13896 matches found
Exploit for OS Command Injection in Postgresql
usage: CVE-2019-9193.py -h -i IP -p PORT -d DATABASE...
[SECURITY] Fedora 42 Update: pgadmin4-9.10-1.fc42
pgAdmin is the most popular and feature rich Open Source administration and d evelopment platform for PostgreSQL, the most advanced Open Source database in the world...
[SECURITY] Fedora 43 Update: pgadmin4-9.10-1.fc43
pgAdmin is the most popular and feature rich Open Source administration and d evelopment platform for PostgreSQL, the most advanced Open Source database in the world...
postgresql15-15.15-1.1 on GA media (moderate)
postgresql15-15.15-1.1 on GA media Announcement ID: openSUSE-SU-2025:15784-1 Rating: moderate Cross-References: CVE-2025-12817 CVE-2025-12818 CVSS scores: CVE-2025-12817 SUSE : 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N CVE-2025-12817 SUSE : 5.3...
postgresql17-17.7-1.1 on GA media (moderate)
postgresql17-17.7-1.1 on GA media Announcement ID: openSUSE-SU-2025:15786-1 Rating: moderate Cross-References: CVE-2025-12817 CVE-2025-12818 CVSS scores: CVE-2025-12817 SUSE : 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N CVE-2025-12817 SUSE : 5.3...
ROOT-OS-DEBIAN-12-CVE-2025-12818 CVE-2025-12818 in rootio-postgresql-15 - Patched by Root
Root has patched CVE-2025-12818 in the rootio-postgresql-15 package for Root:Debian:12. Multiple fixed versions available...
OPENSUSE-SU-2025:15784-1 postgresql15-15.15-1.1 on GA media
These are all security issues fixed in the postgresql15-15.15-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2025:15785-1 postgresql16-16.11-1.1 on GA media
These are all security issues fixed in the postgresql16-16.11-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2025:15786-1 postgresql17-17.7-1.1 on GA media
These are all security issues fixed in the postgresql17-17.7-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2025:15783-1 postgresql14-14.20-1.1 on GA media
These are all security issues fixed in the postgresql14-14.20-1.1 package on the GA media of openSUSE Tumbleweed...
postgresql security update
12.22-5.0.1 - Add backport of CVE-2025-8714 Orabug: 38667546 12.22-5 - Fix previous Backport 12.22-4 - Backport CVE-2025-8715 12.22-3 - Fix backport for CVE-2025-1094 12.22-2 - Backport fix for CVE-2025-1094 12.22-1 - Update to 12.22 - Fixes: CVE-2024-10976 CVE-2024-10978 12.20-1 - Update to 12.2...
OPENSUSE-SU-2025:15782-1 postgresql13-13.23-1.1 on GA media
These are all security issues fixed in the postgresql13-13.23-1.1 package on the GA media of openSUSE Tumbleweed...
CVE-2025-66260
PostgreSQL SQL Injection statussql.php in DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitter versions 30, 50, 100, 300, 500, 1000, 2000, 3000, 3500, 6000, 7000 allows an attacker to perform SQL injection via sw1 and sw2 parameters in statussql.php. The statussql.php endpoint constructs...
CVE-2025-66260
PostgreSQL SQL Injection statussql.php in DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitter versions 30, 50, 100, 300, 500, 1000, 2000, 3000, 3500, 6000, 7000 allows an attacker to perform SQL injection via sw1 and sw2 parameters in statussql.php. The statussql.php endpoint constructs...
EUVD-2025-199673
PostgreSQL SQL Injection statussql.php in DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitter versions 30, 50, 100, 300, 500, 1000, 2000, 3000, 3500, 6000, 7000 allows an attacker to perform SQL injection via sw1 and sw2 parameters in statussql.php. The statussql.php endpoint constructs...
CVE-2025-66260 PostgreSQL SQL Injection (status_sql.php)
PostgreSQL SQL Injection statussql.php in DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitter versions 30, 50, 100, 300, 500, 1000, 2000, 3000, 3500, 6000, 7000 allows an attacker to perform SQL injection via sw1 and sw2 parameters in statussql.php. The statussql.php endpoint constructs...
CVE-2025-66260 PostgreSQL SQL Injection (status_sql.php)
PostgreSQL SQL Injection statussql.php in DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitter versions 30, 50, 100, 300, 500, 1000, 2000, 3000, 3500, 6000, 7000 allows an attacker to perform SQL injection via sw1 and sw2 parameters in statussql.php. The statussql.php endpoint constructs...
CVE-2025-66260
The CVE-2025-66260 entry concerns the DB Electronica Mozart FM Transmitter product line (versions 30–7000). The root cause is SQL injection in status_sql.php: the endpoint constructs UPDATE statements by directly concatenating user-supplied sw1 and sw2 parameters instead of using parameterized qu...
PT-2025-48114
Name of the Vulnerable Software and Affected Versions DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitter versions 30, 50, 100, 300, 500, 1000, 2000, 3000, 3500, 6000, 7000 Description The software is susceptible to a SQL injection issue through the status sql.php endpoint. The endpoint...