14607 matches found
CVE-2020-17446
asyncpg before 0.21.0 allows a malicious PostgreSQL server to trigger a crash or execute arbitrary code on a database client via a crafted server response, because of access to an uninitialized pointer in the array data decoder...
PT-2020-14995 · Postgresql · Asyncpg
Name of the Vulnerable Software and Affected Versions: asyncpg versions prior to 0.21.0 Description: The issue allows a malicious PostgreSQL server to trigger a crash or execute arbitrary code on a database client via a crafted server response. This is due to access to an uninitialized pointer in...
Oracle Linux 6 : postgresql-jdbc (ELSA-2020-3284)
The remote Oracle Linux 6 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2020-3284 advisory. 8.4.704-4 - require explicitly jdk-1.6 due to ABI bytecode compatibility 8.4.704-3 - fixed XXE vulnerability CVE-2020-13692 Tenable has extracted the preceding...
Vulnerability fixed in PostgreSQL jdbc driver
A vulnerability has been fixed in the PostgreSQL jdbc driver for Java. The so-called XML external-entity vulnerability XXE allows a locally authenticated malicious person to execute arbitrary code execute arbitrary code under database privileges. -= Red Hat =- Red Hat has made updates available f...
CentOS: Security Advisory for postgresql-jdbc (CESA-2020:3285)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
CentOS: Security Advisory for postgresql-jdbc (CESA-2020:3284)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Fedora: Security Advisory for postgresql-jdbc (FEDORA-2020-5a31ccfe66)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
postgresql security update
CentOS Errata and Security Advisory CESA-2020:3284 An update for postgresql-jdbc is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...
postgresql security update
CentOS Errata and Security Advisory CESA-2020:3285 An update for postgresql-jdbc is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...
[SECURITY] Fedora 32 Update: postgresql-jdbc-42.2.12-2.fc32
PostgreSQL is an advanced Object-Relational database management system. The postgresql-jdbc package includes the .jar files needed for Java programs to access a PostgreSQL database...
CentOS 7 : postgresql-jdbc (RHSA-2020:3285)
The remote CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:3285 advisory. - PostgreSQL JDBC Driver aka PgJDBC before 42.2.13 allows XXE. CVE-2020-13692 Note that Nessus has not tested for this issue but has instead relied only on the...
Fedora 32 : postgresql-jdbc (2020-5a31ccfe66)
fixed XML external entity XXE vulnerability Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C...
CentOS 6 : postgresql-jdbc (RHSA-2020:3284)
The remote CentOS Linux 6 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2020:3284 advisory. - PostgreSQL JDBC Driver aka PgJDBC before 42.2.13 allows XXE. CVE-2020-13692 Note that Nessus has not tested for this issue but has instead relied only on the...
Scientific Linux Security Update : postgresql-jdbc on SL6.x (noarch) (20200803)
Security Fixes : - postgresql-jdbc: XML external entity XXE vulnerability in PgSQLXML CVE-2020-13692 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include"compat.inc"; if description scriptid139353; scriptversion"1.3";...
Scientific Linux Security Update : postgresql-jdbc on SL7.x (noarch) (20200803)
Security Fixes : - postgresql-jdbc: XML external entity XXE vulnerability in PgSQLXML CVE-2020-13692 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include"compat.inc"; if description scriptid139354; scriptversion"1.2";...
Oracle Linux 7 : postgresql-jdbc (ELSA-2020-3285)
The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-3285 advisory. 9.2.1002-8 - require explicitly jdk-1.7 due to ABI bytecode compatibility 9.2.1002-7 - fixed XXE vulnerability CVE-2020-13692 Tenable has extracted the precedin...
Moderate: Red Hat Security Advisory: Red Hat Ansible Tower 3.7.2-1 - RHEL7 Container
Red Hat Ansible Tower 3.7.2-1 - RHEL7 Container Updated Named URLs to allow for testing the presence or absence of objects CVE-2020-14337 Fixed Tower Server Side Request Forgery on Credentials CVE-2020-14327 Fixed Tower Server Side Request Forgery on Webhooks CVE-2020-14328 Fixed Tower sensitive...
Gopherus
This is a Python script that generates payloads for exploiting Server-Side Request Forgery SSRF vulnerabilities in various services, including MySQL, PostgreSQL, FastCGI, Memcached, Redis, Zabbix, and SMTP. The script uses a variety of techniques to generate payloads, including Python, Ruby, and...
