openSUSE Security Update : postgresql (openSUSE-SU-2010:0371-1)

This update of postgresql was pblished to fix several minor security vulnerabilities : - CVE-2010-1975: postgresql does not properly check privileges during certain RESET ALL operations, which allows remote authenticated users to remove arbitrary parameter settings. - CVE-2010-1170: The PL/Tcl...

openSUSE Security Update : postgresql (openSUSE-SU-2010:0371-1)

This update of postgresql was pblished to fix several minor security vulnerabilities : - CVE-2010-1975: postgresql does not properly check privileges during certain RESET ALL operations, which allows remote authenticated users to remove arbitrary parameter settings. - CVE-2010-1170: The PL/Tcl...

openSUSE Security Update : postgresql (openSUSE-SU-2010:0371-1)

This update of postgresql was pblished to fix several minor security vulnerabilities : - CVE-2010-1975: postgresql does not properly check privileges during certain RESET ALL operations, which allows remote authenticated users to remove arbitrary parameter settings. - CVE-2010-1170: The PL/Tcl...

Debian Security Advisory DSA 2051-1 (postgresql-8.3)

The remote host is missing an update to postgresql-8.3 announced via advisory DSA 2051-1. OpenVAS Vulnerability Test $Id: deb20511.nasl 6614 2017-07-07 12:09:12Z cfischer $ Description: Auto-generated from advisory DSA 2051-1 postgresql-8.3 Authors: Thomas Reinke Copyright: Copyright c 2010 E-Sof...

Ubuntu: Security Advisory (USN-942-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-2051-1 : postgresql-8.3 - several vulnerabilities

Several local vulnerabilities have been discovered in PostgreSQL, an object-relational SQL database. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2010-1169 Tim Bunce discovered that the implementation of the procedural language PL/Perl insufficiently...

DSA-2051-1 postgresql-8.3 - several

Bulletin has no description...

USN-942-1: PostgreSQL vulnerabilities

It was discovered that the Safe.pm module as used by PostgreSQL did not properly restrict PL/perl procedures. If PostgreSQL was configured to use Perl stored procedures, a remote authenticated attacker could exploit this to execute arbitrary Perl code. CVE-2010-1169 It was discovered that...

CVE-2010-1975

CVE-2010-1975 affects PostgreSQL 7.4 up to 7.4.29, 8.0 up to 8.0.25, 8.1 up to 8.1.21, 8.2 up to 8.2.17, 8.3 up to 8.3.11, and 8.4 up to 8.4.4. The flaw is an improper privilege check during certain RESET ALL operations, allowing a remote authenticated user to remove arbitrary parameter settings ...

CVE-2010-1975

PostgreSQL 7.4 before 7.4.29, 8.0 before 8.0.25, 8.1 before 8.1.21, 8.2 before 8.2.17, 8.3 before 8.3.11, and 8.4 before 8.4.4 does not properly check privileges during certain RESET ALL operations, which allows remote authenticated users to remove arbitrary parameter settings via a 1 ALTER USER ...

CVE-2010-1975

PostgreSQL 7.4 before 7.4.29, 8.0 before 8.0.25, 8.1 before 8.1.21, 8.2 before 8.2.17, 8.3 before 8.3.11, and 8.4 before 8.4.4 does not properly check privileges during certain RESET ALL operations, which allows remote authenticated users to remove arbitrary parameter settings via a 1 ALTER USER ...

Mandriva Update for poppler MDVA-2010:103 (poppler)

Check for the Version of poppler OpenVAS Vulnerability Test Mandriva Update for poppler MDVA-2010:103 poppler Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

[SECURITY] [DSA-1975-1] Security Support for Debian 4.0 to be discontinued on February 15th

------------------------------------------------------------------------ Debian Security Advisory DSA-1975-1 [email protected] http://www.debian.org/security/ Stefan Fritsch January 20, 2010 http://www.debian.org/security/faq -...

CVE-2004-1975

creationtimestamp| type| source ---|---|--- 2009-12-26 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/10667...

Oracle BEA WebLogic Server console-help.portal Cross-Site Scripting (CVE-2009-1975)

BEA WebLogic Server is an enterprise-class Java Application Server platform. WebLogic is typically used as the platform for large enterprise web applications. A cross-site scripting vulnerability was reported in BEA Weblogic Server. The vulnerability is due to lack of sanitization of input passed...

CVE-2009-1975

creationtimestamp| type| source ---|---|--- 2009-06-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33079...

Cisco IOS远程IPC拒绝服务漏洞

BUGTRAQ ID: 31363 CVE ID: CVE-2008-3805 CNCVE ID：CNCVE-20083805 Cisco 10000, uBR10012和uBR7200系列设备使用基于UDP的IPC通道，这个通道使用127.0.0.0/8范围的地址和UDP 1975端口。Cisco 10000, uBR10012和uBR7200系列设备运行受此漏洞影响的Cisco IOS会去处理从设备外部发送给UDP 1975端口的IPC消息。这种行为可导致攻击者发送大量数据包导致设备，线路卡重载，造成拒绝服务攻击。 此漏洞的Cisco bug...

CVE-2008-1975

CVE-2008-1975 describes an SQL injection vulnerability in the E-RESERV 2.1 web application, exploitable via the ID_loc parameter in index.php. The vulnerability allows remote attackers to execute arbitrary SQL commands, as the input is treated unsafely within database queries. Multiple connected ...

CVE-2007-1975

Multiple PHP remote file inclusion vulnerabilities in SLAED CMS 2 allow remote attackers to execute arbitrary PHP code via a URL in the 1 path parameter to admin/admin.php or the 2 modpath parameter to index.php...

CVE-2007-1975

The CVE-2007-1975 entry concerns SLAED CMS 2 and describes multiple PHP remote file inclusion vulnerabilities that allow an attacker to execute arbitrary PHP code via a URL parameter: either the path parameter to admin/admin.php or the modpath parameter to index.php. The root cause is unsafely ha...