Lucene search
+L

17192 matches found

Redos
Redos
•added 2025/09/12 12:00 a.m.•10 views

ROS-20250912-07

Vulnerability of pgdump utility of PostgreSQL database management system is related to failure to take measures to protect SQL query structure. protection of SQL query structure. Exploitation of the vulnerability could allow an attacker acting remotely, execute arbitrary code...

8.8CVSS8AI score0.00427EPSS
SaveExploits0
Redos
Redos
•added 2025/09/12 12:00 a.m.•17 views

ROS-20250912-08

Vulnerability of pgdump utility of PostgreSQL database management system is related to failure to take measures to protect SQL query structure. SQL query structure protection. Exploitation of the vulnerability could allow an attacker acting remotely, execute arbitrary code...

8.8CVSS8AI score0.00427EPSS
SaveExploits0
Redos
Redos
•added 2025/09/12 12:00 a.m.•20 views

ROS-20250912-06

Vulnerability of pgdump utility of PostgreSQL database management system is related to failure to take measures to protect SQL query structure. protection of SQL query structure. Exploitation of the vulnerability could allow an attacker acting remotely, execute arbitrary code...

8.8CVSS8AI score0.00427EPSS
SaveExploits0
Redos
Redos
•added 2025/09/12 12:00 a.m.•17 views

ROS-20250912-01

Vulnerability of pgdump utility of PostgreSQL database management system is related to failure to take measures to protect SQL query structure. SQL query structure protection. Exploitation of the vulnerability could allow an attacker acting remotely, execute arbitrary code...

8.8CVSS8AI score0.00427EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2025/09/12 12:00 a.m.•5 views

SUSE SLED15: postgresql16 / postgresql16-contrib / postgresql16-devel / etc (SUSE-SU-2025:03005-2)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:03005-2 advisory. Upgraded to 16.10: CVE-2025-8713: Fixed optimizer statistics exposing sampled data within a vie...

8.8CVSS7.7AI score0.00762EPSS
SaveExploits1References10
Redos
Redos
•added 2025/09/12 12:00 a.m.•21 views

ROS-20250912-05

Vulnerability of pgdump utility of PostgreSQL database management system is related to failure to take measures to protect SQL query structure. protection of SQL query structure. Exploitation of the vulnerability could allow an attacker acting remotely, execute arbitrary code...

8.8CVSS8AI score0.00427EPSS
SaveExploits0
Redos
Redos
•added 2025/09/12 12:00 a.m.•13 views

ROS-20250912-03

Vulnerability of pgdump utility of PostgreSQL database management system is related to failure to take measures to protect SQL query structure. protection of SQL query structure. Exploitation of the vulnerability could allow an attacker acting remotely, execute arbitrary code...

8.8CVSS8AI score0.00427EPSS
SaveExploits0
Redos
Redos
•added 2025/09/12 12:00 a.m.•17 views

ROS-20250912-02

Vulnerability of pgdump utility of PostgreSQL database management system is related to failure to take measures to protect SQL query structure. SQL query structure protection. Exploitation of the vulnerability could allow an attacker acting remotely, execute arbitrary code...

8.8CVSS8AI score0.00427EPSS
SaveExploits0
SUSE Linux
SUSE Linux
•added 2025/09/11 10:22 a.m.•15 views

Security update for postgresql16

This update for postgresql16 fixes the following issues: Upgraded to 16.10: CVE-2025-8713: Fixed optimizer statistics exposing sampled data within a view, partition, or child table bsc1248120 CVE-2025-8714: Fixed untrusted data inclusion in pgdump allows superuser of origin server to execute...

8.8CVSS7.5AI score0.00762EPSS
SaveExploits1References12
osv_suse
osv_suse
•added 2025/09/11 10:21 a.m.•18 views

SUSE-SU-2025:03005-1 Security update for postgresql16

This update for postgresql16 fixes the following issues: Upgraded to 16.10: CVE-2025-8713: Fixed optimizer statistics exposing sampled data within a view, partition, or child table bsc1248120 CVE-2025-8714: Fixed untrusted data inclusion in pgdump allows superuser of origin server to execute...

8.8CVSS7.6AI score0.00762EPSS
SaveExploits1References7
osv_clsa
osv_clsa
•added 2025/09/10 4:50 p.m.•23 views

CLSA-2025-1757523038 Fix CVE(s): CVE-2025-1735

SECURITY UPDATE: inadequate error checking in pgsql and pdopgsql escaping functions - debian/patches/CVE-2025-1735.patch: Add error checks for escape function in pgsql and pdopgsql extensions to prevent storing of improperly escaped data - CVE-2025-1735...

