Lucene search
+L

17356 matches found

osv_ubuntu
osv_ubuntu
•added 2026/01/30 7:16 p.m.•15 views

UBUNTU-CVE-2025-69662

SQL injection vulnerability in geopandas before v.1.1.2 allows an attacker to obtain sensitive information via the topostgis function being used to write GeoDataFrames to a PostgreSQL database...

8.6CVSS6AI score0.0043EPSS
SaveExploits1References5
osv_cleanstart
osv_cleanstart
•added 2026/01/30 5:21 p.m.•26 views

CLEANSTART-2026-HJ04971 vulnerability was found in PostgreSQL with the use of the MERGE command, which fails to test new rows against row security policies defined for UPDATE and SELECT

Multiple security vulnerabilities affect the postgresql package. A vulnerability was found in PostgreSQL with the use of the MERGE command, which fails to test new rows against row security policies defined for UPDATE and SELECT. See references for individual vulnerability details...

9.8CVSS6.4AI score0.61566EPSS
SaveExploits3References69
osv_cleanstart
osv_cleanstart
•added 2026/01/30 5:19 p.m.•29 views

CLEANSTART-2026-FW42039 vulnerability was found in PostgreSQL with the use of the MERGE command, which fails to test new rows against row security policies defined for UPDATE and SELECT

Multiple security vulnerabilities affect the postgresql package. A vulnerability was found in PostgreSQL with the use of the MERGE command, which fails to test new rows against row security policies defined for UPDATE and SELECT. See references for individual vulnerability details...

9.8CVSS6.4AI score0.61566EPSS
SaveExploits3References73
osv_cleanstart
osv_cleanstart
•added 2026/01/30 5:04 p.m.•21 views

CLEANSTART-2026-ZC18474 PostgreSQL optimizer statistics allow a user to read sampled data within a view that the user cannot access

Multiple security vulnerabilities affect the postgresql package. PostgreSQL optimizer statistics allow a user to read sampled data within a view that the user cannot access. See references for individual vulnerability details...

9.8CVSS7AI score0.9003EPSS
SaveExploits12References21
osv_cleanstart
osv_cleanstart
•added 2026/01/30 5:03 p.m.•20 views

CLEANSTART-2026-KA40024 PostgreSQL optimizer statistics allow a user to read sampled data within a view that the user cannot access

Multiple security vulnerabilities affect the postgresql package. PostgreSQL optimizer statistics allow a user to read sampled data within a view that the user cannot access. See references for individual vulnerability details...

9.8CVSS7AI score0.9003EPSS
SaveExploits12References19
osv_cleanstart
osv_cleanstart
•added 2026/01/30 4:26 p.m.•15 views

CLEANSTART-2026-DJ71086 PostgreSQL optimizer statistics allow a user to read sampled data within a view that the user cannot access

Multiple security vulnerabilities affect the postgresql package. PostgreSQL optimizer statistics allow a user to read sampled data within a view that the user cannot access. See references for individual vulnerability details...

9.8CVSS6.7AI score0.02555EPSS
SaveExploits1References11
osv_cleanstart
osv_cleanstart
•added 2026/01/30 4:26 p.m.•13 views

CLEANSTART-2026-AI42483 PostgreSQL optimizer statistics allow a user to read sampled data within a view that the user cannot access

Multiple security vulnerabilities affect the postgresql package. PostgreSQL optimizer statistics allow a user to read sampled data within a view that the user cannot access. See references for individual vulnerability details...

9.8CVSS6.7AI score0.02555EPSS
SaveExploits1References11
BDU FSTEC
BDU FSTEC
•added 2026/01/30 12:00 a.m.•18 views

postgresql phpPgAdmin Command Injection

The vulnerability of the phpPgAdmin web administration tool for PostgreSQL is related to the failure to take measures to neutralize special elements. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...

9CVSS7.5AI score0.00262EPSS
SaveExploits0References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/30 12:00 a.m.•3 views

CVE-2025-69662: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in geopandas before v.1.1.2 allows an attacker to obtain sensitive information via the topostgis function being used to write GeoDataFrames to a PostgreSQL database...

