Lucene search
K

13254 matches found

OSV
OSV
added 2026/02/20 4:14 p.m.3 views

OPENSUSE-SU-2026:20265-1 Security update for postgresql14

This update for postgresql14 fixes the following issues: Update to version 14.21. Security issues fixed: - CVE-2026-2003: improper validation of type "oidvector" may allow disclose a few bytes of server memory bsc1258008. - CVE-2026-2004: intarray missing validation of type of input to selectivit...

8.8CVSS6.4AI score0.00678EPSS
Exploits3References12
OSV
OSV
added 2026/02/20 4:11 p.m.3 views

SUSE-SU-2026:20587-1 Security update for postgresql14

This update for postgresql14 fixes the following issues: Update to version 14.21. Security issues fixed: - CVE-2026-2003: improper validation of type "oidvector" may allow disclose a few bytes of server memory bsc1258008. - CVE-2026-2004: intarray missing validation of type of input to selectivit...

8.8CVSS6.4AI score0.00678EPSS
Exploits3References13
SUSE Linux
SUSE Linux
added 2026/02/20 10:5 a.m.5 views

Security update for postgresql16

This update for postgresql16 fixes the following issues: Update to version 16.12. Security issues fixed: CVE-2026-2003: improper validation of type "oidvector" may allow disclose a few bytes of server memory bsc1258008. CVE-2026-2004: intarray missing validation of type of input to selectivity...

8.8CVSS6.4AI score0.00678EPSS
Exploits3References16
SUSE Linux
SUSE Linux
added 2026/02/20 10:4 a.m.4 views

Security update for postgresql17

This update for postgresql17 fixes the following issues: Update to version 17.8. Security issues fixed: CVE-2026-2003: improper validation of type "oidvector" may allow disclose a few bytes of server memory bsc1258008. CVE-2026-2004: intarray missing validation of type of input to selectivity...

8.8CVSS6.4AI score0.00678EPSS
Exploits3References16
OSV
OSV
added 2026/02/20 10:4 a.m.2 views

SUSE-SU-2026:0586-1 Security update for postgresql17

This update for postgresql17 fixes the following issues: Update to version 17.8. Security issues fixed: - CVE-2026-2003: improper validation of type 'oidvector' may allow disclose a few bytes of server memory bsc1258008. - CVE-2026-2004: intarray missing validation of type of input to selectivity...

8.8CVSS6.3AI score0.00678EPSS
Exploits3References9
SUSE Linux
SUSE Linux
added 2026/02/20 10:3 a.m.5 views

Security update for postgresql18

This update for postgresql18 fixes the following issues: Update to version 18.2. Security issues fixed: CVE-2026-2003: improper validation of type "oidvector" may allow disclose a few bytes of server memory bsc1258008. CVE-2026-2004: intarray missing validation of type of input to selectivity...

8.8CVSS6.5AI score0.00678EPSS
Exploits3References20
SUSE Linux
SUSE Linux
added 2026/02/20 10:3 a.m.4 views

Security update for postgresql18

This update for postgresql18 fixes the following issues: Update to version 18.2. Security issues fixed: CVE-2026-2003: improper validation of type "oidvector" may allow disclose a few bytes of server memory bsc1258008. CVE-2026-2004: intarray missing validation of type of input to selectivity...

8.8CVSS6.5AI score0.00678EPSS
Exploits3References20
OSV
OSV
added 2026/02/20 10:3 a.m.1 views

SUSE-SU-2026:0584-1 Security update for postgresql18

This update for postgresql18 fixes the following issues: Update to version 18.2. Security issues fixed: - CVE-2026-2003: improper validation of type 'oidvector' may allow disclose a few bytes of server memory bsc1258008. - CVE-2026-2004: intarray missing validation of type of input to selectivity...

8.8CVSS6.4AI score0.00678EPSS
Exploits3References11
RedhatCVE
RedhatCVE
added 2026/02/20 1:22 a.m.4 views

CVE-2025-67304

In Ruckus Network Director RND 4.5.0.54, the OVA appliance contains hardcoded credentials for the ruckus PostgreSQL database user. In the default configuration, the PostgreSQL service is accessible over the network on TCP port 5432. An attacker can use the hardcoded credentials to authenticate...

9.8CVSS6AI score0.00481EPSS
Exploits1References1
Tenable Nessus
Tenable Nessus
added 2026/02/20 12:0 a.m.8 views

Tenable Security Center < 6.8.0 Multiple Vulnerabilities (TNS-2026-07)

According to its self-reported version, the Tenable Security Center running on the remote host is prior to 6.8.0. It is, therefore, affected by multiple vulnerabilities as referenced in the TNS-2026-07 advisory. - A flaw was found in the libssh implements abstract layer for message digest MD...

