SUSE CVE-2026-116252

pgAdmin 4's materialized view refresh passed the target database's name to psql's --dbname argument unchanged. libpq treats a --dbname value containing "=" or a postgresql:// URI as a full connection string, whose keywords override the host, port and other settings pgAdmin had supplied. A databas...

CVE-2026-116252

pgAdmin 4's materialized view refresh passed the target database's name to psql's --dbname argument unchanged. libpq treats a --dbname value containing "=" or a postgresql:// URI as a full connection string, whose keywords override the host, port and other settings pgAdmin had supplied. A databas...

CVE-2026-116252

pgAdmin 4's materialized view refresh passed the target database's name to psql's --dbname argument unchanged. libpq treats a --dbname value containing "=" or a postgresql:// URI as a full connection string, whose keywords override the host, port and other settings pgAdmin had supplied. A databas...

EUVD-2026-114393

pgAdmin 4's materialized view refresh passed the target database's name to psql's --dbname argument unchanged. libpq treats a --dbname value containing "=" or a postgresql:// URI as a full connection string, whose keywords override the host, port and other settings pgAdmin had supplied. A databas...

CVE-2026-116252

pgAdmin 4 versions before 9.19 are vulnerable to a security flaw where the materialized view refresh function passes the target database's name to the psql command's --dbname argument without modification. Because libpq interprets values containing = or postgresql:// URIs as full connection strin...

CVE-2026-116252 pgAdmin 4: Materialized view refresh redirects its connection through a crafted database name

pgAdmin 4's materialized view refresh passed the target database's name to psql's --dbname argument unchanged. libpq treats a --dbname value containing "=" or a postgresql:// URI as a full connection string, whose keywords override the host, port and other settings pgAdmin had supplied. A databas...

CVE-2026-116252 pgAdmin 4: Materialized view refresh redirects its connection through a crafted database name

pgAdmin 4's materialized view refresh passed the target database's name to psql's --dbname argument unchanged. libpq treats a --dbname value containing "=" or a postgresql:// URI as a full connection string, whose keywords override the host, port and other settings pgAdmin had supplied. A databas...

PT-2026-134164

pgAdmin 4's materialized view refresh passed the target database's name to psql's --dbname argument unchanged. libpq treats a --dbname value containing "=" or a postgresql:// URI as a full connection string, whose keywords override the host, port and other settings pgAdmin had supplied. A databas...

CVE-2026-116252: pgadmin.org pgAdmin 4: pgAdmin 4's materialized view refresh passed the target database's name to psql's --dbname argument unchanged

pgAdmin 4's materialized view refresh passed the target database's name to psql's --dbname argument unchanged. libpq treats a --dbname value containing "=" or a postgresql:// URI as a full connection string, whose keywords override the host, port and other settings pgAdmin had supplied. A databas...

PT-2026-34647

A Generation of Error Message Containing Sensitive Information vulnerability in the Materialized View Refresh mechanism in Google BigQuery on Google Cloud Platform allows an authenticated user to potentially disclose sensitive data using a crafted materialized view that triggers a runtime error...

CVE-2026-3259: Generation of Error Message Containing Sensitive Information

A Generation of Error Message Containing Sensitive Information vulnerability in the Materialized View Refresh mechanism in Google BigQuery on Google Cloud Platform allows an authenticated user to potentially disclose sensitive data using a crafted materialized view that triggers a runtime error...

NewStart CGSL MAIN 7.02 : libpq Multiple Vulnerabilities (NS-SA-2025-0255)

The remote NewStart CGSL host, running version MAIN 7.02, has libpq packages installed that are affected by multiple vulnerabilities: - Incorrect control of environment variables in PostgreSQL PL/Perl allows an unprivileged database user to change sensitive process environment variables e.g. PATH...

EUVD-2023-45635

Malicious code in bioql PyPI...

Oracle Linux 8 : postgresql:10 (ELSA-2024-0956)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-0956 advisory. 10.23-4.0.1 - Resolves: CVE-2024-0985 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus h...