8.6CVSS6AI score0.0043EPSS
SaveExploits1References1
EUVD
EUVD
•added 2026/01/30 12:00 a.m.•21 views

EUVD-2025-206572

SQL injection vulnerability in geopandas before v.1.1.2 allows an attacker to obtain sensitive information via the topostgis function being used to write GeoDataFrames to a PostgreSQL database...

8.6CVSS6AI score0.0043EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2026/01/30 12:00 a.m.•13 views

CVE-2025-69662

SQL injection vulnerability in geopandas before v.1.1.2 allows an attacker to obtain sensitive information via the topostgis function being used to write GeoDataFrames to a PostgreSQL database...

8.6CVSS6AI score0.0043EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
•added 2026/01/30 12:00 a.m.•11 views

CVE-2025-69662

SQL injection vulnerability in geopandas before v.1.1.2 allows an attacker to obtain sensitive information via the topostgis function being used to write GeoDataFrames to a PostgreSQL database...

6AI score0.0043EPSS
SaveExploits1References2
CVE
CVE
•added 2026/01/30 12:00 a.m.•65 views

CVE-2025-69662

The geopandas library, a tool for geospatial data analysis within the Pandas suite, contains a SQL injection vulnerability in versions prior to v.1.1.2 . The flaw exists in the to_postgis() function, which is used to write GeoDataFrames to a PostgreSQL database. An attacker could exploit this vul...

8.6CVSS6AI score0.0043EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
•added 2026/01/30 12:00 a.m.•44 views

CVE-2025-69662

SQL injection vulnerability in geopandas before v.1.1.2 allows an attacker to obtain sensitive information via the topostgis function being used to write GeoDataFrames to a PostgreSQL database...

0.0043EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2026/01/30 12:00 a.m.•38 views

Geopandas security vulnerabilities

Geopandas is an open-source Python tool for processing geospatial data. Versions of geopandas prior to 1.1.2 contained a security vulnerability. This vulnerability stemmed from a flaw in the topostgis function, which could allow attackers to access sensitive information when writing GeoDataFrames...

8.6CVSS5.9AI score0.0043EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2026/01/30 12:00 a.m.•23 views

AlmaLinux 9 : php:8.3 (ALSA-2026:1429)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:1429 advisory. php: heap-based buffer overflow in arraymerge CVE-2025-14178 php: PHP: Information disclosure via getimagesize function when reading multi-chunk images...

8.2CVSS6.9AI score0.00697EPSS
SaveExploits4References5
Positive Technologies
Positive Technologies
•added 2026/01/30 12:00 a.m.•7 views

PT-2026-21007

Name of the Vulnerable Software and Affected Versions postgresql affected versions not specified Description The postgresql package is affected by multiple security issues. One issue involves the MERGE command failing to properly enforce row security policies for UPDATE and SELECT operations,...

9.8CVSS6.9AI score0.4644EPSS
SaveExploits5References93
Positive Technologies
Positive Technologies
•added 2026/01/30 12:00 a.m.•8 views

PT-2026-24084

Name of the Vulnerable Software and Affected Versions postgresql affected versions not specified Description A security issue exists in the MERGE command, which fails to validate new rows against row security policies defined for UPDATE and SELECT. Row security policies are rules that restrict...

9.8CVSS6.4AI score0.61566EPSS
SaveExploits3References77
osv_cve
osv_cve
•added 2026/01/30 12:00 a.m.•14 views

CVE-2025-69662

SQL injection vulnerability in geopandas before v.1.1.2 allows an attacker to obtain sensitive information via the topostgis function being used to write GeoDataFrames to a PostgreSQL database...

8.6CVSS5.9AI score
SaveExploits0References5
KittySploit
KittySploit
•added 2026/01/29 12:00 p.m.•9 views

PostgreSQL Listener

PostgreSQL database listener - creates interactive PostgreSQL shell session !/usr/bin/env python3 -- coding: utf-8 -- """ PostgreSQL database listener - connects to a PostgreSQL server and creates an interactive session. """ from kittysploit import import psycopg2 class ModuleListener:...

5.8AI score
SaveExploits0References1
Rows per page
Query Builder