Fedora 42 : pgadmin4 (2025-f7d8e75d34)

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-f7d8e75d34 advisory. Update to pgadmin-9.10 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

pgAdmin4 vulnerable to Remote Code Execution (RCE) when running in server mode

pgAdmin versions up to 9.9 are affected by a Remote Code Execution RCE vulnerability that occurs when running in server mode and performing restores from PLAIN-format dump files. This issue allows attackers to inject and execute arbitrary commands on the server hosting pgAdmin, posing a critical...

Arbitrary Code Injection

Overview pgadmin4 is a PostgreSQL Tools Affected versions of this package are vulnerable to Arbitrary Code Injection through the PLAIN SQL file, which includes any meta-commands. An attacker can execute arbitrary commands on the server by supplying a crafted PLAIN-format SQL dump file during...

Arbitrary Command Injection

Overview pgadmin4 is a PostgreSQL Tools Affected versions of this package are vulnerable to Arbitrary Command Injection via the backup and restore processes when handling file path input with shell execution enabled. An attacker can execute arbitrary system commands by supplying specially crafted...

Denial of Service (DoS)

Overview pgadmin4 is a PostgreSQL Tools Affected versions of this package are vulnerable to Denial of Service DoS via the username from the login form which inserted into the LDAP search filter without escaping. An attacker can cause the server and client to process excessive data by injecting...

openSUSE Security Advisory (SUSE-SU-2025:03625-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLED15: pgadmin4 / pgadmin4-cloud / pgadmin4-desktop / pgadmin4-doc / etc (SUSE-SU-2025:03625-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:03625-1 advisory. - CVE-2025-9636: Fixed cross-origin opener policy COOP vulnerability bsc1249151. Tenable has extracted t...

SUSE-SU-2025:03625-1 Security update for pgadmin4

This update for pgadmin4 fixes the following issues: - CVE-2025-9636: Fixed cross-origin opener policy COOP vulnerability bsc1249151...

Fedora: Security Advisory (FEDORA-2025-3c80b660e0)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EUVD-2017-11067

Malware in sbrugna...

Exploit for CVE-2025-2945

pgAdmin4 Query Tool Authenticated RCE PoC Standalone python s...

Fedora: Security Advisory (FEDORA-2024-4944ad2c87)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2025-49d6f62c0e)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2017-20052

A vulnerability classified as problematic was found in Python 2.7.13. This vulnerability affects unknown code of the component pgAdmin4. The manipulation leads to uncontrolled search path. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used...

GHSA-4GRG-W6V8-C28G vulnerabilities

Vulnerabilities for packages: pgadmin4, airflow, mlflow, airflow-core, kubeflow-volumes-web-app, emissary, kubeflow-jupyter-web-app, nemo...

CVE-2025-47278 vulnerabilities

Vulnerabilities for packages: pgadmin4, airflow, mlflow, airflow-core, kubeflow-volumes-web-app, emissary, kubeflow-jupyter-web-app, nemo...

CVE-2025-43859 vulnerabilities

Vulnerabilities for packages: pgadmin4, airflow, checkov, kserve, jupyter-base-notebook, mitmproxy, kubeflow-pipelines-visualization-server, nemo, reflex, localstack...

GHSA-VQFR-H8MV-GHFJ vulnerabilities

Vulnerabilities for packages: pgadmin4, airflow, checkov, kserve, jupyter-base-notebook, mitmproxy, kubeflow-pipelines-visualization-server, nemo, reflex, localstack...

SUSE SLED15 / SLES15 Security Update : pgadmin4 (SUSE-SU-2025:1326-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:1326-1 advisory. - CVE-2025-27152: Fixed SSRF and creadential leakage due to requests sent to absolute URL even when baseURL is...

SUSE-SU-2025:1326-1 Security update for pgadmin4

This update for pgadmin4 fixes the following issues: - CVE-2025-27152: Fixed SSRF and creadential leakage due to requests sent to absolute URL even when baseURL is set bsc1239308 - CVE-2023-1907: Fixed an issue which could result in users being authenticated in another user's session if two users...