14 matches found
UBUNTU-CVE-2026-14668
Type confusion regarding input of PostgreSQL ctid data type selectivity estimator allows an object creator to view a calculation derived from the value of an arbitrary 4-byte span of memory, via a chosen non-ctid input. While the calculation loses precision, substantial memory value recovery...
CVE-2026-14668 PostgreSQL ctid type confusion in selectivity estimator discloses derivative of arbitrary read
Type confusion regarding input of PostgreSQL ctid data type selectivity estimator allows an object creator to view a calculation derived from the value of an arbitrary 4-byte span of memory, via a chosen non-ctid input. While the calculation loses precision, substantial memory value recovery...
Linux Distros Unpatched Vulnerability : CVE-2026-14668
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Type confusion regarding input of PostgreSQL ctid data type selectivity estimator allows an object creator to view a calculation derived from the value of an...
IBM Db2 Denial of Service Vulnerability (CNVD-2026-14668)
IBM Db2 is a relational database management system from International Business Machines IBM. The system's execution environments are mainly UNIX, Linux, IBMi, z/OS, and Windows server versions. A denial of service vulnerability exists in IBM Db2, which can be exploited by an attacker to cause a...
CVE-2025-14668
CVE-2025-14668 affects CampCodes Advanced Online Examination System 1.0. The vulnerability originates from the file /query/loginExe.php where manipulating the Username parameter triggers an SQL injection. The issue can be exploited remotely and public exploit information is available; multiple co...
ClickHouse < 1.1.54388
The version of ClickHouse installed on the remote host is prior to 1.1.54388. It is, therefore, affected by a Cross Protocol Request Forgery vulnerability. In ClickHouse before 1.1.54388, remote table function allowed arbitrary symbols in user, password and defaultdatabase fields which led to Cro...
CVE-2020-14668
Vulnerability in the Oracle E-Business Intelligence product of Oracle E-Business Suite component: DBI Setups. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle E-Business...
CVE-2020-14668
CVE-2020-14668 affects Oracle E-Business Intelligence (DBI Setups) in Oracle E-Business Suite, versions 12.1.1–12.1.3. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise Oracle E-Business Intelligence, with successful attacks requiring user interaction...
CVE-2018-14668
In ClickHouse before 1.1.54388, "remote" table function allowed arbitrary symbols in "user", "password" and "defaultdatabase" fields which led to Cross Protocol Request Forgery Attacks...
CVE-2018-14668
In ClickHouse before 1.1.54388, "remote" table function allowed arbitrary symbols in "user", "password" and "defaultdatabase" fields which led to Cross Protocol Request Forgery Attacks...
CVE-2018-14668
CVE-2018-14668 affects ClickHouse versions before 1.1.54388. The vulnerability arises from the remote table function allowing arbitrary symbols in the fields “user”, “password”, and “default_database,” enabling Cross Protocol Request Forgery Attacks. The available connected documents confirm the ...
CVE-2019-14668
Firefly III 4.7.17.3 is affected by a stored XSS in the transaction description field. The root cause is lack of filtration/sanitization of user-supplied data, allowing JavaScript execution when a transaction link is deleted. Connected sources corroborate a stored XSS in the delete workflow via l...
