201 matches found
EUVD-2015-7424
Malware in sbrugna...
EUVD-2024-2315
Malicious code in bioql PyPI...
EUVD-2024-1856
Malicious code in bioql PyPI...
EUVD-2025-19856
Malicious code in bioql PyPI...
EUVD-2025-19859
Malicious code in bioql PyPI...
geminabox
It is an offensive tool for RubyGem hosting. The repository contains a simple RubyGem hosting system called Gem in a Box. It allows users to host their own RubyGems, and it includes features such as user authentication, gem versioning, and a web interface for browsing and downloading gems. The to...
RHEL 9 : postgresql (RHSA-2025:14869)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:14869 advisory. PostgreSQL is an advanced object-relational database management system DBMS. Security Fixes: postgresql: PostgreSQL executes arbitrary code...
Linux Distros Unpatched Vulnerability : CVE-2025-46337
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ADOdb is a PHP database class library that provides abstractions for performing queries and managing databases. Prior to version 5.22.9, improper escaping of a...
Linux Distros Unpatched Vulnerability : CVE-2016-8640
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A SQL injection vulnerability in pycsw all versions before 2.0.2, 1.10.5 and 1.8.6 that leads to read and extract of any data from any table in the pycsw databa...
CVE-2025-8713 affecting package postgresql for versions less than 14.19-1
CVE-2025-8713 affecting package postgresql for versions less than 14.19-1. An upgraded version of the package is available that resolves this issue...
RLSA-2024:0974 Important: postgresql:12 security update
PostgreSQL is an advanced object-relational database management system DBMS. Security Fixes: postgresql: non-owner 'REFRESH MATERIALIZED VIEW CONCURRENTLY' executes arbitrary SQL CVE-2024-0985 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and oth...
Endress+Hauser MEAC300-FNADE4 Information Disclosure Vulnerability
The Endress+Hauser MEAC300-FNADE4 is a cost-effective emissions data management computer from Endress+Hauser Vietnam. The Endress+Hauser MEAC300-FNADE4 suffers from an information disclosure vulnerability that originates from local PostgreSQL database credentials stored in plaintext. An attacker...
CVE-2025-1708
The application is vulnerable to SQL injection attacks. An attacker is able to dump the PostgreSQL database and read its content...
CVE-2025-1709
Several credentials for the local PostgreSQL database are stored in plain text partially base64 encoded...
CVE-2025-1709 CVE-2025-1709
Several credentials for the local PostgreSQL database are stored in plain text partially base64 encoded...
CVE-2025-1709 CVE-2025-1709
Several credentials for the local PostgreSQL database are stored in plain text partially base64 encoded...
CVE-2025-1709
CVE-2025-1709 concerns Endress+Hauser MEAC300-FNADE4: information disclosure caused by local PostgreSQL credentials stored in plaintext (partially base64 encoded). Several connected sources reiterate that credentials are exposed, impacting confidentiality. Root cause: credentials stored in plaint...
CVE-2025-1708 CVE-2025-1708
The application is vulnerable to SQL injection attacks. An attacker is able to dump the PostgreSQL database and read its content...
CVE-2025-1708
CVE-2025-1708 affects the Endress+Hauser MEAC300-FNADE4 (Endress+Hauser) through an SQL injection vulnerability. The included documents consistently describe that an attacker can exploit improper validation to dump/read data from the PostgreSQL back-end database (and potentially view/add/modify/d...