Security fix for the ALT Linux 9 package postgresql12 version 10.3-alt1

March 2, 2018 Alexei Takaseev 10.3-alt1 - 10.3 - Fixes CVE-2018-1058...

Security fix for the ALT Linux 8 package postgresql12 version 10.3-alt1

March 2, 2018 Alexei Takaseev 10.3-alt1 - 10.3 - Fix CVE-2018-1058...

Security fix for the ALT Linux 8 package postgresql11 version 10.3-alt1

March 2, 2018 Alexei Takaseev 10.3-alt1 - 10.3 - Fix CVE-2018-1058...

Security fix for the ALT Linux 8 package postgresql10 version 10.3-alt0.M80P.1

10.3-alt0.M80P.1 built March 2, 2018 Alexei Takaseev in task 201180 March 2, 2018 Alexei Takaseev - 10.3 - Fixes CVE-2018-1058...

Security fix for the ALT Linux 8 package postgresql9.6 version 9.6.8-alt0.M80P.1

9.6.8-alt0.M80P.1 built March 2, 2018 Alexei Takaseev in task 201180 March 2, 2018 Alexei Takaseev - 9.6.8 - Fixes CVE-2018-1058...

FreeBSD : PostgreSQL vulnerabilities (e3eeda2e-1d67-11e8-a2ec-6cc21735f730)

The PostgreSQL project reports : - CVE-2018-1058: Uncontrolled search path element in pgdump and other client applications C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright 2003-2018 Jacques Vidrine a...

PostgreSQL vulnerabilities

The PostgreSQL project reports: CVE-2018-1058: Uncontrolled search path element in pgdump and other client applications...

Vulnerability in client (CVE-2018-1058)

Uncontrolled search path element in pgdump and other client applications...

Security fix for the ALT Linux 8 package postgresql11-1C version 9.6.8-alt1

Feb. 28, 2018 Alexei Takaseev 9.6.8-alt1 - 9.6.8 - Re-applay patches from 1C: 00001-1cFULL96.patch 00004-postgresql-1c-9.6.patch 00005-existsopt-2.patch - Remove path 00001-1ccreateappendpath.patch fixed in 00001-1cFULL96.patch - Fix CVE-2018-1058...

KLA11202 PE vulnerabilities in PostgreSQL

A vulnerabilyty was found in PostgreSQL. This vulnerability allow a user to modify the behavior of a query for other users and can be exploited to execute code with the permissions of superuser in the database. Original advisories Security Update Release Related products PostgreSQL CVE list...

Debian DLA-1058-1 : krb5 security update

In MIT Kerberos 5 aka krb5 1.7 and later, an authenticated attacker can cause a KDC assertion failure by sending invalid S4U2Self or S4U2Proxy requests. For Debian 7 'Wheezy', these problems have been fixed in version 1.10.1+dfsg-5+deb7u8. We recommend that you upgrade your krb5 packages. NOTE:...

CVE-2017-6019

An issue was discovered in Schneider Electric Conext ComBox, model 865-1058, all firmware versions prior to V3.03 BN 830. A series of rapid requests to the device may cause it to reboot...

Schneider Electric Conext ComBox

CVSS v3 7.5 ATTENTION: Remotely exploitable/low skill level to exploit. Vendor: Schneider Electric Equipment: Conext ComBox Vulnerability: Resource Exhaustion AFFECTED PRODUCTS Schneider Electric reports that the vulnerability affects the following Conext ComBox solar battery monitor: Conext...

Adobe Acrobat and Reader Use After Free (APSB16-14: CVE-2016-1058)

A remote code execution vulnerability exists in Adobe Acrobat and Reader. The vulnerability is due to a use-after-free error in Adobe Acrobat and Reader while handling a specially crafted PDF file. A remote attacker can exploit this vulnerability by enticing a target user to open a specially...

CVE-2016-1075

Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors, a different...

CVE-2016-1065

Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors, a different...

CVE-2016-1058

Technical details for CVE-2016-1058 are not publicly available in the provided documents. No confirmed affected products, root cause, or remediation are described here. Monitor for updates from official advisories and connected sources.

CVE-2015-1058

Multiple cross-site scripting XSS vulnerabilities in AdaptCMS 3.0.3 allow remote attackers to inject arbitrary web script or HTML via the 1 dataCategorytitle parameter to admin/categories/add, 2 dataFieldtitle parameter to admin/fields/ajaxfields/, 3 name property in a basicInfo JSON object to...

CVE-2015-1058

Multiple cross-site scripting XSS vulnerabilities in AdaptCMS 3.0.3 allow remote attackers to inject arbitrary web script or HTML via the 1 dataCategorytitle parameter to admin/categories/add, 2 dataFieldtitle parameter to admin/fields/ajaxfields/, 3 name property in a basicInfo JSON object to...

CVE-2015-1058

CVE-2015-1058 affects AdaptCMS 3.0.3. The connected sources describe multiple cross-site scripting (XSS) vulnerabilities, allowing injection of arbitrary script/HTML via several fields (e.g., data[Category][title] in admin/categories/add, data[Field][title] in admin/fields/ajax_fields/, name in b...