Lucene search
+L

188744 matches found

RedHat Linux
RedHat Linux
•added 2026/09/23 4:18 p.m.•4 views

postgresql: PostgreSQL: Arbitrary code execution via type confusion with "internal" arguments

A type confusion vulnerability in PostgreSQL allows any user to execute arbitrary code as the database's operating system user by calling functions with mishandled "internal" data type arguments...

8.8CVSS6.5AI score0.00423EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2026/09/23 4:18 p.m.•4 views

postgresql: PostgreSQL: Stack buffer overflow via OUT parameter count manipulation

A flaw was found in PostgreSQL. An object creator can exploit a stack buffer overflow vulnerability within the argument name matching component. By manipulating the OUT parameter count, an attacker can write limited arbitrary bytes 0x0 and 0x1 to server memory, which may lead to unknown impacts...

8.2CVSS6.1AI score0.00293EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2026/09/23 4:18 p.m.•4 views

postgresql: PostgreSQL: Arbitrary code execution via type confusion in cursor lifecycle

A flaw was found in PostgreSQL. This vulnerability, caused by type confusion in the 'portal'/cursor lifecycle, allows a user to execute arbitrary code as the operating system user running the database. This can occur by re-creating a cursor or other portal with different types. Successful...

8.8CVSS6.4AI score0.00683EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2026/09/23 4:18 p.m.•6 views

postgresql: PostgreSQL psql: Arbitrary command execution via untrusted data in COPY FROM STDIN

A flaw was found in PostgreSQL psql. During the COPY FROM STDIN operation, untrusted data can be mistakenly interpreted as psql commands if an error injection causes the command to fail prematurely. This could allow an attacker to achieve arbitrary command execution. Successful exploitation...

8.1CVSS5.9AI score0.00358EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2026/09/23 4:18 p.m.•3 views

postgresql-fuzzystrmatch: PostgreSQL fuzzystrmatch: Arbitrary code execution via integer wraparound

A flaw was found in PostgreSQL fuzzystrmatch. A low-privileged database user can exploit an integer wraparound vulnerability by providing extreme inputs to the levenshtein or levenshteinlessequal SQL functions. This allows the user to execute arbitrary code as the operating system user running th...

8.8CVSS6.4AI score0.00555EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2026/09/23 4:18 p.m.•4 views

postgresql: PostgreSQL: Arbitrary code execution via heap buffer overflow in regexp

A flaw was found in PostgreSQL. A heap buffer overflow vulnerability exists in the regexp component, which can be triggered by a query author providing text that does not pass encoding validation. This can lead to unanticipated data growth, allowing the attacker to execute arbitrary code as the...

8.8CVSS6.7AI score0.00436EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2026/09/23 4:18 p.m.•4 views

postgresql: PostgreSQL: Information disclosure via type confusion in ctid selectivity estimator

A flaw was found in PostgreSQL. This vulnerability, stemming from a type confusion issue in the ctid data type selectivity estimator, could allow an authenticated object creator to access and potentially recover sensitive information from memory. By manipulating input, an attacker could gain...

8.1CVSS5.8AI score0.00334EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2026/09/23 4:18 p.m.•4 views

postgresql: PostgreSQL: Arbitrary code execution via plperl tied hash heap buffer overflow

A flaw was found in PostgreSQL. A heap buffer overflow vulnerability exists in the plperl component when returning a tied hash. This allows a function owner to execute arbitrary code as the operating system user running the database by providing a specially crafted function body. This could lead ...

8.8CVSS6.7AI score0.00436EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2026/09/23 4:18 p.m.•4 views

postgresql: PostgreSQL: Arbitrary code execution via logical decoding plugin

A flaw was found in PostgreSQL. Missing authorization in PostgreSQL's logical decoding feature allows a non-superuser with REPLICATION privilege to load arbitrary files. This can lead to arbitrary code execution as the operating system account running the server...

7.2CVSS6.2AI score0.00528EPSS
SaveExploits1References5
RedHat Linux
RedHat Linux
•added 2026/09/23 4:18 p.m.•5 views

postgresql: PostgreSQL: Arbitrary code execution via type confusion in 'refint' module

A flaw was found in PostgreSQL. A type confusion vulnerability in the 'refint' module allows an object creator to execute arbitrary code as the operating system user running the database. This could lead to a complete compromise of the database server...

