Lucene search
K

77 matches found

AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.3 views

Astra Linux - уязвимость в pgpool2

Information disclosure vulnerabilities exist in Pgpool-II versions 4.4.0 to 4.4.1 4.4 series, 4.3.0 to 4.3.4 4.3 series, 4.2.0 to 4.2.11 4.2 series, 4.1.0 to 4.1.14 4.1 series, 4.0.0 to 4.0.21 4.0 series, all versions of the 3.7 series, all versions of the 3.6 series, all versions of the 3.5...

6.5CVSS6.6AI score0.00234EPSS
Exploits0References2
AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.2 views

Astra Linux - уязвимость в pgpool2

In Pgpool-II, there is a risk of exposing sensitive information due to incompatible policy issues. If a database user accesses the query cache, unauthorized table data may be retrieved for that user...

7.5CVSS6.7AI score0.00202EPSS
Exploits0References2
AstraLinux
AstraLinux
added 2026/05/03 11:59 p.m.2 views

Astra Linux - уязвимость в pgpool2

The Pgpool-II provided by PgPool Global Development Group contains a authentication bypass vulnerability as a primary weakness. If this vulnerability is exploited, an attacker may be able to log in to the system as an arbitrary user, allowing them to read or tamper with data in the database, and/...

9.8CVSS7.4AI score0.00125EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/12/08 12:0 a.m.2 views

Debian dsa-5974 : libpgpool-dev - security update

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5974 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-5974-1 [email protected] https://www.debian.org/securit...

9.8CVSS7.2AI score0.00202EPSS
Exploits0References6
IBM Security Bulletins
IBM Security Bulletins
added 2025/10/29 10:40 a.m.4 views

Security Bulletin: CVE-2025-46801 - Pgpool-II Authentication Bypass

Summary Pgpool-II contains an authentication bypass vulnerability that can be exploited under certain conditions. If an attacker exploits the vulnerability they may be able to log in to the system as an arbitrary user, which could allow them to read or tamper with data in the database, and/or...

9.8CVSS9.3AI score0.00125EPSS
Exploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2025/10/29 8:54 a.m.5 views

Security Bulletin: CVE-2025-46801 - Pgpool-II Authentication Bypass

Summary Pgpool-II contains an authentication bypass vulnerability that can be exploited under certain conditions. If an attacker exploits the vulnerability they may be able to log in to the system as an arbitrary user, which could allow them to read or tamper with data in the database, and/or...

9.8CVSS8.8AI score0.70344EPSS
Exploits0Affected Software2
IBM Security Bulletins
IBM Security Bulletins
added 2025/10/29 8:35 a.m.3 views

Security Bulletin: CVE-2025-46801 - Pgpool-II Authentication Bypass

Summary Pgpool-II contains an authentication bypass vulnerability that can be exploited under certain conditions. If an attacker exploits the vulnerability they may be able to log in to the system as an arbitrary user, which could allow them to read or tamper with data in the database, and/or...

9.8CVSS9.3AI score0.00125EPSS
Exploits0Affected Software2
Redos
Redos
added 2025/10/28 12:0 a.m.2 views

ROS-20251028-03

The vulnerability of the Pgpool-II database connection pooling management utility is related to disclosure of information. Exploitation of the vulnerability could allow an attacker acting remotely to gain access to the sensitive data...

7.5CVSS6.9AI score0.00202EPSS
Exploits0
Redos
Redos
added 2025/10/28 12:0 a.m.2 views

ROS-20251028-05

The vulnerability of the Pgpool-II database connection pooling management utility is related to disclosure of information. Exploitation of the vulnerability could allow an attacker acting remotely to gain access to the sensitive data...

7.5CVSS6.9AI score0.00202EPSS
Exploits0
Redos
Redos
added 2025/10/28 12:0 a.m.4 views

ROS-20251028-06

The vulnerability of the Pgpool-II database connection pooling management utility is related to disclosure of information. Exploitation of the vulnerability could allow an attacker acting remotely to gain access to the sensitive data...

7.5CVSS6.9AI score0.00202EPSS
Exploits0
Redos
Redos
added 2025/10/28 12:0 a.m.3 views

ROS-20251028-04

The vulnerability of the Pgpool-II database connection pooling management utility is related to disclosure of information. Exploitation of the vulnerability could allow an attacker acting remotely to gain access to the sensitive data...

7.5CVSS6.9AI score0.00202EPSS
Exploits0
Redos
Redos
added 2025/10/28 12:0 a.m.3 views

ROS-20251028-02

The vulnerability of the Pgpool-II database connection pooling management utility is related to disclosure of information. Exploitation of the vulnerability could allow an attacker acting remotely to gain access to the sensitive data...

7.5CVSS6.9AI score0.00202EPSS
Exploits0
OpenVAS
OpenVAS
added 2025/10/17 12:0 a.m.2 views

Debian: Security Advisory (DLA-4334-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS6.8AI score0.00125EPSS
Exploits0References2
Debian
Debian
added 2025/10/16 8:20 p.m.11 views

[SECURITY] [DLA 4334-1] pgpool2 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4334-1 [email protected] https://www.debian.org/lts/security/ Bastien Roucariès October 16, 2025 https://wiki.debian.org/LTS -...

9.8CVSS9.4AI score0.00125EPSS
Exploits0
OSV
OSV
added 2025/10/16 12:0 a.m.2 views

DLA-4334-1 pgpool2 - security update

Bulletin has no description...

9.8CVSS7AI score0.00125EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2025/10/16 12:0 a.m.2 views

Debian dla-4334 : libpgpool-dev - security update

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-4334 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4334-1 [email protected] https://www.debian.org/lts/security/...

9.8CVSS8.1AI score0.00125EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2025-15682

Malicious code in bioql PyPI...

9.8CVSS9.2AI score0.00125EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2023-26495

Malicious code in bioql PyPI...

6.5CVSS6.3AI score0.00234EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/30 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2023-22332

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Information disclosure vulnerability exists in Pgpool-II 4.4.0 to 4.4.1 4.4 series, 4.3.0 to 4.3.4 4.3 series, 4.2.0 to 4.2.11 4.2 series, 4.1.0 to 4.1.14 4.1...

6.5CVSS6.6AI score0.00234EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/27 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2025-46801

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Pgpool-II provided by PgPool Global Development Group contains an authentication bypass by primary weakness vulnerability. if the vulnerability is exploited, an...

9.8CVSS7.4AI score0.00125EPSS
Exploits0References2
Rows per page
Query Builder