CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

261 matches found

Kitploit•added 2026/09/07 5:23 a.m.•6 views

bouncer-overflow

PgBouncer 崩溃 PoC 该仓库包含一个针对 PgBouncer 崩溃的本地概念验证，该崩溃由易受攻击的 PgBouncer 版本中的整数溢出引起。其中包含的 Docker 环境会构建 PgBouncer 1.25.1，启动 PostgreSQL 后端，启用 SCRAM-SHA-256 身份验证，并针对 PgBouncer 运行 poc.py。此内容仅用于受控实验室测试。请勿针对你不拥有或未经明确授权测试的系统运行。目录 poc.py - Python 概念验证客户端。 docker-compose.yml - 本地 PostgreSQL、PgBouncer 和 PoC...

5.9AI score

SaveExploits0

AstraLinux•added 2026/08/24 10:19 a.m.•8 views

Astra Linux – Vulnerability in pgbouncer

When PgBouncer is configured to use “cert” authentication, a man-in-the-middle attacker can inject arbitrary SQL queries when a connection is first established, despite the use of TLS certificate verification and encryption. This flaw affects PgBouncer versions prior to 1.16.1...

8.1CVSS7.4AI score0.01038EPSS

SaveExploits0References2

AstraLinux•added 2026/08/24 10:19 a.m.•4 views

Astra Linux – Vulnerability in pgbouncer

In PgBouncer, a password can be used after it has expired due to the fact that the authquery does not take into account Postgres’s VALID UNTIL value. This allows an attacker to log in with a password that is already expired...

9.8CVSS7.4AI score0.00347EPSS

SaveExploits0References2

OSV•added 2026/07/30 7:10 a.m.•6 views

CLEANSTART-2026-IY75033 Security fixes in pgbouncer 1.16.1-r0

Package pgbouncer version 1.16.1-r0 fixes 1 vulnerabilities: CVE-2021-3935...

8.1CVSS7.4AI score0.01038EPSS

SaveExploits0References1

OSV•added 2026/07/30 7:10 a.m.•6 views

CLEANSTART-2026-ES98761 Security fixes in pgbouncer 1.25.1-r0

Package pgbouncer version 1.25.1-r0 fixes 4 vulnerabilities: CVE-2026-6664, CVE-2026-6665, CVE-2026-6666, CVE-2026-6667...

9.8CVSS5.4AI score0.00698EPSS

SaveExploits2References1

Redos•added 2026/07/14 12:00 a.m.•12 views

ROS-20260714-73-0050

The vulnerability of the strlcat function in PostgreSQL PgBouncer software-related connectivity libraries is related to the issue of operations going beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code or cause service...

9.8CVSS7.3AI score0.00372EPSS

SaveExploits0

Redos•added 2026/07/13 12:00 a.m.•13 views

ROS-20260713-73-0045

The vulnerability of the mbufgetbytes and mbufgetchars functions in PostgreSQL’s PgBouncer connection pool lies in integer overflow. Exploiting this vulnerability could allow a malicious actor to cause a service failure by sending a specially crafted authentication packet called SCRAM...

7.5CVSS7.1AI score0.00698EPSS

SaveExploits1

Information Security Automation•added 2026/06/02 11:00 a.m.•17 views

May Linux Patch Wednesday

May Linux Patch Wednesday. A total of 1,638 vulnerabilities 474 in the Linux kernel. For comparison, in April there were 1,035 vulnerabilities a record!. And this time it turns out to be a record again, more than one and a half times higher! The acceleration is both impressive and alarming. But w...

9.8CVSS7.8AI score0.99907EPSS

SaveExploits385