8.8CVSS6.4AI score0.00423EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2026/09/23 3:05 p.m.•5 views

gstreamer1-plugins-good: gstreamer: out-of-bounds read in avidemux vprp video field descriptor parsing

A flaw was found in GStreamer gst-plugins-good avidemux. In gstavidemuxriffparsevprp, the number of available gstriffvprpvideofielddesc entries is calculated by dividing the remaining buffer size by the attacker-controlled vprp-fields value, rather than by sizeofgstriffvprpvideofielddesc. This ca...

6.1CVSS6AI score0.00148EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
•added 2026/09/23 3:05 p.m.•5 views

gstreamer1-plugins-good: gst-plugins-good: unbounded memory growth in rtph264depay and rtph265depay RTP depayloaders

A flaw was found in the GStreamer gst-plugins-good package. The rtph264depay and rtph265depay RTP depayloader elements do not enforce a maximum size limit on the reassembly buffer used during fragmented RTP packet processing. A remote, unauthenticated attacker can send a continuous stream of RTP...

7.5CVSS7.3AI score0.00961EPSS
SaveExploits0References7
AlpineLinux
AlpineLinux
•added 2026/09/23 2:32 p.m.•6 views

CVE-2026-92164

Streamlink is a CLI utility which pipes video streams from various services into a video player. Prior to 8.6.0, HTTPSession mounts a FileAdapter for the file scheme and inherits redirect handling from requests.Session without rejecting cross-protocol redirects. A remote server controlling an HTT...

6.5CVSS5.8AI score0.00267EPSS
SaveExploits0
RedHat Linux
RedHat Linux
•added 2026/09/23 2:12 p.m.•10 views

unbound: Unbound: Heap buffer overflow via malicious DNSSEC response

A flaw was found in Unbound. This vulnerability allows a remote attacker to cause a heap buffer overflow during the processing of DNSSEC responses. By sending a specially crafted DNSSEC response, a malicious server or an attacker tampering with network traffic can trigger this flaw. This could le...

7.5CVSS6.2AI score0.0048EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2026/09/23 2:12 p.m.•5 views

postgresql: PostgreSQL pg_dump: Arbitrary code execution via crafted transform lists

A flaw was found in PostgreSQL pgdump. A heap buffer overflow vulnerability exists when processing long function transform lists. An authenticated object creator can exploit this by providing a specially crafted transform list. This allows the attacker to execute arbitrary code as the operating...

8.8CVSS6.7AI score0.00427EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2026/09/23 2:12 p.m.•5 views

postgresql: PostgreSQL: Arbitrary code execution via type confusion in cursor lifecycle

A flaw was found in PostgreSQL. This vulnerability, caused by type confusion in the 'portal'/cursor lifecycle, allows a user to execute arbitrary code as the operating system user running the database. This can occur by re-creating a cursor or other portal with different types. Successful...

8.8CVSS6.4AI score0.00683EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2026/09/23 2:12 p.m.•4 views

postgresql-fuzzystrmatch: PostgreSQL fuzzystrmatch: Arbitrary code execution via integer wraparound

A flaw was found in PostgreSQL fuzzystrmatch. A low-privileged database user can exploit an integer wraparound vulnerability by providing extreme inputs to the levenshtein or levenshteinlessequal SQL functions. This allows the user to execute arbitrary code as the operating system user running th...

8.8CVSS6.4AI score0.00555EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2026/09/23 2:12 p.m.•3 views

postgresql: PostgreSQL psql: Arbitrary command execution via untrusted data in COPY FROM STDIN

A flaw was found in PostgreSQL psql. During the COPY FROM STDIN operation, untrusted data can be mistakenly interpreted as psql commands if an error injection causes the command to fail prematurely. This could allow an attacker to achieve arbitrary command execution. Successful exploitation...

8.1CVSS5.9AI score0.00358EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2026/09/23 2:12 p.m.•4 views

postgresql: PostgreSQL: Information disclosure via type confusion in ctid selectivity estimator

A flaw was found in PostgreSQL. This vulnerability, stemming from a type confusion issue in the ctid data type selectivity estimator, could allow an authenticated object creator to access and potentially recover sensitive information from memory. By manipulating input, an attacker could gain...

8.1CVSS5.8AI score0.00334EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2026/09/23 2:12 p.m.•5 views

postgresql: PostgreSQL: Arbitrary code execution via logical decoding plugin

A flaw was found in PostgreSQL. Missing authorization in PostgreSQL's logical decoding feature allows a non-superuser with REPLICATION privilege to load arbitrary files. This can lead to arbitrary code execution as the operating system account running the server...

7.2CVSS6.2AI score0.00528EPSS
SaveExploits1References5
Rows per page
Query Builder