48 matches found
PT-2019-19780 · Libofx +3 · Libofx +3
Name of the Vulnerable Software and Affected Versions: LibOFX version 0.9.14 Description: An issue was discovered in LibOFX. There is a NULL pointer dereference in the function OFXApplication::startElement in the file lib/ofx sgml.cpp, as demonstrated by ofxdump. Recommendations: For LibOFX versi...
PostgreSQL 'pg_upgrade' and 'pg_dump' Functions SQL Injection Vulnerability
PostgreSQL is a free object-relational database management system developed by the PostgreSQL development group. The system supports most of the SQL standards and provides many other features, such as foreign keys, triggers, views, and so on. A SQL injection vulnerability exists in the 'pgupgrade...
USN-3818-1 postgresql-10 vulnerability
It was discovered that PostgreSQL incorrectly handled certain trigger definitions when running pgupgrade or pgdump. A remote attacker could possibly use this issue to execute arbitrary SQL statements with superuser privileges...
ALPINE-CVE-2018-16850
postgresql before versions 11.1, 10.6 is vulnerable to a to SQL injection in pgupgrade and pgdump via CREATE TRIGGER ... REFERENCING. Using a purpose-crafted trigger definition, an attacker can cause arbitrary SQL statements to run, with superuser privileges...
RHEL 7 : Red Hat Mobile Application Platform 4.6.0 (RHSA-2018:1263)
Red Hat Mobile Application Platform 4.6.0 release - RPMs Red Hat Mobile Application Platform RHMAP 4.6 is delivered as a set of container images. In addition to the images, several components are delivered as RPMs : OpenShift templates used to deploy an RHMAP Core and MBaaS The fh-system-dump-too...
Moderate: Red Hat Security Advisory: Red Hat Mobile Application Platform 4.6.0 release - RPMs
Red Hat Mobile Application Platform 4.6.0 release - RPMs Red Hat Mobile Application Platform RHMAP 4.6 is delivered as a set of container images. In addition to the images, several components are delivered as RPMs: OpenShift templates used to deploy an RHMAP Core and MBaaS The fh-system-dump-tool...
mysql: Incorrect input validation allowing code execution via mysqldump
It was discovered that the mysql and mysqldump tools did not correctly handle database and table names containing newline characters. A database user with privileges to create databases or tables could cause the mysql command to execute arbitrary shell or SQL commands while restoring database...