Lucene search
+L

52 matches found

osv_alpine
osv_alpine
•added 2026/08/13 1:17 p.m.•33 views

ALPINE-CVE-2026-16241

Integer underflow in PostgreSQL ECPG allows a database server administrator to achieve temporary denial of service against the ECPG client via sending a bytea value lacking the mandatory prefix. The client overwrites a huge memory region with bytes outside attacker knowledge or control. This...

3.8CVSS5.5AI score0.00335EPSS
SaveExploits0References1
NVD
NVD
•added 2026/08/13 1:17 p.m.•25 views

CVE-2026-16241

Integer underflow in PostgreSQL ECPG allows a database server administrator to achieve temporary denial of service against the ECPG client via sending a bytea value lacking the mandatory prefix. The client overwrites a huge memory region with bytes outside attacker knowledge or control. This...

3.8CVSS0.00335EPSS
SaveExploits0References1
osv_ubuntu
osv_ubuntu
•added 2026/08/13 1:17 p.m.•24 views

UBUNTU-CVE-2026-16241

Integer underflow in PostgreSQL ECPG allows a database server administrator to achieve temporary denial of service against the ECPG client via sending a bytea value lacking the mandatory prefix. The client overwrites a huge memory region with bytes outside attacker knowledge or control. This...

3.8CVSS5.5AI score0.00335EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve
•added 2026/08/13 1:17 p.m.•27 views

CVE-2026-16241

Integer underflow in PostgreSQL ECPG allows a database server administrator to achieve temporary denial of service against the ECPG client via sending a bytea value lacking the mandatory prefix. The client overwrites a huge memory region with bytes outside attacker knowledge or control. This...

3.8CVSS5.4AI score0.00335EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2026/08/13 1:00 p.m.•19 views

CVE-2026-16241 PostgreSQL ECPG integer underflow can crash the client

Integer underflow in PostgreSQL ECPG allows a database server administrator to achieve temporary denial of service against the ECPG client via sending a bytea value lacking the mandatory prefix. The client overwrites a huge memory region with bytes outside attacker knowledge or control. This...

3.8CVSS5.5AI score0.00335EPSS
SaveExploits0References1
Mend
Mend
•added 2026/08/13 1:00 p.m.•13 views

CVE-2026-16241

Integer underflow in PostgreSQL ECPG allows a database server administrator to achieve temporary denial of service against the ECPG client via sending a bytea value lacking the mandatory prefix. The client overwrites a huge memory region with bytes outside attacker knowledge or control. This...

5.1CVSS5.5AI score0.00335EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/08/13 1:00 p.m.•19 views

EUVD-2026-57850

Integer underflow in PostgreSQL ECPG allows a database server administrator to achieve temporary denial of service against the ECPG client via sending a bytea value lacking the mandatory prefix. The client overwrites a huge memory region with bytes outside attacker knowledge or control. This...

3.8CVSS5.5AI score0.00335EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/08/13 1:00 p.m.•85 views

CVE-2026-16241 PostgreSQL ECPG integer underflow can crash the client

Integer underflow in PostgreSQL ECPG allows a database server administrator to achieve temporary denial of service against the ECPG client via sending a bytea value lacking the mandatory prefix. The client overwrites a huge memory region with bytes outside attacker knowledge or control. This...

3.8CVSS0.00335EPSS
SaveExploits0References1
Debian CVE
Debian CVE
•added 2026/08/13 1:00 p.m.•16 views

CVE-2026-16241

Integer underflow in PostgreSQL ECPG allows a database server administrator to achieve temporary denial of service against the ECPG client via sending a bytea value lacking the mandatory prefix. The client overwrites a huge memory region with bytes outside attacker knowledge or control. This...

3.8CVSS5.5AI score0.00335EPSS
SaveExploits0
PostrgeSql
PostrgeSql
•added 2026/08/13 12:00 a.m.•213 views

Vulnerability in client (CVE-2026-16241)

PostgreSQL ECPG integer underflow can crash the client Integer underflow in PostgreSQL ECPG allows a database server administrator to achieve temporary denial of service against the ECPG client via sending a bytea value lacking the mandatory prefix. The client overwrites a huge memory region with...

