10 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-14671
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Type confusion in PostgreSQL module refint allows an object creator to execute arbitrary code as the operating system user running the database. The fix for thi...
Vulnerability in contrib module (CVE-2026-14671)
PostgreSQL refint plan cache type confusion executes arbitrary code Type confusion in PostgreSQL module "refint" allows an object creator to execute arbitrary code as the operating system user running the database. The fix for this emerged as a non-security bug report, and the fix appear in the g...
CVE-2019-14671
Firefly III 4.7.17.3 is vulnerable to local file enumeration. An attacker can enumerate local files due to the lack of protocol scheme sanitization, such as for file:/// URLs. This is related to fintsurl to import/job/configuration, and import/create/fints...
ClickHouse < 18.10.3
The version of ClickHouse installed on the remote host is prior to 18.10.3. It is, therefore, affected by a remote code execution vulnerability. In ClickHouse before 18.10.3, unixODBC allowed loading arbitrary shared objects from the file system which led to a Remote Code Execution vulnerability...
CVE-2020-14671
Vulnerability in the Oracle Advanced Outbound Telephony product of Oracle E-Business Suite component: User Interface. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Advanced...
CVE-2020-14671
CVE-2020-14671 affects Oracle E-Business Suite Oracle Advanced Outbound Telephony UI, versions 12.1.1–12.1.3. The vulnerability allows unauthenticated network access via HTTP to compromise the Telephony component; exploitation requires human interaction. It can lead to unauthorized read of data a...
CVE-2018-14671
The CVE-2018-14671 issue affects ClickHouse prior to 18.10.3. Affected component: unixODBC integration that allowed loading arbitrary shared objects from the filesystem, enabling Remote Code Execution. Root cause: insecure loading of dynamic objects by unixODBC. Impact: potential remote code exec...
CVE-2019-14671
Firefly III 4.7.17.3 is vulnerable to local file enumeration due to insufficient sanitization of protocol schemes, notably file:/// URLs, related to the fints_url used in import/job/configuration and import/create/fints. This affects the ability of an attacker to enumerate local files. The connec...