Debian DLA-2478-1 : postgresql-9.6 security update

Several vulnerabilities have been found in the PostgreSQL database system. CVE-2020-25694 Peter Eisentraut found that database reconnections may drop options from the original connection, such as encryption, which could lead to information disclosure or a man-in-the-middle attack. CVE-2020-25695...

Debian: Security Advisory (DLA-2478-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2020-10733

CVE-2020-10733 affects the Windows PostgreSQL installer (versions 9.5 through 12). The root cause is that the installer invokes system-provided executables without fully-qualified paths, so executables in the load directory or current working directory can be chosen instead of the intended ones. ...

AVEVA Enterprise Data Management Web

1. EXECUTIVE SUMMARY CVSS v3 9.6 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: AVEVA Equipment: Enterprise Data Management Web Vulnerability: SQL Injection 2. RISK EVALUATION Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary SQL...

PostgreSQL 9.5.x < 9.5.23 / 9.6.x < 9.6.19 / 10.x < 10.14 / 11.x < 11.9 / 12.x < 12.4 Multiple Vulnerabilities

The version of PostgreSQL installed on the remote host is 9.5 prior to 9.5.23, 9.6 prior to 9.6.19, 10 prior to 10.14, 11 prior to 11.9, or 12 prior to 12.4. As such, it is potentially affected by multiple vulnerabilities : - Uncontrolled search path element in logical replication CVE-2020-14349 ...

[SECURITY] [DLA 2331-1] posgresql-9.6 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2331-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort August 17, 2020 https://wiki.debian.org/LTS -...

DLA-2331-1 postgresql-9.6 - security update

Bulletin has no description...

HMS Industrial Networks eCatcher

1. EXECUTIVE SUMMARY CVSS v3 9.6 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: HMS Industrial Networks AB Equipment: eCatcher Vulnerability: Stack-based Buffer Overflow 2. RISK EVALUATION Successful exploitation of this vulnerability could crash the device being accessed. In...

Foxit Reader and PhantomPDF Buffer Overflow Vulnerability (CNVD-2020-32453)

Foxit Reader and Foxit PhantomPDF are both Chinese Foxit Foxit company a PDF document reader. A buffer overflow vulnerability exists in Foxit Reader versions prior to 9.6 and PhantomPDF versions prior to 9.6. The vulnerability originates when a networked system or product performs an operation in...

Foxit Reader and PhantomPDF code issue vulnerability (CNVD-2020-32452)

Foxit Reader and Foxit PhantomPDF are both Chinese Foxit Foxit company a PDF document reader. A code issue vulnerability exists in Foxit Reader versions prior to 9.6 and PhantomPDF versions prior to 9.6. An attacker could exploit this vulnerability to cause the application to crash...

CVE-2020-10620

Opto 22 SoftPAC Project Version 9.6 and prior. SoftPAC communication does not include any credentials. This allows an attacker with network access to directly communicate with SoftPAC, including, for example, stopping the service remotely...

Security Bulletin: Vulnerability in IBM Java Runtime affects Rational Business Developer

Summary There is a vulnerability in IBM® Runtime Environment Java™ Version 8 used by Rational Business Developer. Rational Business Developer has addressed the applicable CVE. The issue was disclosed as part of the IBM Java SDK and Runtime Environment updates in January 2020. Vulnerability Detail...

Debian: Security Advisory (DSA-4622-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-4622-1 : postgresql-9.6 - security update

Tom Lane discovered that 'ALTER ... DEPENDS ON EXTENSION' sub commands in the PostgreSQL database did not perform authorisation checks. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-4622. The text itself is...

[SECURITY] [DSA 4622-1] postgresql-9.6 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4622-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff February 13, 2020 https://www.debian.org/security/faq -...

CVE-2020-1720

A flaw was found in PostgreSQL's "ALTER ... DEPENDS ON EXTENSION", where sub-commands did not perform authorization checks. An authenticated attacker could use this flaw in certain configurations to perform drop objects such as function, triggers, et al., leading to database corruption. This issu...

DSA-4622-1 postgresql-9.6 - security update

Bulletin has no description...

CVE-2019-19254

CVE-2019-19254 affects GitLab Community Edition (CE) and Enterprise Edition (EE) from 9.6 up to 12.5, described as an Incorrect Access Control issue. The connected sources confirm the impacted versions and indicate a security release for GitLab 12.5.x (12.5.1) addressing the vulnerability; no exp...

Debian DSA-4492-1 : postgresql-9.6 - security update

A issue has been discovered in the PostgreSQL database system, which could result in privilege escalation. For additional information please refer to the upstream announcement at https://www.postgresql.org/about/news/1960/ C Tenable Network Security, Inc. The descriptive text and package checks i...

[SECURITY] [DSA 4492-1] postgresql-9.6 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4492-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff August 08, 2019 https://www.debian.org/security/faq -...