Lucene search
+L

14258 matches found

Tenable Nessus
Tenable Nessus
added 2026/02/02 12:0 a.m.8 views

RHEL 10 : php (RHSA-2026:1628)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:1628 advisory. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fixes: php: heap-based buffer overflow in...

8.2CVSS5.8AI score0.00733EPSS
SaveExploits4References8
OSV
OSV
added 2026/02/02 12:0 a.m.11 views

ALSA-2026:1628 Important: php security update

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fixes: php: heap-based buffer overflow in arraymerge CVE-2025-14178 php: PHP: Information disclosure via getimagesize function when reading multi-chunk images CVE-2025-14177 php: PHP: Denial of Service...

8.2CVSS5.7AI score0.00733EPSS
SaveExploits4References8
Tenable Nessus
Tenable Nessus
added 2026/02/02 12:0 a.m.8 views

MiracleLinux 8 : php:8.2 (AXSA:2026-124:01)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-124:01 advisory. php: pgsql extension does not check for errors during escaping CVE-2025-1735 php: NULL Pointer Dereference in PHP SOAP Extension via Large XML...

8.2CVSS5.8AI score0.01EPSS
SaveExploits6References7
Tenable Nessus
Tenable Nessus
added 2026/02/02 12:0 a.m.8 views

AlmaLinux 10 : php (ALSA-2026:1628)

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:1628 advisory. php: heap-based buffer overflow in arraymerge CVE-2025-14178 php: PHP: Information disclosure via getimagesize function when reading multi-chunk images...

8.2CVSS5.8AI score0.00733EPSS
SaveExploits4References5
Tenable Nessus
Tenable Nessus
added 2026/01/31 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2025-69662

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - SQL injection vulnerability in geopandas before v.1.1.2 allows an attacker to obtain sensitive information via the topostgis function being used to write...

8.6CVSS5.9AI score0.00385EPSS
SaveExploits1References2
Github Security Blog
Github Security Blog
added 2026/01/30 9:30 p.m.12 views

geopandas SQL Injection Vulnerability in to_postgis() Allows Information Disclosure

SQL injection vulnerability in geopandas before v.1.1.2 allows an attacker to obtain sensitive information via the topostgis function being used to write GeoDataFrames to a PostgreSQL database...

8.6CVSS5.9AI score0.00385EPSS
SaveExploits1References9Affected Software1
OSV
OSV
added 2026/01/30 9:30 p.m.7 views

GHSA-6497-PRX7-GPMQ geopandas SQL Injection Vulnerability in to_postgis() Allows Information Disclosure

SQL injection vulnerability in geopandas before v.1.1.2 allows an attacker to obtain sensitive information via the topostgis function being used to write GeoDataFrames to a PostgreSQL database...

8.6CVSS6AI score0.00385EPSS
SaveExploits1References9
PyPA
PyPA
added 2026/01/30 7:16 p.m.15 views

PYSEC-2026-62

SQL injection vulnerability in geopandas before v.1.1.2 allows an attacker to obtain sensitive information via the topostgis function being used to write GeoDataFrames to a PostgreSQL database...

8.6CVSS5.8AI score0.00385EPSS
SaveExploits1References4Affected Software1
OSV
OSV
added 2026/01/30 7:16 p.m.9 views

UBUNTU-CVE-2025-69662

SQL injection vulnerability in geopandas before v.1.1.2 allows an attacker to obtain sensitive information via the topostgis function being used to write GeoDataFrames to a PostgreSQL database...

8.6CVSS5.9AI score0.00385EPSS
SaveExploits1References5
UbuntuCve
UbuntuCve
added 2026/01/30 7:16 p.m.7 views

CVE-2025-69662

SQL injection vulnerability in geopandas before v.1.1.2 allows an attacker to obtain sensitive information via the topostgis function being used to write GeoDataFrames to a PostgreSQL database...

8.6CVSS5.9AI score0.00385EPSS
SaveExploits1References4
OSV
OSV
added 2026/01/30 5:21 p.m.7 views

CLEANSTART-2026-HJ04971 vulnerability was found in PostgreSQL with the use of the MERGE command, which fails to test new rows against row security policies defined for UPDATE and SELECT

Multiple security vulnerabilities affect the postgresql package. A vulnerability was found in PostgreSQL with the use of the MERGE command, which fails to test new rows against row security policies defined for UPDATE and SELECT. See references for individual vulnerability details...

