TencentOS Server 3: python-sqlalchemy (TSSA-2022:0183)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2022:0183 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

Linux Distros Unpatched Vulnerability : CVE-2019-7164

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - SQLAlchemy through 1.2.17 and 1.3.x through 1.3.0b2 allows SQL Injection via the orderby parameter. CVE-2019-7164 Note that Nessus relies on the presence of the...

RHEL 6 : calamari-server (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - python-sqlalchemy: SQL Injection when the orderby parameter can be controlled CVE-2019-7164 Note that Nessus has no...

RHEL 7 : calamari-server (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - python-sqlalchemy: SQL Injection when the orderby parameter can be controlled CVE-2019-7164 Note that Nessus has no...

RHEL 6 : python-sqlalchemy (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - python-sqlalchemy: SQL Injection when the orderby parameter can be controlled CVE-2019-7164 - SQLAlchemy...

RHEL 7 : python-sqlalchemy (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - python-sqlalchemy: SQL Injection when the orderby parameter can be controlled CVE-2019-7164 - SQLAlchemy...

Rocky Linux 8 : python27:2.7 (RLSA-2019:0981)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2019:0981 advisory. - SQLAlchemy through 1.2.17 and 1.3.x through 1.3.0b2 allows SQL Injection via the orderby parameter. CVE-2019-7164 - SQLAlchemy 1.2.17 has SQL Injectio...

Rocky Linux 8 : python36:3.6 (RLSA-2019:0984)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2019:0984 advisory. - SQLAlchemy through 1.2.17 and 1.3.x through 1.3.0b2 allows SQL Injection via the orderby parameter. CVE-2019-7164 - SQLAlchemy 1.2.17 has SQL Injectio...

FreeBSD : py39-sqlalchemy11 -- multiple SQL Injection vulnerabilities (8ccff771-ceca-43a0-85ad-3e595e73b425)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 8ccff771-ceca-43a0-85ad-3e595e73b425 advisory. - SQLAlchemy through 1.2.17 and 1.3.x through 1.3.0b2 allows SQL Injection via the orderby...

FreeBSD : py39-sqlalchemy12 -- multiple SQL Injection vulnerabilities (d2293e22-4390-42c2-a323-34cca2066000)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the d2293e22-4390-42c2-a323-34cca2066000 advisory. - SQLAlchemy through 1.2.17 and 1.3.x through 1.3.0b2 allows SQL Injection via the orderby...

Debian DLA-2811-1 : sqlalchemy - LTS security update

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2811 advisory. - SQLAlchemy through 1.2.17 and 1.3.x through 1.3.0b2 allows SQL Injection via the orderby parameter. CVE-2019-7164 - SQLAlchemy 1.2.17 has SQL Injection when the...

CentOS 8 : python36:3.6 (CESA-2019:0984)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2019:0984 advisory. - python-sqlalchemy: SQL Injection when the orderby parameter can be controlled CVE-2019-7164 - python-sqlalchemy: SQL Injection when the groupby...

CentOS 8 : python27:2.7 (CESA-2019:0981)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2019:0981 advisory. - python-sqlalchemy: SQL Injection when the orderby parameter can be controlled CVE-2019-7164 - python-sqlalchemy: SQL Injection when the groupby...

CVE-2019-7164

SQLAlchemy through 1.2.17 and 1.3.x through 1.3.0b2 allows SQL Injection via the orderby parameter...

openSUSE: Security Advisory for python-SQLAlchemy (openSUSE-SU-2019:2064-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Updated python-sqlalchemy packages fix security vulnerabilities

Updated python-sqlalchemy packages fix security vulnerabilities: SQL Injection via the orderby parameter CVE-2019-7164. SQL Injection via the groupby parameter CVE-2019-7548...

SUSE SLED15 / SLES15 Security Update : python-SQLAlchemy (SUSE-SU-2019:2253-2)

This update for python-SQLAlchemy fixes the following issues : Security issues fixed : CVE-2019-7164: Fixed SQL Injection via the orderby parameter bsc1124593. CVE-2019-7548: Fixed SQL Injection via the groupby parameter bsc1124593. Note that Tenable Network Security has extracted the preceding...

SUSE-SU-2019:2253-2 Security update for python-SQLAlchemy

This update for python-SQLAlchemy fixes the following issues: Security issues fixed: - CVE-2019-7164: Fixed SQL Injection via the orderby parameter bsc1124593. - CVE-2019-7548: Fixed SQL Injection via the groupby parameter bsc1124593...

SUSE-SU-2019:2374-1 Security update for python-SQLAlchemy

This update for python-SQLAlchemy fixes the following issues: Security issues fixed: - CVE-2019-7164: Fixed SQL Injection via the orderby parameter bsc1124593. - CVE-2019-7548: Fixed SQL Injection via the groupby parameter bsc1124593...

SUSE-SU-2019:2350-1 Security update for python-SQLAlchemy

This update for python-SQLAlchemy fixes the following issues: Security issues fixed: - CVE-2019-7164: Fixed SQL Injection via the orderby parameter bsc1124593. - CVE-2019-7548: Fixed SQL Injection via the groupby parameter bsc1124593...