94293 matches found
[SECURITY] Fedora 44 Update: perl-DBI-1.652-1.fc44
DBI is a database access Application Programming Interface API for the Perl Language. The DBI API Specification defines a set of functions, variables and conventions that provide a consistent database interface independent of the actual database being used...
[SECURITY] Fedora 44 Update: python-alembic-1.19.1-1.fc44
Alembic is a database migration tool written by the author of SQLAlchemy. A migrations tool offers the following functionality: =E2=80=A2 Can emit ALTER statements to a database in order to change the stru cture of tables and other constructs =E2=80=A2 Provides a system whereby "migration scripts...
[SECURITY] Fedora 43 Update: python-sqlalchemy-2.0.52-1.fc43
SQLAlchemy is an Object Relational Mapper ORM that provides a flexible, high-level interface to SQL databases. Database and domain concepts are decoupled, allowing both sides maximum flexibility and power. SQLAlchemy provides a powerful mapping layer that can work as automatically or as manual ly...
[SECURITY] Fedora 43 Update: python-alembic-1.19.1-1.fc43
Alembic is a database migration tool written by the author of SQLAlchemy. A migrations tool offers the following functionality: =E2=80=A2 Can emit ALTER statements to a database in order to change the stru cture of tables and other constructs =E2=80=A2 Provides a system whereby "migration scripts...
EUVD-2026-63624
Improper neutralization of special elements used in an sql command 'sql injection' in Azure SQL Database allows an authorized attacker to elevate privileges over a network...
EUVD-2026-63690
Improper neutralization of special elements used in an sql command 'sql injection' in Azure SQL Database allows an authorized attacker to elevate privileges over a network...
EUVD-2026-63622
Improper access control in Azure SQL Database allows an authorized attacker to elevate privileges over a network...
PT-2026-79397
The Brushfire platform's video content streaming application https://online.brushfire.com exposes database path in requests to users, allowing a remote, unauthenticated attacker to read information about other users. Fixed February 2026...
PT-2026-79498
Name of the Vulnerable Software and Affected Versions Arc Enterprise versions prior to 26.06.1 Description Arc Enterprise's Raft FSM Finite State Machine in the applyRegisterFile function accepts attacker-chosen file paths in manifest-registration proposals without validating them against the...
CVE-2026-75928: Exposure of Sensitive System Information to an Unauthorized Control Sphere
The Brushfire platform's video content streaming application https://online.brushfire.com exposes database path in requests to users, allowing a remote, unauthenticated attacker to read information about other users. Fixed February 2026...
PT-2026-79499
Name of the Vulnerable Software and Affected Versions Arc Enterprise versions prior to 26.06.1 Description The cluster replication receiver at internal/cluster/replication/receiver.go validates only the wire-format envelope of inbound messages. The MsgReplicateSync payload is accepted without...
PT-2026-79396
Name of the Vulnerable Software and Affected Versions Azure SQL Database affected versions not specified Description Server-side request forgery SSRF allows an unauthorized attacker to elevate privileges over a network. SSRF is a flaw where an attacker can induce the server-side application to ma...
CVE-2026-69502: Server-Side Request Forgery (SSRF)
Server-side request forgery ssrf in Azure SQL Database allows an unauthorized attacker to elevate privileges over a network...
PT-2026-79320
Name of the Vulnerable Software and Affected Versions Apache CloudStack versions 4.0.0 through 4.20.3.0 Apache CloudStack versions 4.21.0.0 through 4.22.1.0 Description Sensitive information is stored in cleartext within the database when using AsyncJob storage. Recommendations Upgrade Apache...
CVE-2026-59657: Cleartext Storage of Sensitive Information
Cleartext Storage of Sensitive Information vulnerability in Apache CloudStack with AsyncJob storage in the database. This issue affects Apache CloudStack: from 4.0.0 through 4.20.3.0 and from 4.21.0.0 through 4.22.1.0. Users are recommended to upgrade to version 4.20.3.1 or 4.22.1.1 or later, whi...
Zabbix Server 7.4.x < 7.4.11 Authentication Bypass (ZBX-28071)
The version of Zabbix Server installed on the remote host is 7.4.x prior to 7.4.11. It is, therefore, affected by an authentication bypass vulnerability: - The cryptographic key used for signing Frontend sessions has been erroneously written to the database seed. In deployments that utilize both...
Cisco Unified Intelligence Center < 12.6 / 12.6.x < 12.6(2) ES08 / 15.0.x < 15.0(1) SU2 SQL Injection (cisco-sa-cuic-sql-inject-2qbfWSm5)
A vulnerability in the web-based management interface of Cisco Unified Intelligence Center could allow an authenticated, local attacker to perform a blind SQL injection attack against an affected device. This vulnerability is due to insufficient validation of user-supplied input. An attacker coul...
CVE-2026-72860
creationtimestamp| type| source ---|---|--- 2026-08-20 23:01:35+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtke26um3722...
