Lucene search
K

508 matches found

CNNVD
CNNVD
added 2025/04/03 12:0 a.m.4 views

pgAdmin 安全漏洞

pgAdmin is pgAdmin open source an open source management and development platform for the open source database PostgreSQL. A security vulnerability exists in pgAdmin 9.1 and earlier versions, which stems from a cross-site scripting attack that could result in arbitrary HTML or JavaScript executio...

9.1CVSS8.6AI score0.00292EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/04/03 12:0 a.m.4 views

pgAdmin 安全漏洞

pgAdmin is pgAdmin open source an open source management and development platform for the open source database PostgreSQL. A security vulnerability exists in pgAdmin versions prior to 4 9.2 that stems from insecurely passing parameters to the eval function, which could lead to remote code executi...

9.9CVSS9.5AI score0.3842EPSS
Exploits7References2
Positive Technologies
Positive Technologies
added 2025/04/03 12:0 a.m.5 views

PT-2025-14614 · Pgadmin · Pgadmin

Name of the Vulnerable Software and Affected Versions: pgAdmin versions 9.1 and earlier Description: The issue allows attackers to execute Cross-Site Scripting XSS attacks via query result rendering, enabling them to run arbitrary HTML/JavaScript in a user's browser. This occurs when an attacker...

9.9CVSS8.4AI score0.3842EPSS
Exploits9References23
Positive Technologies
Positive Technologies
added 2025/03/27 12:0 a.m.11 views

PT-2025-14613

Name of the Vulnerable Software and Affected Versions pgAdmin 4 versions prior to 9.2 Description The issue is a remote code execution security vulnerability in pgAdmin 4, affecting the Query Tool and Cloud Deployment modules. It is associated with two POST endpoints: "/sqleditor/query...

9.9CVSS10AI score0.3842EPSS
Exploits9References54
SUSE CVE
SUSE CVE
added 2025/02/14 5:44 a.m.2 views

SUSE CVE-2024-6238

pgAdmin = 8.8 has an installation Directory permission issue. Because of this issue, attackers can gain unauthorised access to the installation directory on the Debian or RHEL 8 platforms...

7.8CVSS6.7AI score0.00246EPSS
Exploits0References4
Veracode
Veracode
added 2025/01/14 7:36 a.m.6 views

Race Condition

pgAdmin is vulnerable to Race Condition. The vulnerability is due to improper session handling in server mode with LDAP authentication, where simultaneous login attempts can result in users being attached to another user's session...

8CVSS6.6AI score0.0044EPSS
Exploits0References7Affected Software1
OSV
OSV
added 2025/01/09 9:31 a.m.5 views

GHSA-7W6R-748W-MH52 pgAdmin has Incorrect Default Permissions

A vulnerability was found in pgadmin. Users logging into pgAdmin running in server mode using LDAP authentication may be attached to another user's session if multiple connection attempts occur simultaneously...

8CVSS7.8AI score0.0044EPSS
Exploits0References7
Github Security Blog
Github Security Blog
added 2025/01/09 9:31 a.m.13 views

pgAdmin has Incorrect Default Permissions

A vulnerability was found in pgadmin. Users logging into pgAdmin running in server mode using LDAP authentication may be attached to another user's session if multiple connection attempts occur simultaneously...

8CVSS7AI score0.0044EPSS
Exploits0References7Affected Software1
OSV
OSV
added 2025/01/09 8:15 a.m.2 views

CVE-2023-1907

A vulnerability was found in pgadmin. Users logging into pgAdmin running in server mode using LDAP authentication may be attached to another user's session if multiple connection attempts occur simultaneously...

7.5CVSS5.7AI score0.0044EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2025/01/09 8:15 a.m.2 views

CVE-2023-1907

A vulnerability was found in pgadmin. Users logging into pgAdmin running in server mode using LDAP authentication may be attached to another user's session if multiple connection attempts occur simultaneously...

