CVE-2024-44905

go-pg pg v10.13.0 was discovered to contain a SQL injection vulnerability via the component /types/appendvalue.go...

go-pg pg 安全漏洞

go-pg pg is a go-pg open source ORM for Golang. A security vulnerability exists in go-pg pg version v10.13.0, which stems from an unvalidated /types/appendvalue.go component that could lead to an SQL injection attack...

CVE-2025-29744: Improper Neutralization of Special Elements used in an SQL Command

pg-promise before 11.5.5 is vulnerable to SQL Injection due to improper handling of negative numbers...

CVE-2024-44905

go-pg pg v10.13.0 was discovered to contain a SQL injection vulnerability via the component /types/appendvalue.go...

CVE-2019-15658

connect-pg-simple before 6.0.1 allows SQL injection if tableName or schemaName is untrusted data...

CVE-2009-2882

Multiple cross-site scripting XSS vulnerabilities in PG MatchMaking allow remote attackers to inject arbitrary web script or HTML via the show parameter to 1 browseladies.php and 2 browsemen.php, the 3 gender parameter to search.php, and the 4 id parameter to services.php...

The vulnerability of the pg-cluster component of the BIG-IP Next Central Manage application programming interface allows a attacker to disclose protected information.

The vulnerability of the pg-cluster component of the BIG-IP Next Central Manage application programming interface is related to the disclosure of information through registration files. Exploiting this vulnerability can allow an attacker to disclose the protected information...

SQL Injection

Overview Affected versions of this package are vulnerable to SQL Injection due to improper escaping of a query parameter in the postgres64, postgres7, postgres8, and postgres9 drivers. An attacker can execute arbitrary SQL statements by injecting malicious SQL code into the pginsertid method...

CVE-2025-22872 vulnerabilities

Vulnerabilities for packages: pulumi, aactl, opa-envoy, cert-exporter, crossplane-provider-aws-firehose, crossplane-provider-aws-sqs, dagdotdev, zot, litestream, kafka-proxy, dgraph, envoy-gateway, thanos-operator, tailscale, newrelic-k8s-metadata-injection, cloudflared, vertical-pod-autoscaler,...

GHSA-VVGC-356P-C3XW vulnerabilities

Vulnerabilities for packages: nfs-subdir-external-provisioner, cert-manager-fips, sonobuoy, grafana-alloy, tekton-chains, crossplane-provider-family-aws, vault, thanos, hydra, gcp-compute-persistent-disk-csi-driver-fips, harbor-fips, amazon-k8s-cni, kafkaexporter, minio, spiffe-helper,...

DEBIAN-CVE-2025-22124

In the Linux kernel, the following vulnerability has been resolved: md/md-bitmap: fix wrong bitmaplimit for clustermd when write sb In clustermd, separate write-intent-bitmaps are used for each cluster node: 0 4k 8k 12k ------------------------------------------------------------------- | idle | ...

CVE-2025-22871 vulnerabilities

Vulnerabilities for packages: aactl, git-sync, cert-exporter, dagdotdev, nri-redis, zot, ctop, litestream, dgraph, s5cmd, hello-world-golang, yunikorn-web, nri-memcached, envoy-gateway, thanos-operator, elvish, tailscale, nri-couchbase, vertical-pod-autoscaler, cri-tools, cert-manager-istio-csr,...

GHSA-G9PC-8G42-G6VQ vulnerabilities

Vulnerabilities for packages: aactl, git-sync, cert-exporter, dagdotdev, nri-redis, zot, ctop, litestream, dgraph, s5cmd, hello-world-golang, yunikorn-web, nri-memcached, envoy-gateway, thanos-operator, elvish, tailscale, nri-couchbase, vertical-pod-autoscaler, cri-tools, cert-manager-istio-csr,...

CVE-2025-22871 vulnerabilities

Vulnerabilities for packages: nfs-subdir-external-provisioner, cert-manager-fips, sonobuoy, tekton-chains, vault, gcp-compute-persistent-disk-csi-driver-fips, harbor-fips, amazon-k8s-cni, kafkaexporter, terraform-provider-grafana, kubernetes-replicator-fips, kubernetes-dashboard-auth-fips, syft,...

CVE-2024-56182

CVE-2024-56182 describes a local vulnerability in Siemens SIMATIC/SIEMENS IPC family where EFI variables are insufficiently protected. This could allow an authenticated local attacker to disable the BIOS password by communicating with the flash controller, affecting a wide range of Field PGs, IPC...

CVE-2024-56182

A vulnerability has been identified in SIMATIC Field PG M5 All versions, SIMATIC Field PG M6 All versions V26.01.12, SIMATIC IPC BX-21A All versions V31.01.07, SIMATIC IPC BX-32A All versions V29.01.07, SIMATIC IPC BX-39A All versions V29.01.07, SIMATIC IPC BX-59A All versions V32.01.04, SIMATIC...

CVE-2024-56181

A vulnerability has been identified in SIMATIC Field PG M5 All versions, SIMATIC IPC BX-21A All versions V31.01.07, SIMATIC IPC BX-32A All versions V29.01.07, SIMATIC IPC BX-39A All versions V29.01.07, SIMATIC IPC BX-59A All versions V32.01.04, SIMATIC IPC PX-32A All versions V29.01.07, SIMATIC I...

CVE-2024-56181: Protection Mechanism Failure

A vulnerability has been identified in SIMATIC Field PG M5 All versions, SIMATIC IPC BX-21A All versions V31.01.07, SIMATIC IPC BX-32A All versions V29.01.07, SIMATIC IPC BX-39A All versions V29.01.07, SIMATIC IPC BX-59A All versions V32.01.04, SIMATIC IPC PX-32A All versions V29.01.07, SIMATIC I...

postgresql:16 security update

pgaudit 16.0-1 - Update to 16.0 - Support postgresql 16 - Initial import for PG 16 module - Resolves: RHEL-3636 pgrepack 1.5.1-1 - Update to 1.5.1 postgres-decoderbufs 2.4.0-1.Final - Initial import for postgresql 16 stream - Related: RHEL-3636 postgresql 16.8-1 - Update to 16.8 - Fix CVE-2025-10...

Azure Linux 3.0 Security Update: hyperv-daemons (CVE-2024-26947)

The version of hyperv-daemons installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-26947 advisory. - In the Linux kernel, the following vulnerability has been resolved: ARM: 9359/1: flush: check if the...