Lucene search
K

15 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2024-27292

Malicious code in bioql PyPI...

8CVSS7.8AI score0.00047EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2025-16928

Malicious code in bioql PyPI...

6.5CVSS6.6AI score0.00237EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/06/06 10:5 p.m.13 views

CVE-2025-5690

PostgreSQL Anonymizer v2.0 and v2.1 contain a vulnerability that allows a masked user to bypass the masking rules defined on a table and read the original data using a database cursor or the --insert option of pgdump. This problem occurs only when dynamic masking is enabled, which is not the...

6.5CVSS7.1AI score0.00237EPSS
Exploits0References1
OSV
OSV
added 2025/06/04 10:15 p.m.1 views

CVE-2025-5690

PostgreSQL Anonymizer v2.0 and v2.1 contain a vulnerability that allows a masked user to bypass the masking rules defined on a table and read the original data using a database cursor or the --insert option of pgdump. This problem occurs only when dynamic masking is enabled, which is not the...

6.5CVSS5.8AI score
Exploits0References1
NVD
NVD
added 2025/06/04 10:15 p.m.11 views

CVE-2025-5690

PostgreSQL Anonymizer v2.0 and v2.1 contain a vulnerability that allows a masked user to bypass the masking rules defined on a table and read the original data using a database cursor or the --insert option of pgdump. This problem occurs only when dynamic masking is enabled, which is not the...

6.5CVSS0.00237EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/06/04 12:0 a.m.1 views

PT-2025-23864 · Unknown +1 · Postgresql Anonymizer +1

Name of the Vulnerable Software and Affected Versions: PostgreSQL Anonymizer versions 2.0 through 2.1 Description: The issue allows a masked user to bypass the masking rules defined on a table and read the original data using a database cursor or the --insert option of pg dump. This problem occur...

6.5CVSS6.4AI score0.00237EPSS
Exploits0References5
RedhatCVE
RedhatCVE
added 2025/02/05 1:53 a.m.3 views

CVE-2024-2338

PostgreSQL Anonymizer v1.2 contains a SQL injection vulnerability that allows a user who owns a table to elevate to superuser when dynamic masking is enabled. PostgreSQL Anonymizer enables users to set security labels on tables to mask specified columns. There is a flaw that allows complex...

8CVSS7.7AI score0.00047EPSS
Exploits0References1
OSV
OSV
added 2024/03/08 8:15 p.m.23 views

CVE-2024-2338

PostgreSQL Anonymizer v1.2 contains a SQL injection vulnerability that allows a user who owns a table to elevate to superuser when dynamic masking is enabled. PostgreSQL Anonymizer enables users to set security labels on tables to mask specified columns. There is a flaw that allows complex...

7.5CVSS7.7AI score
Exploits0References1
NVD
NVD
added 2024/03/08 8:15 p.m.9 views

CVE-2024-2338

PostgreSQL Anonymizer v1.2 contains a SQL injection vulnerability that allows a user who owns a table to elevate to superuser when dynamic masking is enabled. PostgreSQL Anonymizer enables users to set security labels on tables to mask specified columns. There is a flaw that allows complex...

8CVSS8.2AI score0.00047EPSS
Exploits0References1
Prion
Prion
added 2024/03/08 8:15 p.m.14 views

Sql injection

PostgreSQL Anonymizer v1.2 contains a SQL injection vulnerability that allows a user who owns a table to elevate to superuser when dynamic masking is enabled. PostgreSQL Anonymizer enables users to set security labels on tables to mask specified columns. There is a flaw that allows complex...

4.3CVSS8.1AI score0.00047EPSS
Exploits0References1
CVE
CVE
added 2024/03/08 8:7 p.m.63 views

CVE-2024-2338

Summary for CVE-2024-2338 (PostgreSQL Anonymizer) : PostgreSQL Anonymizer v1.2 contains a SQL injection flaw that can let a user who owns a table escalate to superuser when dynamic masking is enabled. The vulnerability stems from allowing complex expressions as a value for security labels used to...

8CVSS8.2AI score0.00047EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/03/08 8:7 p.m.15 views

CVE-2024-2338 SQL Injection in PostgreSQL Anonymizer 1.2 allows table owner to gain superuser privileges via masking rule

PostgreSQL Anonymizer v1.2 contains a SQL injection vulnerability that allows a user who owns a table to elevate to superuser when dynamic masking is enabled. PostgreSQL Anonymizer enables users to set security labels on tables to mask specified columns. There is a flaw that allows complex...

8CVSS7.7AI score0.00047EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/03/08 8:7 p.m.11 views

CVE-2024-2338 SQL Injection in PostgreSQL Anonymizer 1.2 allows table owner to gain superuser privileges via masking rule

PostgreSQL Anonymizer v1.2 contains a SQL injection vulnerability that allows a user who owns a table to elevate to superuser when dynamic masking is enabled. PostgreSQL Anonymizer enables users to set security labels on tables to mask specified columns. There is a flaw that allows complex...

8CVSS8.4AI score0.00047EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2024/03/08 12:0 a.m.2 views

PT-2024-2087 · Unknown · Postgresql Anonymizer

Name of the Vulnerable Software and Affected Versions: PostgreSQL Anonymizer version 1.2 Description: The issue is related to a SQL injection vulnerability in PostgreSQL Anonymizer. This vulnerability allows a user who owns a table to elevate their privileges to superuser when dynamic masking is...

8CVSS8.4AI score0.00047EPSS
Exploits0References7
Packet Storm
Packet Storm
added 2023/01/03 12:0 a.m.269 views

Oracle DBMS_REDACT Dynamic Data Masking Bypass

Title: ByPassing DBMSREDACT Dynamic Data Masking security feature in Oracle database system Product: Database Manufacturer: Oracle Affected Versions: 19c,21c Tested Versions: 19c,21c CVE Reference: N/A Author of Advisory: Emad Al-Mousa Overview: DBMSREDACT package provides an interface to Oracle...

7.4AI score
Exploits0
Rows per page
Query Builder