9.8CVSS7.9AI score0.61566EPSS
SaveExploits3References69
OSV
OSV
added 2026/01/30 5:19 p.m.8 views

CLEANSTART-2026-FW42039 vulnerability was found in PostgreSQL with the use of the MERGE command, which fails to test new rows against row security policies defined for UPDATE and SELECT

Multiple security vulnerabilities affect the postgresql package. A vulnerability was found in PostgreSQL with the use of the MERGE command, which fails to test new rows against row security policies defined for UPDATE and SELECT. See references for individual vulnerability details...

9.8CVSS5.8AI score0.61566EPSS
SaveExploits3References73
OSV
OSV
added 2026/01/30 5:4 p.m.7 views

CLEANSTART-2026-ZC18474 PostgreSQL optimizer statistics allow a user to read sampled data within a view that the user cannot access

Multiple security vulnerabilities affect the postgresql package. PostgreSQL optimizer statistics allow a user to read sampled data within a view that the user cannot access. See references for individual vulnerability details...

9.8CVSS8.5AI score0.9003EPSS
SaveExploits12References21
OSV
OSV
added 2026/01/30 5:3 p.m.6 views

CLEANSTART-2026-KA40024 PostgreSQL optimizer statistics allow a user to read sampled data within a view that the user cannot access

Multiple security vulnerabilities affect the postgresql package. PostgreSQL optimizer statistics allow a user to read sampled data within a view that the user cannot access. See references for individual vulnerability details...

9.8CVSS5.8AI score0.9003EPSS
SaveExploits12References19
OSV
OSV
added 2026/01/30 4:26 p.m.6 views

CLEANSTART-2026-AI42483 PostgreSQL optimizer statistics allow a user to read sampled data within a view that the user cannot access

Multiple security vulnerabilities affect the postgresql package. PostgreSQL optimizer statistics allow a user to read sampled data within a view that the user cannot access. See references for individual vulnerability details...

9.8CVSS5.6AI score0.02533EPSS
SaveExploits1References11
OSV
OSV
added 2026/01/30 4:26 p.m.4 views

CLEANSTART-2026-DJ71086 PostgreSQL optimizer statistics allow a user to read sampled data within a view that the user cannot access

Multiple security vulnerabilities affect the postgresql package. PostgreSQL optimizer statistics allow a user to read sampled data within a view that the user cannot access. See references for individual vulnerability details...

9.8CVSS5.6AI score0.02533EPSS
SaveExploits1References11
ATTACKERKB
ATTACKERKB
added 2026/01/30 12:0 a.m.7 views

CVE-2025-69662

SQL injection vulnerability in geopandas before v.1.1.2 allows an attacker to obtain sensitive information via the topostgis function being used to write GeoDataFrames to a PostgreSQL database...

8.6CVSS5.9AI score0.00385EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2026/01/30 12:0 a.m.23 views

Geopandas security vulnerabilities

Geopandas is an open-source Python tool for processing geospatial data. Versions of geopandas prior to 1.1.2 contained a security vulnerability. This vulnerability stemmed from a flaw in the topostgis function, which could allow attackers to access sensitive information when writing GeoDataFrames...

8.6CVSS5.8AI score0.00385EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2026/01/30 12:0 a.m.6 views

CVE-2025-69662

SQL injection vulnerability in geopandas before v.1.1.2 allows an attacker to obtain sensitive information via the topostgis function being used to write GeoDataFrames to a PostgreSQL database...

5.9AI score0.00385EPSS
SaveExploits1References2
EUVD
EUVD
added 2026/01/30 12:0 a.m.7 views

EUVD-2025-206572

SQL injection vulnerability in geopandas before v.1.1.2 allows an attacker to obtain sensitive information via the topostgis function being used to write GeoDataFrames to a PostgreSQL database...

8.6CVSS5.9AI score0.00385EPSS
SaveExploits1References2
Rows per page
Query Builder