Lucene search
K

11 matches found

Tenable Nessus
Tenable Nessus
added 2026/02/11 12:0 a.m.9 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: postgresql-13 (UTSA-2026-005349)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005349 advisory. Improper neutralization of quoting syntax in PostgreSQL libpq functions PQescapeLiteral, PQescapeIdentifier, PQescapeString, and PQescapeStringConn allows a database...

8.1CVSS8AI score0.89472EPSS
Exploits10References4
Positive Technologies
Positive Technologies
added 2025/12/04 12:0 a.m.2 views

PT-2026-7416

Name of the Vulnerable Software and Affected Versions MongoDB affected versions not specified Description The internal locking mechanism within the MongoDB server utilizes an internal encoding of resources to determine which lock to acquire. A collision can occur where collections inadvertently...

7.1CVSS5.4AI score0.00199EPSS
Exploits0References10
RedHat Linux
RedHat Linux
added 2025/03/20 4:40 a.m.3 views

postgresql: PostgreSQL quoting APIs miss neutralizing quoting syntax in text that fails encoding validation

A flaw was found in PostgreSQL. Due to improper neutralization of quoting syntax, affected versions potentially allow a database input provider to achieve SQL injection in certain usage patterns. Specifically, SQL injection requires the application to use the affected function's result to constru...

9.8CVSS7.3AI score0.89472EPSS
Exploits14References7
RedHat Linux
RedHat Linux
added 2025/02/20 5:16 p.m.7 views

postgresql: PostgreSQL quoting APIs miss neutralizing quoting syntax in text that fails encoding validation

A flaw was found in PostgreSQL. Due to improper neutralization of quoting syntax, affected versions potentially allow a database input provider to achieve SQL injection in certain usage patterns. Specifically, SQL injection requires the application to use the affected function's result to constru...

9.8CVSS7.3AI score0.89472EPSS
Exploits14References7
RedHat Linux
RedHat Linux
added 2025/02/20 3:9 p.m.2 views

postgresql: PostgreSQL quoting APIs miss neutralizing quoting syntax in text that fails encoding validation

A flaw was found in PostgreSQL. Due to improper neutralization of quoting syntax, affected versions potentially allow a database input provider to achieve SQL injection in certain usage patterns. Specifically, SQL injection requires the application to use the affected function's result to constru...

9.8CVSS7.3AI score0.89472EPSS
Exploits14References7
RedHat Linux
RedHat Linux
added 2025/02/20 3:2 p.m.5 views

postgresql: PostgreSQL quoting APIs miss neutralizing quoting syntax in text that fails encoding validation

A flaw was found in PostgreSQL. Due to improper neutralization of quoting syntax, affected versions potentially allow a database input provider to achieve SQL injection in certain usage patterns. Specifically, SQL injection requires the application to use the affected function's result to constru...

9.8CVSS7.3AI score0.89472EPSS
Exploits14References7
RedHat Linux
RedHat Linux
added 2024/07/18 1:37 p.m.36 views

Moderate: Red Hat Security Advisory: Errata Advisory for Red Hat OpenShift GitOps v1.11.6 security update

An update is now available for Red Hat OpenShift GitOps v1.11.6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...

7.5CVSS6.7AI score0.01262EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2024/07/03 12:0 a.m.20 views

AlmaLinux 8 : container-tools (ALSA-2024:4246)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2024:4246 advisory. golang-protobuf: encoding/protojson, internal/encoding/json: infinite loop in protojson.Unmarshal when unmarshaling certain forms of invalid JSON CVE-2024-24786...

7.5CVSS7AI score0.01262EPSS
Exploits0References2
OSV
OSV
added 2024/05/10 2:32 p.m.33 views

RLSA-2024:2549 Moderate: skopeo security and bug fix update

The skopeo command lets you inspect images from container image registries, get images and image layers, and use signatures to create and verify files. Security Fixes: golang-protobuf: encoding/protojson, internal/encoding/json: infinite loop in protojson.Unmarshal when unmarshaling certain forms...

7.5CVSS7AI score0.01956EPSS
Exploits0References2
OSV
OSV
added 2024/04/30 12:0 a.m.27 views

ALSA-2024:2549 Moderate: skopeo security and bug fix update

The skopeo command lets you inspect images from container image registries, get images and image layers, and use signatures to create and verify files. Security Fixes: golang-protobuf: encoding/protojson, internal/encoding/json: infinite loop in protojson.Unmarshal when unmarshaling certain forms...

7.5CVSS7AI score0.01956EPSS
Exploits0References6
Snyk
Snyk
added 2023/06/09 5:58 a.m.3 views

Out-of-bounds Read

Overview Affected versions of this package are vulnerable to Out-of-bounds Read such that parsing a text-format message which contains a potential number consisting of a minus sign, one or more characters of whitespace, and no further input will cause a panic. Remediation Upgrade...

8.2CVSS7.4AI score0.01089EPSS
Exploits0References2
Rows per page
Query Builder