Amazon Linux 2 : postgresql-jdbc (ALAS-2020-1482)

The version of postgresql-jdbc installed on the remote host is prior to 9.2.1002-8. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2020-1482 advisory. PostgreSQL JDBC Driver aka PgJDBC before 42.2.13 allows XXE. A flaw was found in PostgreSQL JDBC in versions prior to...

Important: postgresql-jdbc

Issue Overview: PostgreSQL JDBC Driver aka PgJDBC before 42.2.13 allows XXE. A flaw was found in PostgreSQL JDBC in versions prior to 42.2.13. An XML External Entity XXE weakness was found in PostgreSQL JDBC. The highest threat from this vulnerability is to data confidentiality and system...

openSUSE Security Update : libqt5-qtbase (openSUSE-2020-1319)

This update for libqt5-qtbase fixes the following issues : - Fixed a possible crash in certificate parsing. - Fixed a DoS in QSslSocket bsc1172726, CVE-2020-13962. - Added support for PostgreSQL 12 bsc1173758. This update was imported from the SUSE:SLE-15-SP2:Update update project. C Tenable...

OPENSUSE-SU-2020:1319-1 Security update for libqt5-qtbase

This update for libqt5-qtbase fixes the following issues: - Fixed a possible crash in certificate parsing. - Fixed a DoS in QSslSocket bsc1172726, CVE-2020-13962. - Added support for PostgreSQL 12 bsc1173758. This update was imported from the SUSE:SLE-15-SP2:Update update project...

OPENSUSE-SU-2020:1312-1 Security update for postgresql10

This update for postgresql10 fixes the following issues: - update to 10.14: CVE-2020-14349, bsc1175193: Set a secure searchpath in logical replication walsenders and apply workers CVE-2020-14350, bsc1175194: Make contrib modules' installation scripts more secure...

Security update for libqt5-qtbase (moderate)

openSUSE Security Update: Security update for libqt5-qtbase Announcement ID: openSUSE-SU-2020:1319-1 Rating: moderate References: 1172726 1173758 Cross-References: CVE-2020-13962 Affected Products: openSUSE Leap 15.2 An update that solves one vulnerability and has one errata is now available...

Mihari - A Helper To Run OSINT Queries & Manage Results Continuously

Mihari is a helper to run queries & manage results continuously. Mihari can be used for C2, landing page and phishing hunting. How it works Mihari makes a query against Shodan, Censys, VirusTotal, SecurityTrails, etc. and extracts artifacts IP addresses, domains, URLs and hashes from the results...

Huawei EulerOS: Security Advisory for postgresql (EulerOS-SA-2020-1876)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

It was found that some PostgreSQL extensions did not use search_path safely in their installation script. An attacker with sufficient privileges could use this flaw to trick an administrator into executing a specially crafted script during the installation or update of such extension. This affects PostgreSQL versions before 12.4 before 11.9 before 10.14 before 9.6.19 and before 9.5.23.

...

EulerOS 2.0 SP8 : postgresql (EulerOS-SA-2020-1876)

According to the version of the postgresql packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - postgresql before versions 10.4, 9.6.9 is vulnerable in the adminpack extension, the pgcatalog.pglogfilerotate function doesn't follow the same...

SUSE SLED15 / SLES15 Security Update : libqt5-qtbase (SUSE-SU-2020:2357-1)

This update for libqt5-qtbase fixes the following issues : Fixed a possible crash in certificate parsing. Fixed a DoS in QSslSocket bsc1172726, CVE-2020-13962. Added support for PostgreSQL 12 bsc1173758. Note that Tenable Network Security has extracted the preceding description block directly fro...

SUSE-SU-2020:2357-1 Security update for libqt5-qtbase

This update for libqt5-qtbase fixes the following issues: - Fixed a possible crash in certificate parsing. - Fixed a DoS in QSslSocket bsc1172726, CVE-2020-13962. - Added support for PostgreSQL 12 bsc1173758...

SUSE-SU-2020:2355-1 Security update for postgresql10

This update for postgresql10 fixes the following issues: - update to 10.14: CVE-2020-14349, bsc1175193: Set a secure searchpath in logical replication walsenders and apply workers CVE-2020-14350, bsc1175194: Make contrib modules' installation scripts more secure...

It was found that PostgreSQL versions before 12.4 before 11.9 and before 10.14 did not properly sanitize the search_path during logical replication. An authenticated attacker could use this flaw in an attack similar to CVE-2018-1058 in order to execute arbitrary SQL command in the context of the user used for replication.

...

GLSA-202008-13 : PostgreSQL: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202008-13 PostgreSQL: Multiple vulnerabilities Multiple vulnerabilities have been discovered in PostgreSQL. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CVE identifiers for...

The vulnerability of the PostgreSQL database management system, related to out-of-bound accesses, allows attackers to trigger a service failure.

The vulnerability of the PostgreSQL database management system is related to out-of-memory conditions. Exploiting this vulnerability can allow an attacker to cause a service failure...

PostgreSQL: Multiple vulnerabilities

Background PostgreSQL is an open source object-relational database management system. Description Multiple vulnerabilities have been discovered in PostgreSQL. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for details. Workaroun...

Ubuntu: Security Advisory (USN-4472-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : PostgreSQL vulnerabilities (USN-4472-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4472-1 advisory. Noah Misch discovered that PostgreSQL incorrectly handled the searchpath setting when used with logical replication. A remote...

USN-4472-1 postgresql-10, postgresql-12, postgresql-9.5 vulnerabilities

Noah Misch discovered that PostgreSQL incorrectly handled the searchpath setting when used with logical replication. A remote attacker could possibly use this issue to execute arbitrary SQL code. This issue only affected Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. CVE-2020-14349 Andres Freund discover...