CVE-2016-0768

PostgreSQL PL/Java after 9.0 does not honor access controls on large objects...

CVE-2016-0767

PostgreSQL PL/Java before 1.5.0 allows remote authenticated users with USAGE permission on the public schema to alter the public schema classpath...

Design/Logic Flaw

PostgreSQL PL/Java after 9.0 does not honor access controls on large objects...

Path traversal

PostgreSQL PL/Java before 1.5.0 allows remote authenticated users with USAGE permission on the public schema to alter the public schema classpath...

CVE-2016-0768

PostgreSQL PL/Java after 9.0 does not honor access controls on large objects...

CVE-2016-2192

PostgreSQL PL/Java before 1.5.0 allows remote authenticated users to alter type mappings for types they do not own...

Design/Logic Flaw

PostgreSQL PL/Java before 1.5.0 allows remote authenticated users to alter type mappings for types they do not own...

CVE-2016-2192

PostgreSQL PL/Java before 1.5.0 allows remote authenticated users to alter type mappings for types they do not own...

CVE-2016-0767

PostgreSQL PL/Java before 1.5.0 allows remote authenticated users with USAGE permission on the public schema to alter the public schema classpath...

CVE-2016-2192

PostgreSQL PL/Java before 1.5.0 allows remote authenticated users to alter type mappings for types they do not own...

CVE-2016-0768

PostgreSQL PL/Java after 9.0 does not honor access controls on large objects...

CVE-2016-2192

CVE-2016-2192 affects PostgreSQL PL/Java. Before 1.5.0, remote authenticated users could alter type mappings for types they do not own due to improper permission checks. Publicly documented impact is limited to changing mappings, with the vulnerability in PL/Java versions up to 1.4.x (pre-1.5.0)....

CVE-2016-0767

CVE-2016-0767 affects PostgreSQL PL/Java prior to 1.5.0. The issue arises from improper privilege management: remote authenticated users with USAGE on the public schema can alter the public schema classpath, enabling potential code execution or modification through Java procedures. Connection to ...

CVE-2016-0767

PostgreSQL PL/Java before 1.5.0 allows remote authenticated users with USAGE permission on the public schema to alter the public schema classpath...

CVE-2016-0768

CVE-2016-0768 affects PostgreSQL PL/Java (9.0 and earlier); the issue is that access controls on large objects are not honored, potentially enabling access to arbitrary objects. The connected CNVD/OSV/NVD entries corroborate this vulnerability and describe it as a PostgreSQL PL/Java failure to en...

camaro24.pl XSS vulnerability

Open Bug Bounty ID: OBB-225543 Description| Value ---|--- Affected Website:| camaro24.pl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2016-6534

Opmantek NMIS before 4.3.7c has command injection via man, finger, ping, trace, and nslookup in the tools.pl CGI script. Versions before 8.5.12G might be affected in non-default configurations...

CVE-2017-7321

setup/controllers/welcome.php in MODX Revolution 2.5.4-pl and earlier allows remote attackers to execute arbitrary PHP code via the configkey parameter to the setup/index.php?action=welcome URI...

CVE-2017-7320

setup/controllers/language.php in MODX Revolution 2.5.4-pl and earlier does not properly constrain the language parameter, which allows remote attackers to conduct Cookie-Bombing attacks and cause a denial of service cookie quota exhaustion, or conduct HTTP Response Splitting attacks with resulta...

kawerak.org XSS vulnerability

Vulnerable URL: http://www.kawerak.org/cgi-bin/Calcium310.pl/Calendar/Calcium310.pl?CalendarName=%22%3E%3Cimg/src=%22%3E%22onerror=confirm%27XSSPOSED%27%3E=ShowIt=Month=Absolute=Block=9=8=Count=2016/12/1 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017...