Where
-Infinity
0

Trending

Last week
Last month
Last year

Vendor Risk Score

See how clickhouse compares to other vendors in security performance

View Risk Score →

Clickhouse ClickHouse ServerSQL Injection

Risk 66
Severity
9.1
First published (updated )
CVE-2026-51992

Clickhouse ClickhouseRejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

Risk 11
Severity
2.8
EPSS
0.01%
First published (updated )
CVE-2025-52969

Clickhouse ClickhouseStack overflow leading to DoS can be triggered by a malicious authenticated client.

Risk 79
Severity
8.8
First published (updated )
CVE-2019-16536

Unknown ch-goQuery smuggling in ch-go library

Risk 32
Severity
5.9
First published (updated )
CVE-2025-1386

Clickhouse ClickhouseFail input validation in clickhouse-library-bridge API could lead to RCE under specific configuration

Risk 66
Severity
7.5
First published (updated )
CVE-2025-1385
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

BleepingComputerDeepSeek exposes database with over 1 million chat records

First published (updated )
News
BleepingComputer

Clickhouse ClickhouseBuffer Overflow

Risk 43
Severity
7.5
First published (updated )
CVE-2024-41436

Clickhouse ClickhouseSpecially crafted request could caused undefined behaviour which may lead to Remote Code Execution.

Risk 45
Severity
8.1
EPSS
0.04%
First published (updated )
CVE-2024-6873

Clickhouse ClickhouseClickHouse's Role-based Access Control is bypassed when query caching is enabled.

Risk 30
Severity
4.9
First published (updated )
CVE-2024-22412

Clickhouse ClickhouseUnauthenticated heap buffer overflow in Gorrila codec decompression

Risk 43
Severity
7.5
First published (updated )
CVE-2023-48704
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Clickhouse ClickhouseInteger underflow leading to stack overflow in FPC codec decompression

Risk 43
Severity
7.5
First published (updated )
CVE-2023-48298

Clickhouse ClickhouseHeap buffer overflow in T64 codec decompression

Risk 86
Severity
9.8
First published (updated )
CVE-2023-47118

Clickhouse ClickhouseBuffer Overflow

Risk 38
Severity
6.5
First published (updated )
CVE-2022-44011

Clickhouse ClickhouseBuffer Overflow

Risk 43
Severity
7.5
First published (updated )
CVE-2022-44010

Clickhouse Java LibrariesClickHouse Client Certificate Password Exposure

Risk 58
Severity
8.8
EPSS
0.07%
First published (updated )
CVE-2024-23689
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Yandex ClickhouseDivide by Zero

Risk 38
Severity
6.5
First published (updated )
CVE-2021-42391

Yandex ClickhouseDivide by Zero

Risk 38
Severity
6.5
First published (updated )
CVE-2021-42390

Yandex ClickhouseDivide by Zero

Risk 38
Severity
6.5
First published (updated )
CVE-2021-42389

debian/clickhouseHeap out-of-bounds read in Clickhouse's LZ4 compression codec when parsing a malicious query. As par…

Risk 62
Severity
8.1
First published (updated )
CVE-2021-42388

debian/clickhouseHeap out-of-bounds read in Clickhouse's LZ4 compression codec when parsing a malicious query. As par…

Risk 62
Severity
8.1
First published (updated )
CVE-2021-42387
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

debian/clickhouseBuffer Overflow

Risk 82
Severity
8.8
First published (updated )
CVE-2021-43305

debian/clickhouseBuffer Overflow

Risk 79
Severity
8.8
First published (updated )
CVE-2021-43304

Yandex ClickhouseIn all versions of ClickHouse before 19.14.3, an attacker having write access to ZooKeeper and who i…

Risk 38
Severity
6.5
First published (updated )
CVE-2019-15024

Yandex ClickhouseInteger Underflow

Risk 86
Severity
9.8
First published (updated )
CVE-2019-16535

Yandex ClickhouseClickHouse before 19.13.5.44 allows HTTP header injection via the url table function.

Risk 27
Severity
5.3
First published (updated )
CVE-2019-18657
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Yandex ClickhousePath Traversal

Risk 27
Severity
5.3
First published (updated )
CVE-2018-14672

Yandex ClickhouseInput Validation

Risk 86
Severity
9.8
First published (updated )
CVE-2018-14671

Yandex ClickhouseInfoleak

Risk 43
Severity
7.5
First published (updated )
CVE-2018-14669

Yandex ClickhouseCSRF

Risk 77
Severity
8.8
First published (updated )
CVE-2018-14668

Yandex ClickhouseIncorrect configuration in deb package in ClickHouse before 1.1.54131 could lead to unauthorized use…

Risk 86
Severity
9.8
First published (updated )
CVE-2018-14670
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203