8.8CVSS6.8AI score0.01421EPSS
Exploits0References6
NVD
NVD
added 2026/02/19 8:25 p.m.5 views

CVE-2025-67304

In Ruckus Network Director RND 4.5.0.54, the OVA appliance contains hardcoded credentials for the ruckus PostgreSQL database user. In the default configuration, the PostgreSQL service is accessible over the network on TCP port 5432. An attacker can use the hardcoded credentials to authenticate...

9.8CVSS0.00481EPSS
Exploits1References2
CVE
CVE
added 2026/02/19 12:0 a.m.8 views

CVE-2025-67304

In Ruckus Network Director (RND) versions prior to 4.5.0.54, the OVA appliance ships with hardcoded credentials for the PostgreSQL database user. By default, PostgreSQL is exposed over the network on TCP port 5432, enabling remote authentication with these credentials. The resulting access grants...

9.8CVSS6AI score0.00481EPSS
Exploits1References2Affected Software1
Cvelist
Cvelist
added 2026/02/19 12:0 a.m.23 views

CVE-2025-67304

In Ruckus Network Director RND 4.5.0.54, the OVA appliance contains hardcoded credentials for the ruckus PostgreSQL database user. In the default configuration, the PostgreSQL service is accessible over the network on TCP port 5432. An attacker can use the hardcoded credentials to authenticate...

0.00481EPSS
Exploits1References2
Vulnrichment
Vulnrichment
added 2026/02/19 12:0 a.m.3 views

CVE-2025-67304

In Ruckus Network Director RND 4.5.0.54, the OVA appliance contains hardcoded credentials for the ruckus PostgreSQL database user. In the default configuration, the PostgreSQL service is accessible over the network on TCP port 5432. An attacker can use the hardcoded credentials to authenticate...

5.8AI score0.00481EPSS
Exploits1References2
CNNVD
CNNVD
added 2026/02/19 12:0 a.m.5 views

RUCKUS Network Director 安全漏洞

Ruckus Network Director is a wireless network monitoring software developed by Ruckus Corporation. Versions of Ruckus Network Director prior to 4.5.0.54 contained security vulnerabilities. These vulnerabilities stemmed from the OVA devices having hardcoded PostgreSQL database user credentials,...

9.8CVSS5.8AI score0.00481EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2026/02/19 12:0 a.m.5 views

PT-2026-20926

Name of the Vulnerable Software and Affected Versions RUCKUS Network Director versions prior to 4.5.0.56 Description RUCKUS Network Director RND OVA appliances include hardcoded SSH keys for the postgres user. These keys are consistent across all deployments. An attacker with network access can u...

9.8CVSS5.3AI score0.00494EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2026/02/19 12:0 a.m.4 views

PT-2026-20922

Name of the Vulnerable Software and Affected Versions Ruckus Network Director versions prior to 4.5.0.54 Description Ruckus Network Director RND contains hardcoded credentials for the PostgreSQL database user. By default, the PostgreSQL service is accessible over the network on TCP port 5432. An...

9.8CVSS5.7AI score0.00481EPSS
Exploits1References4
Github Security Blog
Github Security Blog
added 2026/02/18 10:36 p.m.14 views

Command Injection via Unsanitized `locate` Output in `versions()` — systeminformation

Command Injection via Unsanitized locate Output in versions — systeminformation Package: systeminformation npm Tested Version: 5.30.7 Affected Platform: Linux Author: Sebastian Hildebrandt Weekly Downloads: 5,000,000+ Repository: https://github.com/sebhildebrandt/systeminformation Severity: Mediu...

8.8CVSS6.1AI score0.00994EPSS
Exploits1References4Affected Software1
Tenable Product Security Advisories
Tenable Product Security Advisories
added 2026/02/18 1:32 p.m.7 views

[R2] Security Center Version 6.8.0 Fixes Multiple Vulnerabilities

R2 Security Center Version 6.8.0 Fixes Multiple Vulnerabilities Arnie Cabral Wed, 02/18/2026 - 08:32 Security Center leverages third-party software to help provide underlying functionality. Several of the third-party components libssh, postgresql were found to contain vulnerabilities, and updated...

8.8CVSS5.8AI score0.00209EPSS
Exploits0
Fedora
Fedora
added 2026/02/18 4:26 a.m.6 views

[SECURITY] Fedora 43 Update: pgadmin4-9.12-1.fc43

pgAdmin is the most popular and feature rich Open Source administration and d evelopment platform for PostgreSQL, the most advanced Open Source database in the world...

7.4CVSS5.5AI score0.00392EPSS
Exploits0
Rows per page
Query Builder