Lucene search
+L

18 matches found

EUVD
EUVD
•added 2025/10/03 8:07 p.m.•17 views

EUVD-2024-27292

Malicious code in bioql PyPI...

8CVSS7.8AI score0.00461EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•18 views

EUVD-2025-16928

Malicious code in bioql PyPI...

6.5CVSS6.6AI score0.00349EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/06/06 10:05 p.m.•38 views

CVE-2025-5690

PostgreSQL Anonymizer v2.0 and v2.1 contain a vulnerability that allows a masked user to bypass the masking rules defined on a table and read the original data using a database cursor or the --insert option of pgdump. This problem occurs only when dynamic masking is enabled, which is not the...

6.5CVSS7.1AI score0.00349EPSS
SaveExploits0References1
NVD
NVD
•added 2025/06/04 10:15 p.m.•28 views

CVE-2025-5690

PostgreSQL Anonymizer v2.0 and v2.1 contain a vulnerability that allows a masked user to bypass the masking rules defined on a table and read the original data using a database cursor or the --insert option of pgdump. This problem occurs only when dynamic masking is enabled, which is not the...

6.5CVSS0.00349EPSS
SaveExploits0References1
OSV
OSV
•added 2025/06/04 9:34 p.m.•14 views

CVE-2025-5690 Cursor allows PostgreSQL Anonymizer masked user to gain unauthorized access to authentic data

PostgreSQL Anonymizer v2.0 and v2.1 contain a vulnerability that allows a masked user to bypass the masking rules defined on a table and read the original data using a database cursor or the --insert option of pgdump. This problem occurs only when dynamic masking is enabled, which is not the...

6.5CVSS6AI score
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2025/06/04 12:00 a.m.•22 views

PT-2025-23864 · Unknown +1 · Postgresql Anonymizer +1

Name of the Vulnerable Software and Affected Versions: PostgreSQL Anonymizer versions 2.0 through 2.1 Description: The issue allows a masked user to bypass the masking rules defined on a table and read the original data using a database cursor or the --insert option of pg dump. This problem occur...

6.5CVSS6.4AI score0.00349EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/04 12:00 a.m.•3 views

CVE-2025-5690: Exposure of Sensitive Information to an Unauthorized Actor

PostgreSQL Anonymizer v2.0 and v2.1 contain a vulnerability that allows a masked user to bypass the masking rules defined on a table and read the original data using a database cursor or the --insert option of pgdump. This problem occurs only when dynamic masking is enabled, which is not the...

6.5CVSS5.8AI score0.00349EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/02/05 1:53 a.m.•16 views

CVE-2024-2338

PostgreSQL Anonymizer v1.2 contains a SQL injection vulnerability that allows a user who owns a table to elevate to superuser when dynamic masking is enabled. PostgreSQL Anonymizer enables users to set security labels on tables to mask specified columns. There is a flaw that allows complex...

8CVSS7.7AI score0.00461EPSS
SaveExploits0References1
NVD
NVD
•added 2024/03/08 8:15 p.m.•22 views

CVE-2024-2338

PostgreSQL Anonymizer v1.2 contains a SQL injection vulnerability that allows a user who owns a table to elevate to superuser when dynamic masking is enabled. PostgreSQL Anonymizer enables users to set security labels on tables to mask specified columns. There is a flaw that allows complex...

8CVSS8.2AI score0.00461EPSS
SaveExploits0References1
Prion
Prion
•added 2024/03/08 8:15 p.m.•27 views

Sql injection

PostgreSQL Anonymizer v1.2 contains a SQL injection vulnerability that allows a user who owns a table to elevate to superuser when dynamic masking is enabled. PostgreSQL Anonymizer enables users to set security labels on tables to mask specified columns. There is a flaw that allows complex...

4.3CVSS8.1AI score0.00461EPSS
SaveExploits0References1
OSV
OSV
•added 2024/03/08 8:07 p.m.•37 views

CVE-2024-2338 SQL Injection in PostgreSQL Anonymizer 1.2 allows table owner to gain superuser privileges via masking rule

PostgreSQL Anonymizer v1.2 contains a SQL injection vulnerability that allows a user who owns a table to elevate to superuser when dynamic masking is enabled. PostgreSQL Anonymizer enables users to set security labels on tables to mask specified columns. There is a flaw that allows complex...

8CVSS7.2AI score
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2024/03/08 8:07 p.m.•21 views

CVE-2024-2338 SQL Injection in PostgreSQL Anonymizer 1.2 allows table owner to gain superuser privileges via masking rule

PostgreSQL Anonymizer v1.2 contains a SQL injection vulnerability that allows a user who owns a table to elevate to superuser when dynamic masking is enabled. PostgreSQL Anonymizer enables users to set security labels on tables to mask specified columns. There is a flaw that allows complex...

8CVSS7.7AI score0.00461EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/03/08 8:07 p.m.•29 views

CVE-2024-2338 SQL Injection in PostgreSQL Anonymizer 1.2 allows table owner to gain superuser privileges via masking rule

PostgreSQL Anonymizer v1.2 contains a SQL injection vulnerability that allows a user who owns a table to elevate to superuser when dynamic masking is enabled. PostgreSQL Anonymizer enables users to set security labels on tables to mask specified columns. There is a flaw that allows complex...

8CVSS8.4AI score0.00461EPSS
SaveExploits0References1
CVE
CVE
•added 2024/03/08 8:07 p.m.•97 views

CVE-2024-2338

Summary for CVE-2024-2338 (PostgreSQL Anonymizer) : PostgreSQL Anonymizer v1.2 contains a SQL injection flaw that can let a user who owns a table escalate to superuser when dynamic masking is enabled. The vulnerability stems from allowing complex expressions as a value for security labels used to...

8CVSS8.2AI score0.00461EPSS
SaveExploits0References1Affected Software1
Mend
Mend
•added 2024/03/08 8:07 p.m.•2 views

CVE-2024-2338

PostgreSQL Anonymizer v1.2 contains a SQL injection vulnerability that allows a user who owns a table to elevate to superuser when dynamic masking is enabled. PostgreSQL Anonymizer enables users to set security labels on tables to mask specified columns. There is a flaw that allows complex...

8.9CVSS0.00461EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/08 12:00 a.m.•4 views

CVE-2024-2338: Improper Neutralization of Special Elements used in an SQL Command

PostgreSQL Anonymizer v1.2 contains a SQL injection vulnerability that allows a user who owns a table to elevate to superuser when dynamic masking is enabled. PostgreSQL Anonymizer enables users to set security labels on tables to mask specified columns. There is a flaw that allows complex...

8CVSS5.9AI score0.00461EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2024/03/08 12:00 a.m.•22 views

PT-2024-2087 · Unknown · Postgresql Anonymizer

Name of the Vulnerable Software and Affected Versions: PostgreSQL Anonymizer version 1.2 Description: The issue is related to a SQL injection vulnerability in PostgreSQL Anonymizer. This vulnerability allows a user who owns a table to elevate their privileges to superuser when dynamic masking is...

8CVSS8.4AI score0.00461EPSS
SaveExploits0References7
Packet Storm
Packet Storm
•added 2023/01/03 12:00 a.m.•284 views

Oracle DBMS_REDACT Dynamic Data Masking Bypass

Title: ByPassing DBMSREDACT Dynamic Data Masking security feature in Oracle database system Product: Database Manufacturer: Oracle Affected Versions: 19c,21c Tested Versions: 19c,21c CVE Reference: N/A Author of Advisory: Emad Al-Mousa Overview: DBMSREDACT package provides an interface to Oracle...

7.4AI score
SaveExploits0
Rows per page
Query Builder