Lucene search
+L

6 matches found

RedHat Linux
RedHat Linux
•added 2022/05/31 9:26 a.m.•20 views

postgresql: Autovacuum, REINDEX, and others omit "security restricted operation" sandbox

A flaw was found in PostgreSQL. There is an issue with incomplete efforts to operate safely when a privileged user is maintaining another user's objects. The Autovacuum, REINDEX, CREATE INDEX, REFRESH MATERIALIZED VIEW, CLUSTER, and pgamcheck commands activated relevant protections too late or no...

8.8CVSS7.1AI score0.1597EPSS
SaveExploits0References6
osv_ghsa
osv_ghsa
•added 2022/05/13 1:47 a.m.•29 views

GHSA-X869-784M-JMJ2 Denial of service in Apache Mesos

When handling a decoding failure for a malformed URL path of an HTTP request, libprocess in Apache Mesos might crash because the code accidentally calls inappropriate function. A malicious actor can therefore cause a denial of service of Mesos masters rendering the Mesos-controlled cluster...

7.5CVSS7.2AI score0.02448EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2022/05/11 12:00 a.m.•18 views

PT-2022-2514

Name of the Vulnerable Software and Affected Versions PostgreSQL affected versions not specified Description A flaw was found in PostgreSQL related to incomplete efforts to operate safely when a privileged user is maintaining another user's objects. The Autovacuum, REINDEX, CREATE INDEX, REFRESH...

9CVSS7AI score0.1597EPSS
SaveExploits0References139
Mend
Mend
•added 2019/06/21 3:15 p.m.•7 views

CVE-2017-15694

When an Apache Geode server versions 1.0.0 to 1.8.0 is operating in secure mode, a user with write permissions for specific data regions can modify internal cluster metadata. A malicious user could modify this data in a way that affects the operation of the cluster...

7.1CVSS0.02152EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2019/06/21 3:15 p.m.•32 views

CVE-2017-15694

When an Apache Geode server versions 1.0.0 to 1.8.0 is operating in secure mode, a user with write permissions for specific data regions can modify internal cluster metadata. A malicious user could modify this data in a way that affects the operation of the cluster...

6.3AI score0.02152EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2019/06/21 12:00 a.m.•11 views

PT-2019-8031

Name of the Vulnerable Software and Affected Versions Apache Geode versions 1.0.0 through 1.8.0 Description The issue allows a user with write permissions for specific data regions to modify internal cluster metadata when the Apache Geode server is operating in secure mode. This could be exploite...

6.5CVSS0.02152EPSS
SaveExploits0References7
Rows per page
Query Builder