8CVSS5.8AI score0.0044EPSS
Exploits0References3
NVD
NVD
added 2025/01/09 8:15 a.m.6 views

CVE-2023-1907

A vulnerability was found in pgadmin. Users logging into pgAdmin running in server mode using LDAP authentication may be attached to another user's session if multiple connection attempts occur simultaneously...

8CVSS0.0044EPSS
Exploits0References2
OSV
OSV
added 2025/01/09 8:15 a.m.0 views

UBUNTU-CVE-2023-1907

A vulnerability was found in pgadmin. Users logging into pgAdmin running in server mode using LDAP authentication may be attached to another user's session if multiple connection attempts occur simultaneously...

8CVSS5.7AI score0.0044EPSS
Exploits0References3
Snyk
Snyk
added 2025/01/09 7:46 a.m.3 views

Race Condition

Overview pgadmin4 is a PostgreSQL Tools Affected versions of this package are vulnerable to Race Condition during the LDAP authentication process. An attacker can hijack another user's session by initiating multiple simultaneous login attempts. Remediation Upgrade pgadmin4 to version 7.0 or highe...

8CVSS7.1AI score0.0044EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/01/09 7:26 a.m.16 views

CVE-2023-1907 Pgadmin: users authenticated simultaneously via ldap may be attached to the wrong session

A vulnerability was found in pgadmin. Users logging into pgAdmin running in server mode using LDAP authentication may be attached to another user's session if multiple connection attempts occur simultaneously...

8CVSS0.0044EPSS
Exploits0References2
CVE
CVE
added 2025/01/09 7:26 a.m.79 views

CVE-2023-1907

Summary: CVE-2023-1907 affects pgAdmin4. When logging in to pgAdmin in server mode with LDAP authentication, multiple simultaneous connection attempts may cause a user to be attached to another user’s session. The related open-source/OSV entries indicate a fix for this issue in pgAdmin4 (e.g., OS...

8CVSS7.9AI score0.0044EPSS
Exploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2025/01/09 7:26 a.m.6 views

CVE-2023-1907 Pgadmin: users authenticated simultaneously via ldap may be attached to the wrong session

A vulnerability was found in pgadmin. Users logging into pgAdmin running in server mode using LDAP authentication may be attached to another user's session if multiple connection attempts occur simultaneously...

8CVSS7.3AI score0.0044EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/01/09 12:0 a.m.3 views

pgAdmin 安全漏洞

pgAdmin is pgAdmin open source an open source management and development platform for the open source database PostgreSQL. A security vulnerability exists in pgAdmin that stems from the fact that a user logged into pgAdmin running in server mode using LDAP authentication may attach to another...

8CVSS6.5AI score0.0044EPSS
Exploits0References1
SUSE CVE
SUSE CVE
added 2024/12/27 12:43 a.m.1 views

SUSE CVE-2023-1907

A vulnerability was found in pgadmin. Users logging into pgAdmin running in server mode using LDAP authentication may be attached to another user's session if multiple connection attempts occur simultaneously...

7.1CVSS7.1AI score0.0044EPSS
Exploits0References5
BDU FSTEC
BDU FSTEC
added 2024/12/25 12:0 a.m.5 views

The vulnerability of the Multi-Factor Authentication component of the pgAdmin database management tool allows a malicious individual to gain unauthorized access to the application and execute arbitrary SQL code.

The vulnerability of the Multi-Factor Authentication component of the pgAdmin database management tool exists due to incorrect implementation of multi-factor authentication. Exploiting this vulnerability can allow an attacker to gain unauthorized access to the application and execute arbitrary SQ...

7.4CVSS7.6AI score0.00629EPSS
Exploits0References7Affected Software4
Veeam
Veeam
added 2024/11/14 12:0 a.m.12 views

How to Migrate the Configuration and Repository Cache Databases

Article Applicability This article is intended for use in environments where Veeam Backup for Microsoft 365 8 is already installed. The information provided in this article outlines the process for migrating the Configuration and Cache Databases from one PostgreSQL instance to another, including...

7.4AI score
Exploits0Affected Software1
Rows per page
Query Builder