Archerydms Archery
15 CVEs affecting Archerydms Archery. Latest disclosed: 2023-11-16. Critical: 6, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-38542 | Critical | 9.8 | 2022-09-13 | Archery v1.4.0 to v1.8.5 was discovered to contain a SQL injection vulnerability via the ThreadIDs parameter in the kill_session interface. The project has rel… |
CVE-2022-38541 | Critical | 9.8 | 2022-09-13 | Archery v1.8.3 to v1.8.5 was discovered to contain multiple SQL injection vulnerabilities via the start_time and stop_time parameters in the my2sql interface. |
CVE-2022-38540 | Critical | 9.8 | 2022-09-13 | Archery v1.4.0 to v1.8.5 was discovered to contain a SQL injection vulnerability via the ThreadIDs parameter in the create_kill_session interface. |
CVE-2022-38539 | Critical | 9.8 | 2022-09-13 | Archery v1.7.5 to v1.8.5 was discovered to contain a SQL injection vulnerability via the where parameter at /archive/apply. |
CVE-2022-38538 | Critical | 9.8 | 2022-09-13 | Archery v1.7.0 to v1.8.5 was discovered to contain a SQL injection vulnerability via the checksum parameter in the report module. |
CVE-2022-38537 | Critical | 9.8 | 2022-09-13 | Archery v1.4.5 to v1.8.5 was discovered to contain multiple SQL injection vulnerabilities via the start_file, end_file, start_time, and stop_time parameters in… |
CVE-2023-48053 | High | 7.5 | 2023-11-16 | Archery v1.10.0 uses a non-random or static IV for Cipher Block Chaining (CBC) mode in AES encryption. This vulnerability can lead to the disclosure of informa… |
CVE-2023-30605 | Medium | 6.5 | 2023-04-19 | Archery is an open source SQL audit platform. The Archery project contains multiple SQL injection vulnerabilities, that may allow an attacker to query the conn… |
CVE-2023-30558 | Medium | 6.5 | 2023-04-19 | Archery is an open source SQL audit platform. The Archery project contains multiple SQL injection vulnerabilities, that may allow an attacker to query the conn… |
CVE-2023-30557 | Medium | 6.5 | 2023-04-19 | Archery is an open source SQL audit platform. The Archery project contains multiple SQL injection vulnerabilities, that may allow an attacker to query the conn… |
CVE-2023-30556 | Medium | 6.5 | 2023-04-19 | Archery is an open source SQL audit platform. The Archery project contains multiple SQL injection vulnerabilities, that may allow an attacker to query the conn… |
CVE-2023-30555 | Medium | 6.5 | 2023-04-19 | Archery is an open source SQL audit platform. The Archery project contains multiple SQL injection vulnerabilities, that may allow an attacker to query the conn… |
CVE-2023-30554 | Medium | 6.5 | 2023-04-19 | Archery is an open source SQL audit platform. The Archery project contains multiple SQL injection vulnerabilities, that may allow an attacker to query the conn… |
CVE-2023-30553 | Medium | 6.5 | 2023-04-19 | Archery is an open source SQL audit platform. The Archery project contains multiple SQL injection vulnerabilities, that may allow an attacker to query the conn… |
CVE-2023-30552 | Medium | 6.5 | 2023-04-19 | Archery is an open source SQL audit platform. The Archery project contains multiple SQL injection vulnerabilities, that may allow an attacker to query the conn… |