016 CVE-2023-48053 · GHSA-p7p5-mvjw-h6h6

Archery v1.10.0 uses a non-random or static IV for Cipher Block Chaining (CBC) mode in…

LOW 39

Archery v1.10.0 uses a non-random or static IV for Cipher Block Chaining (CBC) mode in AES encryption.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00371 Published 2023-11-16 No fix listed CWE-798

TI-2023-14393 CVE-2023-30558

Multiple SQL injections in sql/data_dictionary.py table_list method in Archery - GHSL-2022-105

LOW 32

Archery is an open source SQL audit platform.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00835 Published 2023-04-18 No fix listed CWE-89

TI-2023-14392 CVE-2023-30557

SQL injection in data_dictionary.py table_info method in Archery - GHSL-2022-106

LOW 32

Archery is an open source SQL audit platform.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00844 Published 2023-04-18 No fix listed CWE-89

TI-2023-14390 CVE-2023-30555

SQL injection in sql_optimize.py explain method in Archery - GHSL-2022-108

LOW 32

Archery is an open source SQL audit platform.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00835 Published 2023-04-18 No fix listed CWE-89

TI-2023-14389 CVE-2023-30554

SQL injection in sql_api/api_workflow.py endpoint in Archery - GHSL-2022-103

LOW 32

Archery is an open source SQL audit platform.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00835 Published 2023-04-18 No fix listed CWE-89

TI-2023-14388 CVE-2023-30553

Multiple SQL injections in sql_api/api_workflow.py endpoint in Archery - GHSL-2022-102

LOW 32

Archery is an open source SQL audit platform.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00835 Published 2023-04-18 No fix listed CWE-89

TI-2023-14387 CVE-2023-30552

SQL injection in sql/instance.py endpoint in Archery - GHSL-2022-101

LOW 32

Archery is an open source SQL audit platform.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00835 Published 2023-04-18 No fix listed CWE-89

Open these records in search →

Critical	6
High	1
Medium	8
Low	0
No CVSS	0