postgresql: PostgreSQL quoting APIs miss neutralizing quoting syntax in text that fails encoding validation

A flaw was found in PostgreSQL. Due to improper neutralization of quoting syntax, affected versions potentially allow a database input provider to achieve SQL injection in certain usage patterns. Specifically, SQL injection requires the application to use the affected function's result to constru...

postgresql: PostgreSQL quoting APIs miss neutralizing quoting syntax in text that fails encoding validation

A flaw was found in PostgreSQL. Due to improper neutralization of quoting syntax, affected versions potentially allow a database input provider to achieve SQL injection in certain usage patterns. Specifically, SQL injection requires the application to use the affected function's result to constru...

postgresql: PostgreSQL quoting APIs miss neutralizing quoting syntax in text that fails encoding validation

A flaw was found in PostgreSQL. Due to improper neutralization of quoting syntax, affected versions potentially allow a database input provider to achieve SQL injection in certain usage patterns. Specifically, SQL injection requires the application to use the affected function's result to constru...

Malicious code in upm-ci-utils-tes-t (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3db67af7201afa722ce928a46979afb3ac375ebe370e32d0578fd2cca9119bc1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GNU Binutils Memory Corruption Vulnerability (CNVD-2025-09688)

GNU Binutils GNU Binary Utilities is a set of programming language utilities developed by the American GNU community. A memory corruption vulnerability exists in GNU Binutils. The vulnerability originates from the function bfdelfgcmarkrsec in bfd/elflink.c. No details of the vulnerability are...

GNU Binutils objdump.c disassemble_bytes stack-based overflow

...

MAL-2025-191803 Malicious code in network-utils-simple (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 1fd943d3243197ac153b2623548e62b4225a59f611cf13fe962bc3ced369a32d During installation, there is an attempt to download and execute code. The package has no real functionality. --- Category: MALICIOUS - The campaign has clearl...

Malicious code in network-utils-simple (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 1fd943d3243197ac153b2623548e62b4225a59f611cf13fe962bc3ced369a32d During installation, there is an attempt to download and execute code. The package has no real functionality. --- Category: MALICIOUS - The campaign has clearl...

DEBIAN-CVE-2025-1094

Improper neutralization of quoting syntax in PostgreSQL libpq functions PQescapeLiteral, PQescapeIdentifier, PQescapeString, and PQescapeStringConn allows a database input provider to achieve SQL injection in certain usage patterns. Specifically, SQL injection requires the application to use the...

UBUNTU-CVE-2025-1094

Improper neutralization of quoting syntax in PostgreSQL libpq functions PQescapeLiteral, PQescapeIdentifier, PQescapeString, and PQescapeStringConn allows a database input provider to achieve SQL injection in certain usage patterns. Specifically, SQL injection requires the application to use the...

[SECURITY] Fedora 40 Update: s390utils-2.33.1-4.fc40

This is a meta package for installing the default s390-tools sub packages. If you do not need all default sub packages, it is recommended to install the required sub packages separately. The s390utils packages contain a set of user space utilities that should to be used together with the zSeries...

Astra Linux – Vulnerability in PostgresSQL-15

Improper neutralization of quoting syntax in PostgreSQL’s libpq functions such as PQescapeLiteral, PQescapeIdentifier, PQescapeString, and PQescapeStringConn allows a database input provider to exploit SQL injection attacks under certain usage patterns. Specifically, SQL injection requires the...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: util: Avoid accessing a ringbuffer that is not initialized yet. If the KVP or VSS daemon starts before the VMBus channel’s ringbuffer is fully initialized, we can encounter a panic as follows: hvutils: Registering th...

GNU Binutils 安全漏洞

GNU Binutils GNU Binary Utilities is a set of programming language utility programs developed by the American GNU community. The programs are primarily designed to work with target files in a variety of formats, and provide connectors, assemblers, and other tools for target files and archives. A...

GNU Binutils 安全漏洞

GNU Binutils GNU Binary Utilities is a set of programming language utility programs developed by the American GNU community. The programs are primarily designed to work with target files in a variety of formats, and provide connectors, assemblers, and other tools for target files and archives. A...

[SECURITY] Fedora 41 Update: s390utils-2.35.0-2.fc41

This is a meta package for installing the default s390-tools sub packages. If you do not need all default sub packages, it is recommended to install the required sub packages separately. The s390utils packages contain a set of user space utilities that should to be used together with the zSeries...

CVE-2021-44002

A vulnerability has been identified in JT Open All versions V11.1.1.0, JT Utilities All versions V13.1.1.0, Solid Edge All versions V2023. The Jt1001.dll contains an out of bounds write past the end of an allocated structure while parsing specially crafted JT files. This could allow an attacker t...

CVE-2021-44014

A vulnerability has been identified in JT Open All versions V11.1.1.0, JT Utilities All versions V13.1.1.0, Solid Edge All versions V2023. The Jt1001.dll contains a use-after-free vulnerability that could be triggered while parsing specially crafted JT files. An attacker could leverage this...

CVE-2022-47936

A vulnerability has been identified in JT Open All versions V11.2.3.0, JT Utilities All versions V13.2.3.0, Parasolid V34.0 All versions V34.0.252, Parasolid V34.1 All versions V34.1.242, Parasolid V35.0 All versions V35.0.170, Parasolid V35.1 All versions V35.1.150. The affected application...

CVE-2022-47977

A vulnerability has been identified in JT Open All versions V11.2.3.0, JT Utilities All versions V13.2.3.0. The affected application contains a memory corruption vulnerability while parsing specially crafted JT files. This could allow an attacker to execute code in the context of the current...