aiven-db-migrate 命令注入漏洞

aiven-db-migrate is an Aiven open source application. A command injection vulnerability exists in aiven-db-migrate versions prior to 1.0.7, which stems from an elevation of privilege vulnerability that could lead to superuser privilege acquisition...

PT-2025-33673 · Aiven · Aiven-Db-Migrate

Name of the Vulnerable Software and Affected Versions: aiven-db-migrate versions prior to 1.0.7 Description: aiven-db-migrate is a database migration tool. A privilege escalation issue exists that could allow elevation to superuser inside PostgreSQL databases during a migration from an untrusted...

CVE-2025-55283: Improper Neutralization of Special Elements used in a Command

aiven-db-migrate is an Aiven database migration tool. Prior to 1.0.7, there is a privilege escalation vulnerability that allows elevation to superuser inside PostgreSQL databases during a migration from an untrusted source server. The vulnerability stems from psql executing commands embedded in a...

Malicious code in @frozen-ui/intergalactic-migrate-for-package (npm)

The package @frozen-ui/intergalactic-migrate-for-package was found to contain malicious code...

Malicious code in cli-plugin-migrate (npm)

The package cli-plugin-migrate was found to contain malicious code...

Malicious code in plugin-migrate (npm)

The package plugin-migrate was found to contain malicious code...

Malicious code in sails-generate-migrate-app (npm)

The package sails-generate-migrate-app was found to contain malicious code...

MAL-2025-32639 Malicious code in sails-generate-migrate-app (npm)

The package sails-generate-migrate-app was found to contain malicious code...

MAL-2025-17113 Malicious code in cli-plugin-migrate (npm)

The package cli-plugin-migrate was found to contain malicious code...

MAL-2025-7971 Malicious code in @frozen-ui/intergalactic-migrate-for-package (npm)

The package @frozen-ui/intergalactic-migrate-for-package was found to contain malicious code...

MAL-2025-29413 Malicious code in plugin-migrate (npm)

The package plugin-migrate was found to contain malicious code...

CVE-2025-8482

The Simple Local Avatars plugin for WordPress is vulnerable to unauthorized modification of data in version 2.8.4. This is due to a missing capability check on the migratefromwpuseravatar function. This makes it possible for authenticated attackers, with subscriber-level access and above, to...

Linux Distros Unpatched Vulnerability : CVE-2022-49864

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amdkfd: Fix NULL pointer dereference in svmmigratetoram ./drivers/gpu/drm/amd/amdkfd/kfdmigrate.c:985:58-62: ERROR: p is NULL but dereferenced. CVE-2022-498...

PT-2025-35963

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the drm/xe/migrate component that could lead to infinite recursion and a potential kernel panic. This occurs when handling memory alignment during...

PT-2025-37199

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The Linux kernel contains a use-after-free UAF issue within the drm/xe/migrate component. Specifically, a flaw exists where a fence object could be freed prematurely, leading to a...

PT-2025-37200

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A flaw exists in the Linux kernel’s drm/xe/migrate module related to handling copy sizes during migration. Specifically, when dealing with non-page aligned copies and pitches, the...

PT-2025-36294

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.16.0-rc5-mm-new-damon+ 93 Description The Linux kernel contains a flaw in mm/damon/ops-common.c where the damon migrate pages function attempts page migration even if the target node is invalid. This can occur...

PT-2025-37212

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The Linux kernel contains an issue in the gfs2 subsystem related to the handling of migrate folio in gfs2 rgrp,meta aops. This resolves a warning that occurred in xfstests, leading to...

CVE-2020-36848: Exposure of Sensitive Information to an Unauthorized Actor

The Total Upkeep – WordPress Backup Plugin plus Restore & Migrate by BoldGrid plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.14.9 via the env-info.php and restore-info.json files. This makes it possible for unauthenticated attackers to...

The vulnerability of the ext4_ind_migrate() function in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the ext4indmigrate function in the Linux operating system is related to insufficient locking mechanisms. Exploiting this vulnerability could allow an attacker to trigger a service failure...