81436 matches found
postgresql: PostgreSQL psql: Arbitrary command execution via untrusted data in COPY FROM STDIN
A flaw was found in PostgreSQL psql. During the COPY FROM STDIN operation, untrusted data can be mistakenly interpreted as psql commands if an error injection causes the command to fail prematurely. This could allow an attacker to achieve arbitrary command execution. Successful exploitation...
postgresql: PostgreSQL psql: Arbitrary command execution via untrusted data in COPY FROM STDIN
A flaw was found in PostgreSQL psql. During the COPY FROM STDIN operation, untrusted data can be mistakenly interpreted as psql commands if an error injection causes the command to fail prematurely. This could allow an attacker to achieve arbitrary command execution. Successful exploitation...
CVE-2026-4921
IBM Guardium Data Protection 12.2 could allow an administrative user to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system...
CVE-2026-3626
IBM Concert 1.0.0 through 3.0.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system...
CVE-2026-4921 IBM Guardium Data Protection is affected by multiple vulnerabilities.
IBM Guardium Data Protection 12.2 could allow an administrative user to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system...
EUVD-2026-85360
IBM Guardium Data Protection 12.2 could allow an administrative user to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system...
CVE-2026-4921
IBM Guardium Data Protection 12.2 is affected by a vulnerability (CVE-2026-4921 ) that allows an administrative user to obtain sensitive information . This occurs when the system returns a detailed technical error message in the browser, which could subsequently be used to facilitate further atta...
EUVD-2026-85359
IBM Concert 1.0.0 through 3.0.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system...
CVE-2026-3626 Multiple Vulnerabilities in IBM Concert Software
IBM Concert 1.0.0 through 3.0.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system...
CVE-2026-3626
The IBM Concert software, versions 1.0.0 through 3.0.0 , is susceptible to a vulnerability that may allow a remote attacker to obtain sensitive information . This occurs when the application returns a detailed technical error message in the browser, which could facilitate further attacks against ...
CVE-2026-62998
REDAXO is a PHP-based content management system. Prior to 5.21.2, rexlist::getSortColumn in redaxo/src/core/lib/list.php accepts the sort request parameter without checking whether setColumnSortable registered the requested column. An authenticated backend user can make prepareQuery add an escape...
postgresql: PostgreSQL psql: Arbitrary command execution via untrusted data in COPY FROM STDIN
A flaw was found in PostgreSQL psql. During the COPY FROM STDIN operation, untrusted data can be mistakenly interpreted as psql commands if an error injection causes the command to fail prematurely. This could allow an attacker to achieve arbitrary command execution. Successful exploitation...
CVE-2026-62998 REDAXO: Unwhitelisted ORDER BY Column in rex_list Allows Authenticated Column Enumeration
REDAXO is a PHP-based content management system. Prior to 5.21.2, rexlist::getSortColumn in redaxo/src/core/lib/list.php accepts the sort request parameter without checking whether setColumnSortable registered the requested column. An authenticated backend user can make prepareQuery add an escape...
CVE-2026-62998
The REDAXO PHP-based content management system is vulnerable to an unauthorized ORDER BY identifier injection in versions prior to 5.21.2 . The root cause is located in rex_list::getSortColumn() within redaxo/src/core/lib/list.php, which fails to verify if a requested column was registered via se...
EUVD-2026-85180
A vulnerability in Apache Sling Security Bundle: ContentDispositionFilter mediates only one address/API shape of a resource This issue affects Apache Sling Security Bundle: before 1.3.12. Users are recommended to upgrade to version 1.3.12, which fixes the issue...
postgresql: PostgreSQL psql: Arbitrary command execution via untrusted data in COPY FROM STDIN
A flaw was found in PostgreSQL psql. During the COPY FROM STDIN operation, untrusted data can be mistakenly interpreted as psql commands if an error injection causes the command to fail prematurely. This could allow an attacker to achieve arbitrary command execution. Successful exploitation...
postgresql: PostgreSQL psql: Arbitrary command execution via untrusted data in COPY FROM STDIN
A flaw was found in PostgreSQL psql. During the COPY FROM STDIN operation, untrusted data can be mistakenly interpreted as psql commands if an error injection causes the command to fail prematurely. This could allow an attacker to achieve arbitrary command execution. Successful exploitation...
[SECURITY] [DLA 4791-1] memcached security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-4791-1 [email protected] https://www.debian.org/lts/security/ Abhijith PA September 23, 2026 https://wiki.debian.org/LTS -...
CVE-2025-56764
CVE-2025-56764 — Trivision NC-227WF 요약 Trivision NC-227WF 펌웨어 5.80 build 20141010의 로그인 처리에서 사용자명 존재 여부에 따라 서로 다른 오류 메시지를 반환합니다"Unknown user" vs "Wrong password". 이로 인해 공격자는 유효한 사용자명을 열거할 수 있습니다. 관련 CVE 레코드는 CVE List / NVD에 게시되었습니다. 영향 사용자명 노출로 인한 무차별 대입 공격 및 크리덴셜 스터핑 가능성 증가. 노출된 사용자명 + 약한 비밀번호 조합...