EUVD-2022-3091

Malicious code in bioql PyPI...

postgresql: PostgreSQL PL/Perl environment variable changes execute arbitrary code

A flaw was found in PostgreSQL PL/Perl. This vulnerability allows an unprivileged database user to change sensitive process environment variables e.g., PATH via incorrect control of environment variables...

FreeBSD : PostgreSQL -- PL/Perl environment variable changes execute arbitrary code (a03636f4-a29f-11ef-af48-6cc21735f730)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the a03636f4-a29f-11ef-af48-6cc21735f730 advisory. PostgreSQL project reports: Incorrect control of environment variables in PostgreSQL PL/Perl allows an...

CVE-2016-0768

PostgreSQL PL/Java after 9.0 does not honor access controls on large objects...

CVE-2016-2192

PostgreSQL PL/Java before 1.5.0 allows remote authenticated users to alter type mappings for types they do not own...

CVE-2016-0767

PostgreSQL PL/Java before 1.5.0 allows remote authenticated users with USAGE permission on the public schema to alter the public schema classpath...

CVE-2016-2192

PostgreSQL PL/Java before 1.5.0 allows remote authenticated users to alter type mappings for types they do not own...

PT-2017-7654

Name of the Vulnerable Software and Affected Versions PostgreSQL PL/Java versions prior to 1.5.0 Description The issue allows remote authenticated users with USAGE permission on the public schema to alter the public schema classpath. Recommendations For versions prior to 1.5.0, update to version...

CVE-2016-2192: Improper Privilege Management

PostgreSQL PL/Java before 1.5.0 allows remote authenticated users to alter type mappings for types they do not own...

CVE-2016-0767: Improper Privilege Management

PostgreSQL PL/Java before 1.5.0 allows remote authenticated users with USAGE permission on the public schema to alter the public schema classpath...

PT-2017-8012

Name of the Vulnerable Software and Affected Versions PostgreSQL PL/Java versions prior to 1.5.0 Description The issue allows remote authenticated users to alter type mappings for types they do not own. Recommendations For versions prior to 1.5.0, update to version 1.5.0 or later to resolve the...

PT-2010-5069

Name of the Vulnerable Software and Affected Versions PostgreSQL PL/php add-on version 1.4 and earlier Description The issue allows remote authenticated users to gain privileges via crafted script code in a SECURITY DEFINER function. This is related to improper protection of script execution by a...

SLES10: Security update for postgresql-pl

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: postgresql-pl More details may also be found by searching for the SuSE Enterprise Server 10 patch database located at http://download.novell.com/patch/finder...

SLES10: Security update for postgresql-pl

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: postgresql-pl More details may also be found by searching for the SuSE Enterprise Server 10 patch database linked in the references. SPDX-FileCopyrightText:...

SLES9: Security update for postgresql-pl

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: postgresql-pl More details may also be found by searching for keyword 5049500 within the SuSE Enterprise Server 9 patch database at...

SLES9: Security update for PostgreSQL

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: postgresql-libs postgresql-pl postgresql-devel postgresql-docs postgresql postgresql-server postgresql-contrib For more information, please visit the...

SLES9: Security update for postgresql

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: postgresql-devel postgresql-docs postgresql-pl postgresql-libs postgresql-server postgresql postgresql-contrib For more information, please visit the...

SLES9: Security update for postgresql-pl

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: postgresql-pl More details may also be found by searching for keyword 5049500 within the SuSE Enterprise Server 9 patch database linked in the references...

SuSE 10 Security Update : postgresql-pl (ZYPP Patch Number 6208)

Due to tight package dependencies postgresql-pl has to be updated to match the recently released postgresql packages. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

SuSE9 Security Update : postgresql-pl (YOU Patch Number 12407)

Due to tight package dependencies postgresql-pl has to be updated to match the recently released postgresql packages. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...