PT-2020-6672 · Postgresql +9 · Postgresql Jdbc Driver +9

Name of the Vulnerable Software and Affected Versions: PostgreSQL JDBC Driver aka PgJDBC versions prior to 42.2.13 Description: The issue is related to the incorrect restriction of XML external entities, which can lead to XXE attacks. A remote attacker can exploit this to conduct XXE attacks...

PostgreSQL JDBC Man-in-the-Middle Security Bypass Vulnerability

PostgreSQL JDBC is a database driver. A security vulnerability exists in PostgreSQL JDBC versions prior to 42.2.5 that stems from the Postgres JDBC driver not verifying host names by default. An attacker could exploit this vulnerability by presenting credentials to the wrong host to spoof a trust...

DEBIAN-CVE-2018-10936

A weakness was found in postgresql-jdbc before version 42.2.5. It was possible to provide an SSL Factory and not check the host name if a host name verifier was not provided to the driver. This could lead to a condition where a man-in-the-middle attacker could masquerade as a trusted server by...

@folk-org/js-dav (>=1.0.0, <=1.0.3), @lettercms/models (>=0.0.1, <=0.0.12) +187 more potentially affected by CVE-2017-16082 via pg (>=4.0.0, <=4.5.6)

pg NPM version =4.0.0, =1.0.0, =0.0.1, =1.0.1, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.15 and more Source cves: CVE-2017-16082 Source advisory: OSV:GHSA-WC9V-MJ63-M9G5...

MGASA-2015-0175 Updated quassel packages fix CVE-2015-3427

Updated quassel packages fix security vulnerability: Quassel is vulnerable to SQL injection through its use of Qt's postgres driver. If the PostgreSQL server is restarted or the connection is lost at any point, other IRC users may be able to trick the Quassel core into executing SQL queries upon...

perl-DBD-Pg: dequote_bytea memory leak

Memory leak in the dequotebytea function in quote.c in the DBD::Pg aka DBD-Pg or libdbd-pg-perl module before 2.0.0 for Perl allows context-dependent attackers to cause a denial of service memory consumption by fetching data with BYTEA columns...