17360 matches found
TencentOS Server 3: postgresql:13 (TSSA-2026:0650)
The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0650 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...
Oracle Linux 10 : postgresql16 (ELSA-2026-27743)
The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-27743 advisory. 16.14-1.0.1 - Replace upstream reference Orabug: 37044148 16.14-1 - Update to 16.14 - Fix CVE-2026-6478 Tenable has extracted the preceding descripti...
TencentOS Server 3: postgresql:12 (TSSA-2026:0649)
The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0649 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...
Oracle Linux 10 : postgresql18 (ELSA-2026-27742)
The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-27742 advisory. 18.4-1.0.1 - Replace upstream reference 18.4-1 - Update to 18.4 - Fix CVE-2026-6478 Tenable has extracted the preceding description block directly fr...
TencentOS Server 3: postgresql:16 (TSSA-2026:0655)
The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0655 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...
MiracleLinux 9 : postgresql-jdbc-42.2.28-2.el9_8.2 (AXSA:2026-1287:03)
The remote MiracleLinux 9 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2026-1287:03 advisory. jdbc.postgresql.org: pgjdbc: Client-side Denial of Service via malicious SCRAM-SHA-256 authentication CVE-2026-42198 Tenable has extracted the preceding...
GO-2026-5940 KEDA has PostgreSQL connection string parameter injection via incomplete whitespace escaping in github.com/kedacore/keda
KEDA has PostgreSQL connection string parameter injection via incomplete whitespace escaping in github.com/kedacore/keda...
AWS-JDBC Wrapper: Privilege Escalation in Aurora PostgreSQL instance
Aurora PostgreSQL is a fully managed relational database engine that's compatible with PostgreSQL. The team has identified CVE-2026-11400, an issue in Aurora PostgreSQL using the AWS Advanced JDBC Wrapper Impact An issue in AWS Wrappers for Amazon Aurora PostgreSQL will allow for privilege...
EUVD-2026-34900
AWS-JDBC Wrapper: Privilege Escalation in Aurora PostgreSQL instance...
fundapp-capstone
FundFriends A fundraising platform — browse campaigns, create...
CVE-2026-9586
An unauthenticated SQL injection vulnerability exists in Sangoma Switchvox SMB Edition 8.3 104997. The /pa endpoint processes XML content beginning with and directly concatenates the user-controlled PhoneIP value into PostgreSQL queries without sanitization or parameterization. An unauthenticated...
CVE-2026-9586
An unauthenticated SQL injection vulnerability exists in Sangoma Switchvox SMB Edition 8.3 104997. The /pa endpoint processes XML content beginning with and directly concatenates the user-controlled PhoneIP value into PostgreSQL queries without sanitization or parameterization. An unauthenticated...
CVE-2026-9586 Unauthenticated SQL Injection Leading to Remote Code Execution in Switchvox SMB
An unauthenticated SQL injection vulnerability exists in Sangoma Switchvox SMB Edition 8.3 104997. The /pa endpoint processes XML content beginning with and directly concatenates the user-controlled PhoneIP value into PostgreSQL queries without sanitization or parameterization. An unauthenticated...
CVE-2026-9586 Unauthenticated SQL Injection Leading to Remote Code Execution in Switchvox SMB
An unauthenticated SQL injection vulnerability exists in Sangoma Switchvox SMB Edition 8.3 104997. The /pa endpoint processes XML content beginning with and directly concatenates the user-controlled PhoneIP value into PostgreSQL queries without sanitization or parameterization. An unauthenticated...
CVE-2026-9586
Sangoma Switchvox SMB Edition 8.3 (104997) is vulnerable to an unauthenticated SQL injection in the /pa endpoint. The endpoint processes XML content beginning with and directly concatenates the user-controlled PhoneIP value into PostgreSQL queries without sanitization or parameterization. A sing...
CVE-2026-62238
OpenRemote before 1.26.0 contain an authenticated SQL injection vulnerability in the datapoint crosstab export endpoint that constructs PostgreSQL queries by concatenating asset display names into raw SQL. An authenticated attacker with asset creation or rename permissions can inject SQL through...
EUVD-2026-45084
OpenRemote before 1.26.0 contain an authenticated SQL injection vulnerability in the datapoint crosstab export endpoint that constructs PostgreSQL queries by concatenating asset display names into raw SQL. An authenticated attacker with asset creation or rename permissions can inject SQL through...
Oracle Linux 10 : postgresql-jdbc (ELSA-2026-24348)
The remote Oracle Linux 10 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-24348 advisory. - Add tests for CVE-2026-42198 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has no...
