Lucene search
+L

13835 matches found

OSV
OSV
added 2026/04/16 3:31 p.m.7 views

GHSA-27H3-CRW2-Q36W SkyWalking OAP /debugging/config/dump endpoint may leak sensitive configuration information

The SkyWalking OAP /debugging/config/dump endpoint may leak sensitive configuration information of MySQL/PostgreSQL. This issue affects Apache SkyWalking: from 9.7.0 through 10.3.0. Users are recommended to upgrade to version 10.4.0, which fixes the issue...

7.5CVSS5.8AI score0.00544EPSS
SaveExploits0References5
Github Security Blog
Github Security Blog
added 2026/04/16 3:31 p.m.11 views

SkyWalking OAP /debugging/config/dump endpoint may leak sensitive configuration information

The SkyWalking OAP /debugging/config/dump endpoint may leak sensitive configuration information of MySQL/PostgreSQL. This issue affects Apache SkyWalking: from 9.7.0 through 10.3.0. Users are recommended to upgrade to version 10.4.0, which fixes the issue...

7.5CVSS5.8AI score0.00544EPSS
SaveExploits0References5Affected Software1
Veeam
Veeam
added 2026/04/16 12:0 a.m.58 views

Release Information for Veeam Backup for Microsoft 365 8.4

More Recent Version Available Please find the latest version of Veeam Backup for Microsoft 365 here: Veeam Downloads - Latest Version Build Numbers and Versions of Veeam Backup for Microsoft 365 Requirements This release can be used to: upgrade an existing v7, v8, v8.1, v8.2, or v8.3 deployment o...

5.7AI score
SaveExploits0Affected Software1
Vulnrichment
Vulnrichment
added 2026/04/15 10:54 a.m.5 views

CVE-2026-30778 Apache SkyWalking: The SkyWalking OAP /debugging/config/dump endpoint may leak sensitive configuration information of MySQL/PostgreSQL.

The SkyWalking OAP /debugging/config/dump endpoint may leak sensitive configuration information of MySQL/PostgreSQL. This issue affects Apache SkyWalking: from 9.7.0 through 10.3.0. Users are recommended to upgrade to version 10.4.0, which fixes the issue...

5.8AI score0.00544EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/04/15 10:54 a.m.38 views

CVE-2026-30778 Apache SkyWalking: The SkyWalking OAP /debugging/config/dump endpoint may leak sensitive configuration information of MySQL/PostgreSQL.

The SkyWalking OAP /debugging/config/dump endpoint may leak sensitive configuration information of MySQL/PostgreSQL. This issue affects Apache SkyWalking: from 9.7.0 through 10.3.0. Users are recommended to upgrade to version 10.4.0, which fixes the issue...

0.00544EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/04/15 10:54 a.m.5 views

CVE-2026-30778

The SkyWalking OAP /debugging/config/dump endpoint may leak sensitive configuration information of MySQL/PostgreSQL. This issue affects Apache SkyWalking: from 9.7.0 through 10.3.0. Users are recommended to upgrade to version 10.4.0, which fixes the issue...

5.8AI score0.00544EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2026/04/15 10:54 a.m.4 views

CVE-2026-30778 Apache SkyWalking: The SkyWalking OAP /debugging/config/dump endpoint may leak sensitive configuration information of MySQL/PostgreSQL.

The SkyWalking OAP /debugging/config/dump endpoint may leak sensitive configuration information of MySQL/PostgreSQL. This issue affects Apache SkyWalking: from 9.7.0 through 10.3.0. Users are recommended to upgrade to version 10.4.0, which fixes the issue...

7.5CVSS5.9AI score0.00544EPSS
SaveExploits0References4
GithubExploit
GithubExploit
added 2026/04/13 12:32 a.m.108 views

blind-sqli-lab

🔬 Blind SQL Injection Lab — Time-Based PostgreSQL + FastAPI...

6AI score
SaveExploits0
ICS
ICS
added 2026/04/13 12:30 a.m.8 views

ABB Ability Symphony Plus Engineering

SUMMARY ABB became aware of vulnerability in the products versions listed as affected in the advisory. The ABB S+ Engineering product versions are affected by vulnerabilities in PostgreSQL version 13.11 and earlier versions. If an attacker gains access to a site’s S+ Client Server network, they...