7.5CVSS7AI score0.01EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2025/09/10 1:15 p.m.•20 views

CVE-2025-10226

Dependency on Vulnerable Third-Party Component CWE-1395 in the PostgreSQL backend in AxxonSoft Axxon One C-Werk 2.0.8 and earlier on Windows and Linux allows a remote attacker to escalate privileges, execute arbitrary code, or cause denial-of-service via exploitation of multiple known CVEs presen...

9.3CVSS6AI score0.00607EPSS
SaveExploits0References2
NVD
NVD
•added 2025/09/10 1:15 p.m.•18 views

CVE-2025-10226

Dependency on Vulnerable Third-Party Component CWE-1395 in the PostgreSQL backend in AxxonSoft Axxon One C-Werk 2.0.8 and earlier on Windows and Linux allows a remote attacker to escalate privileges, execute arbitrary code, or cause denial-of-service via exploitation of multiple known CVEs presen...

9.8CVSS0.00607EPSS
SaveExploits0References2
CVE
CVE
•added 2025/09/10 12:38 p.m.•51 views

CVE-2025-10226

CVE-2025-10226 affects AxxonSoft Axxon One (C-Werk) 2.0.8 and earlier due to a dependency on vulnerable PostgreSQL back-end (v10.x). The root cause is reported as dependencies on vulnerable third-party components in PostgreSQL, enabling a remote attacker to escalate privileges, execute arbitrary ...

9.8CVSS7.2AI score0.00607EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2025/09/10 12:38 p.m.•41 views

CVE-2025-10226 PostgreSQL Upgrade from v10 to v17.4 in AxxonSoft Axxon One (C-Werk) 2.0.8 and earlier to Address Multiple Vulnerabilities

Dependency on Vulnerable Third-Party Component CWE-1395 in the PostgreSQL backend in AxxonSoft Axxon One C-Werk 2.0.8 and earlier on Windows and Linux allows a remote attacker to escalate privileges, execute arbitrary code, or cause denial-of-service via exploitation of multiple known CVEs presen...

9.8CVSS0.00607EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/09/10 12:38 p.m.•14 views

CVE-2025-10226 PostgreSQL Upgrade from v10 to v17.4 in AxxonSoft Axxon One (C-Werk) 2.0.8 and earlier to Address Multiple Vulnerabilities

Dependency on Vulnerable Third-Party Component CWE-1395 in the PostgreSQL backend in AxxonSoft Axxon One C-Werk 2.0.8 and earlier on Windows and Linux allows a remote attacker to escalate privileges, execute arbitrary code, or cause denial-of-service via exploitation of multiple known CVEs presen...

9.8CVSS7.2AI score0.00607EPSS
SaveExploits0References2
osv_clsa
osv_clsa
•added 2025/09/10 7:43 a.m.•32 views

CLSA-2025-1757490210 Fix CVE(s): CVE-2025-1735

SECURITY UPDATE: inadequate validation in pgsql and pdopgsql functions - debian/patches/CVE-2025-1735.patch: Add error checks for escape function in pgsql and pdopgsql extensions to prevent potential security issues - CVE-2025-1735...

7.5CVSS5.8AI score0.01EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/09/10 12:00 a.m.•22 views

PT-2025-37045

Name of the Vulnerable Software and Affected Versions: AxxonSoft Axxon One versions 2.0.8 and earlier Description: AxxonSoft Axxon One is affected by a dependency on a vulnerable third-party component, PostgreSQL. This allows a remote attacker to escalate privileges, execute arbitrary code, or...

9.8CVSS7.2AI score0.00607EPSS
SaveExploits0References11
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/10 12:00 a.m.•8 views

CVE-2025-10226: Dependency on Vulnerable Third-Party Component

Dependency on Vulnerable Third-Party Component CWE-1395 in the PostgreSQL backend in AxxonSoft Axxon One C-Werk 2.0.8 and earlier on Windows and Linux allows a remote attacker to escalate privileges, execute arbitrary code, or cause denial-of-service via exploitation of multiple known CVEs presen...

9.8CVSS6.3AI score0.00607EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/09/10 12:00 a.m.•19 views

AxxonSoft AxxonOne 安全漏洞

AxxonSoft AxxonOne is a video surveillance and security management software from AxxonSoft Ireland. A security vulnerability exists in AxxonSoft AxxonOne version 2.0.8 and earlier, which stems from a dependency on vulnerable third-party components in the PostgreSQL backend, and could lead to...

9.8CVSS6.8AI score0.00607EPSS
SaveExploits0References2
Rows per page
Query Builder