119 matches found
USN-5238-1 libpgjava vulnerability
It was discovered that PostgreSQL JDBC Driver incorrectly handled certain requests from external entities. A remote attacker could use this vulnerability to cause a denial of service or possibly execute arbitrary code...
CVE-2022-31197: Improper Neutralization of Special Elements used in an SQL Command
PostgreSQL JDBC Driver PgJDBC for short allows Java programs to connect to a PostgreSQL database using standard, database independent Java code. The PGJDBC implementation of the java.sql.ResultRow.refreshRow method is not performing escaping of column names so a malicious column name that contain...
PT-2022-4318
Name of the Vulnerable Software and Affected Versions PostgreSQL JDBC Driver versions prior to 42.2.26 PostgreSQL JDBC Driver versions prior to 42.4.1 Description The PGJDBC implementation of the java.sql.ResultRow.refreshRow method is not performing escaping of column names, allowing a malicious...
[SECURITY] [DSA 5196-1] libpgjava security update
------------------------------------------------------------------------- Debian Security Advisory DSA-5196-1 [email protected] https://www.debian.org/security/ Markus Koschany July 31, 2022 https://www.debian.org/security/faq -...
Debian DSA-5196-1 : libpgjava - security update
The remote Debian 10 / 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5196 advisory. - PostgreSQL JDBC Driver aka PgJDBC before 42.2.13 allows XXE. CVE-2020-13692 - pgjdbc is the offical PostgreSQL JDBC Driver. A security hole was found in th...
OESA-2022-1535 postgresql-jdbc security update
PostgreSQL JDBC Driver PgJDBC for short allows Java programs to connect to a PostgreSQL database using standard, database independent Java code. Is an open source JDBC driver written in Pure Java Type 4, and communicates in the PostgreSQL native network protocol. Security Fixes: pgjdbc is the...
AlmaLinux 8 : postgresql-jdbc (ALSA-2020:3176)
The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2020:3176 advisory. - PostgreSQL JDBC Driver aka PgJDBC before 42.2.13 allows XXE. CVE-2020-13692 Note that Nessus has not tested for this issue but has instead relied only on the...
CVE-2022-21724 Unchecked Class Instantiation when providing Plugin Classes
pgjdbc is the offical PostgreSQL JDBC Driver. A security hole was found in the jdbc driver for postgresql database while doing security research. The system using the postgresql library will be attacked when attacker control the jdbc url or properties. pgjdbc instantiates plugin instances based o...
CVE-2022-21724: Improper Initialization
pgjdbc is the offical PostgreSQL JDBC Driver. A security hole was found in the jdbc driver for postgresql database while doing security research. The system using the postgresql library will be attacked when attacker control the jdbc url or properties. pgjdbc instantiates plugin instances based o...
Security Bulletin: IBM Disconnected Log Collector is vulnerable to using components with known vulnerabilities (CVE-2016-3506, CVE-2020-13692)
Summary The product includes vulnerable components e.g., framework libraries that may be identified and exploited with automated tools. Vulnerability Details CVEID: CVE-2016-3506 DESCRIPTION: An unspecified vulnerability in multiple Oracle products could allow an unauthenticated attacker to take...
CVE-2020-13692
PostgreSQL JDBC Driver aka PgJDBC before 42.2.13 allows XXE...
DEBIAN-CVE-2020-13692
PostgreSQL JDBC Driver aka PgJDBC before 42.2.13 allows XXE...
CVE-2020-13692
PostgreSQL JDBC Driver aka PgJDBC before 42.2.13 allows XXE...
UBUNTU-CVE-2020-13692
PostgreSQL JDBC Driver aka PgJDBC before 42.2.13 allows XXE...
CVE-2020-13692
PostgreSQL JDBC Driver aka PgJDBC before 42.2.13 allows XXE...
CVE-2020-13692
PostgreSQL JDBC Driver aka PgJDBC before 42.2.13 allows XXE...
CVE-2020-13692: Improper Restriction of XML External Entity Reference
PostgreSQL JDBC Driver aka PgJDBC before 42.2.13 allows XXE...
CVE-2012-1618: Undefined Security Weakness
Interaction error in the PostgreSQL JDBC driver before 8.2, when used with a PostgreSQL server with the "standardconformingstrings" option enabled, such as the default configuration of PostgreSQL 9.1, does not properly escape unspecified JDBC statement parameters, which allows remote attackers to...
PT-2012-3386 · Postgresql · Postgresql Jdbc Driver
Name of the Vulnerable Software and Affected Versions: PostgreSQL JDBC driver versions prior to 8.2 Description: The issue arises from an interaction error in the PostgreSQL JDBC driver when used with a PostgreSQL server that has the "standard conforming strings" option enabled. This error allows...