Postgresql PostgreSQL 资源管理错误漏洞

PostgreSQL is a free object-relational database management system organized by Postgresql. The system supports most of the SQL standards and provides many other features, such as foreign keys, triggers, views, etc. A resource management error vulnerability exists in PostgreSQL, which arises from...

PT-2021-5826 · Unknown +4 · Postgresql +4

Name of the Vulnerable Software and Affected Versions: Active Record versions prior to 6.1.2.1 Active Record versions prior to 6.0.3.5 Active Record versions prior to 5.2.4.5 Description: The PostgreSQL adapter in Active Record suffers from a regular expression denial of service REDoS...

Rails -- multiple vulnerabilities

Ruby on Rails blog: Rails version 5.2.4.5, 6.0.3.5 and 6.1.2.1 have been released! Those version are security releases and addresses two issues: CVE-2021-22880: Possible DoS Vulnerability in Active Record PostgreSQL adapter. CVE-2021-22881: Possible Open Redirect in Host Authorization Middleware...

Possible DoS Vulnerability in Active Record PostgreSQL adapter

There is a possible DoS vulnerability in the PostgreSQL adapter in Active Record. This vulnerability has been assigned the CVE identifier CVE-2021-22880. Versions Affected: = 4.2.0 Not affected: 4.2.0 Fixed Versions: 6.1.2.1, 6.0.3.5, 5.2.4.5 Impact ------ Carefully crafted input can cause the...

PT-2021-2222 · Unknown +3 · Postgresql +2

Name of the Vulnerable Software and Affected Versions: PostgreSQL versions prior to 13.2 PostgreSQL versions prior to 12.6 PostgreSQL versions prior to 11.11 PostgreSQL versions prior to 10.16 PostgreSQL versions prior to 9.6.21 PostgreSQL versions prior to 9.5.25 Description: A flaw was found in...

PT-2021-1982 · Unknown +10 · Postgresql +9

Name of the Vulnerable Software and Affected Versions: postgresql versions prior to 13.2 postgresql versions prior to 12.6 postgresql versions prior to 11.11 Description: An information leak was discovered in postgresql. A user with UPDATE permission but not SELECT permission to a particular colu...

Security Bulletin: IBM Data Risk Manager is affected by multiple vulnerabilities

Summary IBM Data Risk Manager has addressed the following vulnerabilities: Vulnerability Details CVEID: CVE-2020-14305 DESCRIPTION: Linux Kernel could allow a remote attacker to gain elevated privileges on the system, caused by an out-of-bounds memory write flaw in how the Voice Over IP H.323...

Huawei EulerOS: Security Advisory for postgresql-jdbc (EulerOS-SA-2021-1165)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CentOS 8 : postgresql:10 (CESA-2020:3669)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:3669 advisory. - postgresql: Selectivity estimators bypass row security policies CVE-2019-10130 - postgresql: Stack-based buffer overflow via setting a password...

CentOS 8 : postgresql:9.6 (CESA-2020:5619)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:5619 advisory. - postgresql: Selectivity estimators bypass row security policies CVE-2019-10130 - postgresql: TYPE in pgtemp executes arbitrary SQL during SECURITY...

CentOS 8 : postgresql:10 (CESA-2020:5567)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:5567 advisory. - postgresql: Reconnection can downgrade connection security settings CVE-2020-25694 - postgresql: Multiple features escape security restricted operati...

EulerOS 2.0 SP8 : postgresql-jdbc (EulerOS-SA-2021-1165)

According to the version of the postgresql-jdbc package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A flaw was found in PostgreSQL JDBC in versions prior to 42.2.13. An XML External Entity XXE weakness was found in PostgreSQL JDBC. The...

CentOS 8 : postgresql:12 (CESA-2020:5620)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:5620 advisory. - postgresql: Uncontrolled search path element in logical replication CVE-2020-14349 - postgresql: Uncontrolled search path element in CREATE EXTENSION...

OpenCVE - CVE Alerting Platform

OpenCVE , formerly known as Saucs , is a platform used to locally import the list of CVEs and perform searches on it by vendors, products, CVSS, CWE.... Users subscribe to vendors or products, and OpenCVE alerts them when a new CVE is created or when an update is done in an existing CVE. How does...

SUSE SLES12 Security Update : postgresql, postgresql12, postgresql13 (SUSE-SU-2021:0217-1)

This update for postgresql, postgresql12, postgresql13 fixes the following issues : Initial packaging of PostgreSQL 13 : https://www.postgresql.org/about/news/2077/ https://www.postgresql.org/docs/13/release-13.html Changes in postgresql : Bump postgresql major version to 13. Changes in...

SUSE-SU-2021:0217-1 Security update for postgresql, postgresql12, postgresql13

This update for postgresql, postgresql12, postgresql13 fixes the following issues: Initial packaging of PostgreSQL 13: https://www.postgresql.org/about/news/2077/ https://www.postgresql.org/docs/13/release-13.html Changes in postgresql: - Bump postgresql major version to 13. Changes in...

openSUSE Security Update : stunnel (openSUSE-2021-160)

This update for stunnel fixes the following issues : Security issue fixed : - The 'redirect' option was fixed to properly handle 'verifyChain = yes' bsc1177580. Non-security issues fixed : - Fix startup problem of the stunnel daemon bsc1178533 - update to 5.57 : - Security bugfixes - New features...

GitLab: Stored-XSS on wiki pages

Hello, A Stored-XSS is existing on Wiki pages. It is caused by recent change in show.html.hamlL10 ruby ... "".htmlsafe ... authorurl is defined by committed email in wikipageversion.rb: ruby delegate :message, :sha, :id, :authorname, :authoremail, :authoreddate, to: :commit def authorurl user =...

OPENSUSE-SU-2021:0160-1 Security update for stunnel

This update for stunnel fixes the following issues: Security issue fixed: - The 'redirect' option was fixed to properly handle 'verifyChain = yes' bsc1177580. Non-security issues fixed: - Fix startup problem of the stunnel daemon bsc1178533 - update to 5.57: Security bugfixes New features - New...

Security update for stunnel (moderate)

openSUSE Security Update: Security update for stunnel Announcement ID: openSUSE-SU-2021:0160-1 Rating: moderate References: 1177580 1178533 Affected Products: openSUSE Leap 15.2 An update that contains security fixes can now be installed. Description: This update for stunnel fixes the following...