3.8CVSS5.5AI score0.00335EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/13 12:00 a.m.•5 views

CVE-2026-16241: Integer Underflow (Wrap or Wraparound)

Integer underflow in PostgreSQL ECPG allows a database server administrator to achieve temporary denial of service against the ECPG client via sending a bytea value lacking the mandatory prefix. The client overwrites a huge memory region with bytes outside attacker knowledge or control. This...

3.8CVSS5.5AI score0.00335EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/08/13 12:00 a.m.•24 views

Linux Distros Unpatched Vulnerability : CVE-2026-16241

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Integer underflow in PostgreSQL ECPG allows a database server administrator to achieve temporary denial of service against the ECPG client via sending a bytea...

3.8CVSS5.5AI score0.00335EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/08/12 12:00 a.m.•19 views

PT-2026-71482

Name of the Vulnerable Software and Affected Versions PostgreSQL versions prior to 18.5 PostgreSQL versions prior to 17.11 PostgreSQL versions prior to 16.15 PostgreSQL versions prior to 15.19 PostgreSQL versions prior to 14.24 Description An integer underflow in the ECPG client allows a database...

8.8CVSS6.3AI score0.00595EPSS
SaveExploits0References201
NVD
NVD
•added 2026/07/30 1:16 p.m.•46 views

CVE-2026-54368

CentreStack before 17.4 contains a SQL injection vulnerability in GladDBFiles.SearchEx and SearchExUnder that allows authenticated attackers to execute arbitrary SQL statements by supplying a crafted x-glad-filter request header through the jsondir API endpoint. Attackers can exploit unsanitized...

8.8CVSS0.00706EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•15 views

EUVD-2009-1339

Malware in sbrugna...

5CVSS5.5AI score0.01969EPSS
SaveExploits1References20
Positive Technologies
Positive Technologies
•added 2023/12/12 12:00 a.m.•12 views

PT-2023-27797

Name of the Vulnerable Software and Affected Versions EnterpriseDB Postgres Advanced Server EPAS versions prior to 11.21.32 EnterpriseDB Postgres Advanced Server EPAS versions 12.x prior to 12.16.20 EnterpriseDB Postgres Advanced Server EPAS versions 13.x prior to 13.12.16 EnterpriseDB Postgres...

6.5CVSS6.5AI score0.00589EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2023/03/09 10:47 a.m.•23 views

postgresql-jdbc: Information leak of prepared statement data due to insecure temporary file permissions

A flaw was found in org.postgresql. This issue allows the creation of a temporary file when using PreparedStatement.setTextint, InputStream and PreparedStatemet.setByteaint, InputStream. This could allow a user to create an unexpected file available to all users, which could end in unexpected...

5.5CVSS6.8AI score0.00552EPSS
SaveExploits1References4
SUSE CVE
SUSE CVE
•added 2023/02/15 6:04 a.m.•13 views

SUSE CVE-2009-1341

Memory leak in the dequotebytea function in quote.c in the DBD::Pg aka DBD-Pg or libdbd-pg-perl module before 2.0.0 for Perl allows context-dependent attackers to cause a denial of service memory consumption by fetching data with BYTEA columns...

5CVSS6.8AI score0.01969EPSS
SaveExploits1References4
SUSE CVE
SUSE CVE
•added 2023/02/15 5:05 a.m.•12 views

SUSE CVE-2016-3065

The 1 brinpagetype and 2 brinmetapageinfo functions in the pageinspect extension in PostgreSQL before 9.5.x before 9.5.2 allows attackers to bypass intended access restrictions and consequently obtain sensitive server memory information or cause a denial of service server crash via a crafted byte...

9.1CVSS6.7AI score0.04052EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2022/12/09 12:00 a.m.•15 views

PgJDBC PreparedStatement Information Disclosure

The vulnerability in the implementation of PreparedStatement.setText or PreparedStatement.setBytea methods of the PgJDBC driver for connecting Java programs to PostgreSQL lies in the use of insecure temporary files. Exploiting this vulnerability could allow an attacker to disclose sensitive...

5.5CVSS6.2AI score0.00552EPSS
SaveExploits1References8Affected Software4
Rows per page
Query Builder