18 matches found
CVE-2026-14669
creationtimestamp| type| source ---|---|--- 2026-08-18 16:00:04+00:00| seen| Telegram/IrtiLILqC14w4K74-ztnJ9H6MHFYvClAaPOGhW-00BoHQg0 2026-08-18 16:00:04+00:00| seen| Telegram/yna2SgiXqU8Yl76-ls-5XNafbPbcL6XsZZAFlQw-zg2N4Y 2026-08-19 00:00:10+00:00| published-proof-of-concept|...
DEBIAN-CVE-2026-14669
Heap buffer overflow in PostgreSQL tochartimestamptz allows the party choosing the timezone to execute arbitrary code as the operating system user running the database, via a long POSIX timezone abbreviation. Versions before PostgreSQL 18.5, 17.11, 16.15, 15.19, and 14.24 are affected...
CVE-2026-14669 PostgreSQL to_char heap buffer overflow executes arbitrary code
Heap buffer overflow in PostgreSQL tochartimestamptz allows the party choosing the timezone to execute arbitrary code as the operating system user running the database, via a long POSIX timezone abbreviation. Versions before PostgreSQL 18.5, 17.11, 16.15, 15.19, and 14.24 are affected...
CVE-2026-14669 PostgreSQL to_char heap buffer overflow executes arbitrary code
Heap buffer overflow in PostgreSQL tochartimestamptz allows the party choosing the timezone to execute arbitrary code as the operating system user running the database, via a long POSIX timezone abbreviation. Versions before PostgreSQL 18.5, 17.11, 16.15, 15.19, and 14.24 are affected...
CVE-2026-14669
CVE-2026-14669 describes a heap buffer overflow in PostgreSQL's to_char(timestamptz), allowing an attacker who can choose the database timezone to execute arbitrary code as the OS user running the database. The vulnerability is triggered by a long POSIX timezone abbreviation. Affected versions ar...
CVE-2018-14669
ClickHouse MySQL client before versions 1.1.54390 had "LOAD DATA LOCAL INFILE" functionality enabled that allowed a malicious MySQL database read arbitrary files from the connected ClickHouse server...
CVE-2019-14669
Firefly III 4.7.17.3 is vulnerable to stored XSS due to the lack of filtration of user-supplied data in the asset account name. The JavaScript code is executed during a visit to the audit account statistics page...
ClickHouse < 1.1.54390
The version of ClickHouse installed on the remote host is prior to 1.1.54390. It is, therefore, affected by an arbitrary file read vulnerability. ClickHouse MySQL client before versions 1.1.54390 had LOAD DATA LOCAL INFILE functionality enabled that allowed a malicious MySQL database read arbitra...
CVE-2020-14669
Vulnerability in the Oracle Configurator product of Oracle Supply Chain component: UI Servlet. Supported versions that are affected are 12.1 and 12.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Configurator. Successful attack...
CVE-2020-14669
CVE-2020-14669 affects Oracle Configurator (UI Servlet) within Oracle Supply Chain. Affected versions: 12.1 and 12.2. The vulnerability is exploitable by an unauthenticated attacker with network access via HTTP; exploitation requires user interaction, and successful access could lead to unauthori...
CVE-2018-14669
ClickHouse MySQL client before versions 1.1.54390 had "LOAD DATA LOCAL INFILE" functionality enabled that allowed a malicious MySQL database read arbitrary files from the connected ClickHouse server...
CVE-2018-14669
ClickHouse MySQL client before versions 1.1.54390 had "LOAD DATA LOCAL INFILE" functionality enabled that allowed a malicious MySQL database read arbitrary files from the connected ClickHouse server...
CVE-2018-14669
ClickHouse MySQL client before versions 1.1.54390 had "LOAD DATA LOCAL INFILE" functionality enabled that allowed a malicious MySQL database read arbitrary files from the connected ClickHouse server...
CVE-2018-14669
CVE-2018-14669 affects ClickHouse MySQL client prior to version 1.1.54390. The vulnerability arises from enabled LOAD DATA LOCAL INFILE functionality, allowing a malicious MySQL database to read arbitrary files from the connected ClickHouse server. Concrete details across connected sources confir...
CVE-2019-14669
Firefly III 4.7.17.3 is vulnerable to stored XSS due to the lack of filtration of user-supplied data in the asset account name. The JavaScript code is executed during a visit to the audit account statistics page...
CVE-2019-14669
CVE-2019-14669 affects Firefly III 4.7.17.3 and is a stored XSS vulnerability caused by lack of filtration of user-supplied data in the asset account name. The JavaScript executes when visiting the audit account statistics page. CVSS metrics indicate CVSS‑3.0 base score 5.4 (Medium) with network ...