84 matches found
postgresql16-16.5-1.1 on GA media (moderate)
postgresql16-16.5-1.1 on GA media Announcement ID: openSUSE-SU-2024:14505-1 Rating: moderate Cross-References: CVE-2024-10976 CVE-2024-10977 CVE-2024-10978 CVE-2024-10979 CVSS scores: CVE-2024-10976 SUSE : 4.2 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N CVE-2024-10977 SUSE : 3.1...
postgresql13-13.17-1.1 on GA media (moderate)
postgresql13-13.17-1.1 on GA media Announcement ID: openSUSE-SU-2024:14502-1 Rating: moderate Cross-References: CVE-2024-10976 CVE-2024-10977 CVE-2024-10978 CVE-2024-10979 CVSS scores: CVE-2024-10976 SUSE : 4.2 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N CVE-2024-10977 SUSE : 3.1...
PostgreSQL Multiple Vulnerabilities (Nov 2024) - Windows
PostgreSQL is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:postgresql:postgresql";...
PostgreSQL Multiple Vulnerabilities (Nov 2024) - Linux
PostgreSQL is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:postgresql:postgresql";...
CVE-2024-10977 vulnerabilities
Vulnerabilities for packages: postgresql...
CVE-2024-10977
Client use of server error message in PostgreSQL allows a server not trusted under current SSL or GSS settings to furnish arbitrary non-NUL bytes to the libpq application. For example, a man-in-the-middle attacker could send a long error message that a human or screen-scraper user of psql mistake...
KLA77143 Multiple vulnerabilities in PostgreSQL
Multiple vulnerabilities were found in PostgreSQL. Malicious users can exploit these vulnerabilities to gain privileges, bypass security restrictions, execute arbitrary code. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability can be exploited remotely to gain...
Mitsubishi Electric MELSEC-Q Series Ethernet Module Uncontrolled Resource Consumption (CVE-2019-10977)
In Mitsubishi Electric MELSEC-Q series Ethernet module QJ71E71-100 serial number 20121 and prior, an attacker could send crafted TCP packets against the FTP service, forcing the target devices to enter an error mode and cause a denial-of-service condition. This plugin only works with Tenable.ot...
Exploit for Path Traversal in Gitlab
GitLab CVE2020-10977 Introduction This script provides re...
Exploit for Path Traversal in Gitlab
CVE-2020-10977 read and execute About CVE-2020-10977 - Ha...
CVE-2020-10977
creationtimestamp| type| source ---|---|--- 2020-12-09 17:40:24+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/gitlabfilereadrce.rb 2021-09-21 06:42:47+00:00| published-proof-of-concept| https://t.me/pwnwikizhchannel/177 2024-10-09...
Exploit for Path Traversal in Gitlab
CVE-2020-10977.py authenticated arbitrary file read for Gitla...
Exploit for Path Traversal in Gitlab
CVE-2020-10977 GitLab 12.9.0 Arbitrary File Read Target...
CVE-2020-15630
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Studio Photo 3.6.6.922. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...
Design/Logic Flaw
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Studio Photo 3.6.6.922. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...
CVE-2020-15630
Foxit Studio Photo 3.6.6.922 (and affected earlier versions) is affected by a PNG parsing vulnerability that leads to a read past the end of an allocated structure due to improper validation of user-supplied data. This out-of-bounds read can disclose sensitive information and, per the CVE, can be...
CVE-2020-10977
GitLab EE/CE 8.5 to 12.9 is vulnerable to a an path traversal when moving an issue between projects...
CVE-2020-10977
GitLab CVE-2020-10977 is an authenticated arbitrary file read (path traversal) vulnerability in GitLab CE/EE 8.5–12.9 used to exfiltrate Rails secret_key_base and chain a remote code execution via a crafted signed cookie. Public PoCs/exploits demonstrate reading secrets.yml and achieving RCE thro...
CVE-2020-10977
GitLab EE/CE 8.5 to 12.9 is vulnerable to a an path traversal when moving an issue between projects. Recent assessments: wvu-r7 at June 09, 2020 10:49pm UTC reported: @zeroSteiner pointed us to this exploit chain today: . It uses CVE-2020-10535 to satisfy the authentication requirement. Note that...