8.4AI score
SaveExploits0References18
OpenVAS
OpenVAS
added 2026/04/13 12:0 a.m.14 views

SUSE: Security Advisory (SUSE-SU-2026:20983-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS5.8AI score0.01208EPSS
SaveExploits3References8
OpenVAS
OpenVAS
added 2026/04/13 12:0 a.m.5 views

SUSE: Security Advisory (SUSE-SU-2026:20986-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.9CVSS6.5AI score0.00332EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux
added 2026/04/10 11:52 p.m.3 views

php: PHP: Denial of Service via invalid character sequence in PDO PostgreSQL prepared statement

A flaw was found in PHP. When the PDO PHP Data Objects PostgreSQL driver is configured with PDO::ATTREMULATEPREPARES enabled, a remote attacker can exploit a vulnerability by providing an invalid character sequence within a prepared statement parameter. This can cause a null pointer dereference,...

8.2CVSS6.6AI score0.00733EPSS
SaveExploits2References5
Packet Storm News
Packet Storm News
added 2026/04/10 12:0 a.m.4 views

S3CDM: A Secret-Sharing-Scheme-Based Cyberattack Detection Model and Its Simulation Implementation

We design and develop a secret-sharing-scheme-based cyberattack detection modelS3CDMthat can detect unauthorized or illegal activities especially insider attacks and protect sensitive information within complex network infrastructures of large organizations. The model splits a secret among a grou...

5.8AI score
SaveExploits0
Debian
Debian
added 2026/04/09 6:36 a.m.10 views

[SECURITY] [DLA 4524-1] postgresql-13 security update

Debian LTS Advisory DLA-4524-1 [email protected] https://www.debian.org/lts/security/ Jochen Sprickerhof April 08, 2026 https://wiki.debian.org/LTS Package : postgresql-13 Version : 13.23-0+deb11u2 CVE ID : CVE-2026-2003 CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 Debian Bug : Multiple...

8.8CVSS6.6AI score0.01208EPSS
SaveExploits3
OpenVAS
OpenVAS
added 2026/04/09 12:0 a.m.5 views

Debian: Security Advisory (DLA-4524-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS6AI score0.01208EPSS
SaveExploits3References2
OSV
OSV
added 2026/04/08 12:14 a.m.3 views

GHSA-GPJ5-G38J-94V9 Drizzle ORM has SQL injection via improperly escaped SQL identifiers

Summary Drizzle ORM improperly escaped quoted SQL identifiers in its dialect-specific escapeName implementations. In affected versions, embedded identifier delimiters were not escaped before the identifier was wrapped in quotes or backticks. As a result, applications that pass attacker-controlled...

7.5CVSS5.8AI score0.00392EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2026/04/08 12:14 a.m.11 views

Drizzle ORM has SQL injection via improperly escaped SQL identifiers

Summary Drizzle ORM improperly escaped quoted SQL identifiers in its dialect-specific escapeName implementations. In affected versions, embedded identifier delimiters were not escaped before the identifier was wrapped in quotes or backticks. As a result, applications that pass attacker-controlled...

7.5CVSS5.8AI score0.00392EPSS
SaveExploits0References3Affected Software1
RedhatCVE
RedhatCVE
added 2026/04/07 11:32 p.m.5 views

CVE-2026-33816

A flaw was found in github.com/jackc/pgx, a PostgreSQL driver for Go. This memory-safety vulnerability could allow an attacker to cause various impacts, such as denial of service DoS or potentially arbitrary code execution, by exploiting memory corruption issues. The exact method of exploitation...

9.8CVSS6.1AI score0.00561EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
added 2026/04/07 6:31 p.m.5 views

pgx contains memory-safety vulnerability

pgx is a pure Go driver and toolkit for PostgreSQL. pgx prior to v5.9.0 contains a memory-safety vulnerability...

9.8CVSS5.7AI score0.00605EPSS
SaveExploits0References6Affected Software1
OSV
OSV
added 2026/04/07 6:31 p.m.2 views

GHSA-XGRM-4FWX-7QM8 pgx contains memory-safety vulnerability

pgx is a pure Go driver and toolkit for PostgreSQL. pgx prior to v5.9.0 contains a memory-safety vulnerability...

9.8CVSS5.7AI score0.00605EPSS
SaveExploits0References6
Rows per page
Query Builder