250329 matches found
RHEL 8 : postgresql:15 (RHSA-2026:69923)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:69923 advisory. PostgreSQL is an advanced object-relational database management system DBMS. Security Fixes: postgresql: PostgreSQL: Arbitrary code executi...
AlmaLinux 8 : postgresql:16 (ALSA-2026:69876)
The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:69876 advisory. postgresql: PostgreSQL: Arbitrary code execution via integer wraparound in tsvector and tsquery functions CVE-2026-14662 postgresql: PostgreSQL: Arbitrar...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: git (UTSA-2023-000318)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-000318 advisory. Git is distributed revision control system. git log can display commits in an arbitrary format using its --format specifiers. This functionality is also exposed to g...
Important: postgresql:15 security update
PostgreSQL is an advanced object-relational database management system DBMS. Security Fixes: postgresql: PostgreSQL: Arbitrary code execution via integer wraparound in tsvector and tsquery functions CVE-2026-14662 postgresql: PostgreSQL: Arbitrary code execution via untrusted data inclusion in...
Important: postgresql:12 security update
PostgreSQL is an advanced object-relational database management system DBMS. Security Fixes: postgresql: PostgreSQL: Arbitrary code execution via integer wraparound in tsvector and tsquery functions CVE-2026-14662 postgresql: PostgreSQL psql: Arbitrary command execution via untrusted data in COPY...
Important: postgresql:15 security update
PostgreSQL is an advanced object-relational database management system DBMS. Security Fixes: postgresql: PostgreSQL: Arbitrary code execution via integer wraparound in tsvector and tsquery functions CVE-2026-14662 postgresql: PostgreSQL: Arbitrary code execution via untrusted data inclusion in...
PT-2026-96894
Name of the Vulnerable Software and Affected Versions Adobe Campaign Classic ACC affected versions not specified Description An Improper Control of Generation of Code issue allows for code injection, which could lead to arbitrary code execution within the context of the current user. This flaw ca...
postgresql: PostgreSQL: Arbitrary code execution via plperl tied hash heap buffer overflow
A flaw was found in PostgreSQL. A heap buffer overflow vulnerability exists in the plperl component when returning a tied hash. This allows a function owner to execute arbitrary code as the operating system user running the database by providing a specially crafted function body. This could lead ...
postgresql: PostgreSQL: Arbitrary code execution via type confusion in 'refint' module
A flaw was found in PostgreSQL. A type confusion vulnerability in the 'refint' module allows an object creator to execute arbitrary code as the operating system user running the database. This could lead to a complete compromise of the database server...
postgresql: PostgreSQL: Arbitrary code execution via type confusion with "internal" arguments
A type confusion vulnerability in PostgreSQL allows any user to execute arbitrary code as the database's operating system user by calling functions with mishandled "internal" data type arguments...
Important: Red Hat Security Advisory: postgresql:15 security update
An update for the postgresql:15 module is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating,...
postgresql: PostgreSQL: Arbitrary code execution via untrusted data inclusion in pg_dump
A vulnerability in PostgreSQL allows a malicious origin-server superuser to achieve client-side arbitrary code execution during a database restore. By injecting untrusted data into a pgdump export, the attacker can exploit the input expansion of the psql \restrict meta-command. When a victim...
postgresql: PostgreSQL: Arbitrary code execution via heap buffer overflow in regexp
A flaw was found in PostgreSQL. A heap buffer overflow vulnerability exists in the regexp component, which can be triggered by a query author providing text that does not pass encoding validation. This can lead to unanticipated data growth, allowing the attacker to execute arbitrary code as the...
UBUNTU-CVE-2026-79079
An issue in CrossWire Xiphos = 4.3.2 allows a local attacker to execute arbitrary code via the src/main/url.cc and src/gtk/menupopup.c components...
CVE-2026-79079
An issue in CrossWire Xiphos = 4.3.2 allows a local attacker to execute arbitrary code via the src/main/url.cc and src/gtk/menupopup.c components...
CVE-2026-88404
A remote code execution RCE vulnerability in the UniscriptExecutionService.execute function /services/script-execution.service.ts of Univer v1.0.0-alpha.2 allows attackers to execute arbitrary code via a crafted payload...
CVE-2026-49450 Joplin desktop Windows auto-updater accepts signed installer from any publisher because app-update.yml has no publisherName
Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Prior to 3.7.2, Joplin Desktop for Windows omits publisherName from packages/app-desktop/package.json, so the generated app-update.yml causes NsisUpdater.verifySignature to skip comparison of...
USN-8798-1 gst-plugins-good1.0 vulnerabilities
It was discovered that GStreamer Good Plugins incorrectly parsed certain MRF files. A remote attacker could possibly use this issue to execute arbitrary code. CVE-2026-18295, CVE-2026-18296 It was discovered that GStreamer Good Plugins incorrectly parsed certain PNG files. A remote attacker could...
USN-8797-1: GStreamer Base Plugins vulnerability
It was discovered that GStreamer Base Plugins incorrectly handled certain OGG media files. A remote attacker could possibly use this issue to execute arbitrary code if it opened a specially crafted file...
redis: Redis: Arbitrary code execution via TLS pending-data list use-after-free
A flaw was found in Redis. This vulnerability, a use-after-free, exists within the tlsProcessPendingData function, which manages the Transport Layer Security TLS pending-data list when Redis is configured with TLS support. A remote, unauthenticated attacker could exploit this to execute...