BIT-POSTGRESQL-2026-14673 PostgreSQL amcheck does not clear untrusted search path

Untrusted search path in PostgreSQL amcheck allows a grantee of amcheck function EXECUTE privilege to execute arbitrary functions as the owners of expression indexes that depend on the search path, via setting a hostile search path before calling the amcheck function. Within major versions 18, 16...

EUVD-2004-0454

Malware in sbrugna...

CVE-2025-46580

There is a code-related vulnerability in the GoldenDB database product. Attackers can access system tables to disrupt the normal operation of business SQL...

[SECURITY] [DSA 5795-1] python-sql security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5795-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff October 21, 2024 https://www.debian.org/security/faq -...

KB4527378 - Cumulative Update 11 for SQL Server 2016 SP2

KB4527378 - Cumulative Update 11 for SQL Server 2016 SP2 Release Date: December 09, 2019 Version: 13.0.5598.27 This article describes Cumulative Update package 11 CU11 build number: 13.0.5598.27 for Microsoft SQL Server 2016 Service Pack 2 SP2. This update contains fixes that were released after...

KB4488535 - Cumulative Update 14 for SQL Server 2016 SP1

KB4488535 - Cumulative Update 14 for SQL Server 2016 SP1 Release Date: March 19, 2019 Version: 13.0.4560.0 This article describes cumulative update package 14 build number: 13.0.4560.0 for Microsoft SQL Server 2016 Service Pack 1 SP1. This update contains fixes that were released after the releas...

KB4459676 - Cumulative Update 11 for SQL Server 2016 SP1

KB4459676 - Cumulative Update 11 for SQL Server 2016 SP1 Release Date: September 17, 2018 Version: 13.0.4528.0 This article describes cumulative update package 11 build number: 13.0.4528.0 for Microsoft SQL Server 2016 Service Pack 1 SP1. This update contains fixes that were released after the...

KB4100997 - Cumulative Update 9 for SQL Server 2016 SP1

KB4100997 - Cumulative Update 9 for SQL Server 2016 SP1 Release Date: May 30, 2018 Version: 13.0.4502.0 This article describes cumulative update package 9 build number: 13.0.4502.0 for Microsoft SQL Server 2016 Service Pack 1 SP1. This update contains fixes that were released after the release of...

KB4057119 - Cumulative Update 7 for SQL Server 2016 SP1

KB4057119 - Cumulative Update 7 for SQL Server 2016 SP1 Release Date: January 04, 2018 Version: 13.0.4466.4 Cumulative Update 7 CU7 for Microsoft SQL Server 2016 Service Pack 1 SP1 was also released as a SQL Server Security Bulletin on January 4, 2018, KB4058561. See KB4058561 for more informatio...

CVE-2024-23751

LlamaIndex aka llamaindex through 0.9.34 allows SQL injection via the Text-to-SQL feature in NLSQLTableQueryEngine, SQLTableRetrieverQueryEngine, NLSQLRetriever, RetrieverQueryEngine, and PGVectorSQLQueryEngine. For example, an attacker might be able to delete this year's student records via "Dro...

PT-2022-16041 · Cube-Js · Cube-Js

Name of the Vulnerable Software and Affected Versions: cube-js version 0.31.23 Description: The issue concerns a headless business intelligence platform where all authenticated clients could bypass SQL row-level security and run arbitrary SQL via the /v1/sql-runner endpoint. This was resolved in...

Debian: Security Advisory (DLA-2882-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Privilege Escalation

MySQL is vulnerable to Privilege Escalation. A flaw was discovered in the mysqlchangedb function when returning from SQL SECURITY INVOKER stored routines. An authenticated user could use this flaw to gain database privileges...

Ubuntu Update for mysql-dfsg-5.0 vulnerabilities USN-588-1

Ubuntu Update for Linux kernel vulnerabilities USN-588-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN5881.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for mysql-dfsg-5.0 vulnerabilities USN-588-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

CVE-2007-6303: Undefined Security Weakness

MySQL 5.0.x before 5.0.51a, 5.1.x before 5.1.23, and 6.0.x before 6.0.4 does not update the DEFINER value of a view when the view is altered, which allows remote authenticated users to gain privileges via a sequence of statements including a CREATE SQL SECURITY DEFINER VIEW statement and an ALTER...

CVE-2007-2692: Undefined Security Weakness

The mysqlchangedb function in MySQL 5.0.x before 5.0.40 and 5.1.x before 5.1.18 does not restore THD::dbaccess privileges when returning from SQL SECURITY INVOKER stored routines, which allows remote authenticated users to gain privileges...

MySQL 4/5 - SUID Routine Miscalculation Arbitrary DML Statement Execution

source: https://www.securityfocus.com/bid/19559/info MySQL is prone to these vulnerabilities: - A privilege-elevation vulnerability. A user with privileges to execute SUID routines may gain elevated privileges by executing certain commands and code with higher privileges. - A security-bypass...

Hydra: MS SQL

This plugin runs Hydra to find MS SQL passwords by brute force. To use this plugin, enter the 'Logins file' and the 'Passwords file' under the 'Hydra NASL wrappers options' advanced settings block. TRUSTED...

Debian DSA-523-1 : www-sql - buffer overflow

Ulf Harnhammar discovered a buffer overflow vulnerability in www-sql, a CGI program which enables the creation of dynamic web pages by embedding SQL statements in HTML. By exploiting this vulnerability, a local user could cause the execution of arbitrary code by creating a web page and processing...