CVE-2021-22880

The PostgreSQL adapter in Active Record before 6.1.2.1, 6.0.3.5, 5.2.4.5 suffers from a regular expression denial of service REDoS vulnerability. Carefully crafted input can cause the input validation in the money type of the PostgreSQL adapter in Active Record to spend too much time in a regular...

CVE-2021-22880

The PostgreSQL adapter in Active Record before 6.1.2.1, 6.0.3.5, 5.2.4.5 suffers from a regular expression denial of service REDoS vulnerability. Carefully crafted input can cause the input validation in the money type of the PostgreSQL adapter in Active Record to spend too much time in a regular...

Denial of Service (DoS)

Overview rails is an opensource MVC web framework. Affected versions of this package are vulnerable to Denial of Service DoS. Carefully crafted input can cause the input validation in the money type of the PostgreSQL adapter in Active Record to spend too much time in a regular expression, resulti...

PostgreSQL Security Vulnerabilities

PostgreSQL is a free object-relational database management system organized by Postgresql. The system supports most of the SQL standards and provides many other features such as foreign keys, triggers, views, and so on. A security vulnerability exists in PostgreSQL, which can be exploited by an...

PostgreSQL 安全漏洞

PostgreSQL is a free object-relational database server database management system distributed under a flexible BSD-style license. An information disclosure vulnerability exists in PostgreSQL. An attacker could exploit the vulnerability could bypass access restrictions to data via privileges to...

Uncontrolled Resource Consumption

The PostgreSQL adapter in Active Record suffers from a regular expression denial of service REDoS vulnerability. Carefully crafted input can cause the input validation in the money type of the PostgreSQL adapter in Active Record to spend too much time in a regular expression, resulting in the...

KLA12088 Multiple vulnerabilities in PostgreSQL

Multiple vulnerabilities were found in PostgreSQL. Malicious users can exploit these vulnerabilities to bypass security restrictions, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A security bypass vulnerability in SELECT privilege can be exploited to bypass securi...

Postgresql PostgreSQL 资源管理错误漏洞

PostgreSQL is a free object-relational database management system organized by Postgresql. The system supports most of the SQL standards and provides many other features, such as foreign keys, triggers, views, etc. A resource management error vulnerability exists in PostgreSQL, which arises from...

PT-2021-5826 · Unknown +4 · Postgresql +4

Name of the Vulnerable Software and Affected Versions: Active Record versions prior to 6.1.2.1 Active Record versions prior to 6.0.3.5 Active Record versions prior to 5.2.4.5 Description: The PostgreSQL adapter in Active Record suffers from a regular expression denial of service REDoS...

Rails -- multiple vulnerabilities

Ruby on Rails blog: Rails version 5.2.4.5, 6.0.3.5 and 6.1.2.1 have been released! Those version are security releases and addresses two issues: CVE-2021-22880: Possible DoS Vulnerability in Active Record PostgreSQL adapter. CVE-2021-22881: Possible Open Redirect in Host Authorization Middleware...

Possible DoS Vulnerability in Active Record PostgreSQL adapter

There is a possible DoS vulnerability in the PostgreSQL adapter in Active Record. This vulnerability has been assigned the CVE identifier CVE-2021-22880. Versions Affected: = 4.2.0 Not affected: 4.2.0 Fixed Versions: 6.1.2.1, 6.0.3.5, 5.2.4.5 Impact ------ Carefully crafted input can cause the...

PT-2021-2222 · Unknown +3 · Postgresql +2

Name of the Vulnerable Software and Affected Versions: PostgreSQL versions prior to 13.2 PostgreSQL versions prior to 12.6 PostgreSQL versions prior to 11.11 PostgreSQL versions prior to 10.16 PostgreSQL versions prior to 9.6.21 PostgreSQL versions prior to 9.5.25 Description: A flaw was found in...

PT-2021-1982 · Unknown +10 · Postgresql +9

Name of the Vulnerable Software and Affected Versions: postgresql versions prior to 13.2 postgresql versions prior to 12.6 postgresql versions prior to 11.11 Description: An information leak was discovered in postgresql. A user with UPDATE permission but not SELECT permission to a particular colu...

Security Bulletin: IBM Data Risk Manager is affected by multiple vulnerabilities

Summary IBM Data Risk Manager has addressed the following vulnerabilities: Vulnerability Details CVEID: CVE-2020-14305 DESCRIPTION: Linux Kernel could allow a remote attacker to gain elevated privileges on the system, caused by an out-of-bounds memory write flaw in how the Voice Over IP H.323...

Huawei EulerOS: Security Advisory for postgresql-jdbc (EulerOS-SA-2021-1165)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CentOS 8 : postgresql:10 (CESA-2020:3669)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:3669 advisory. - postgresql: Selectivity estimators bypass row security policies CVE-2019-10130 - postgresql: Stack-based buffer overflow via setting a password...

CentOS 8 : postgresql:9.6 (CESA-2020:5619)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:5619 advisory. - postgresql: Selectivity estimators bypass row security policies CVE-2019-10130 - postgresql: TYPE in pgtemp executes arbitrary SQL during SECURITY...

EulerOS 2.0 SP8 : postgresql-jdbc (EulerOS-SA-2021-1165)

According to the version of the postgresql-jdbc package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A flaw was found in PostgreSQL JDBC in versions prior to 42.2.13. An XML External Entity XXE weakness was found in PostgreSQL JDBC. The...

CentOS 8 : postgresql:10 (CESA-2020:5567)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:5567 advisory. - postgresql: Reconnection can downgrade connection security settings CVE-2020-25694 - postgresql: Multiple features escape security restricted operati...

CentOS 8 : postgresql:12 (CESA-2020:5620)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:5620 advisory. - postgresql: Uncontrolled search path element in logical replication CVE-2020-14349 - postgresql: Uncontrolled search path element in CREATE EXTENSION...