Priority LOW 39
Archery v1.10.0 uses a non-random or static IV for Cipher Block Chaining (CBC) mode in AES encryption.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00371 · Published 2023-11-16 · No fix listed CWE-798
Priority MEDIUM 62
Archery is an open source SQL audit platform.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00844 · Published 2023-04-18 · No fix listed CWE-89
Priority LOW 32
Archery is an open source SQL audit platform.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00835 · Published 2023-04-18 · No fix listed CWE-89
Priority LOW 32
Archery is an open source SQL audit platform.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00844 · Published 2023-04-18 · No fix listed CWE-89
Priority MEDIUM 62
Archery is an open source SQL audit platform.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00842 · Published 2023-04-18 · No fix listed CWE-89
Priority LOW 32
Archery is an open source SQL audit platform.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00835 · Published 2023-04-18 · No fix listed CWE-89
Priority LOW 32
Archery is an open source SQL audit platform.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00835 · Published 2023-04-18 · No fix listed CWE-89
Priority LOW 32
Archery is an open source SQL audit platform.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00835 · Published 2023-04-18 · No fix listed CWE-89
Priority LOW 32
Archery is an open source SQL audit platform.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00835 · Published 2023-04-18 · No fix listed CWE-89
Priority MEDIUM 44
Archery v1.4.0 to v1.8.5 was discovered to contain a SQL injection vulnerability via the ThreadIDs parameter in the kill_session interface.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0117 · Published 2022-09-13 · No fix listed CWE-89
Priority MEDIUM 44
Archery v1.7.5 to v1.8.5 was discovered to contain a SQL injection vulnerability via the where parameter at /archive/apply.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0117 · Published 2022-09-13 · No fix listed CWE-89
Priority MEDIUM 45
Archery v1.8.3 to v1.8.5 was discovered to contain multiple SQL injection vulnerabilities via the start_time and stop_time parameters in the my2sql interface.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01251 · Published 2022-09-13 · No fix listed CWE-89
Priority MEDIUM 44
Archery v1.4.0 to v1.8.5 was discovered to contain a SQL injection vulnerability via the ThreadIDs parameter in the create_kill_session interface.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01155 · Published 2022-09-13 · No fix listed CWE-89
Priority MEDIUM 44
Archery v1.7.0 to v1.8.5 was discovered to contain a SQL injection vulnerability via the checksum parameter in the report module.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01155 · Published 2022-09-13 · No fix listed CWE-89
Priority MEDIUM 44
Archery v1.4.5 to v1.8.5 was discovered to contain multiple SQL injection vulnerabilities via the start_file, end_file, start_time, and stop_time parameters in the binlog2sql interface.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01129 · Published 2022-09-13 · No fix listed CWE-89
THREATIST.IORead the docs