Lucene search
K

36 matches found

Tenable Product Security Advisories
Tenable Product Security Advisories
added 2026/02/18 1:32 p.m.6 views

[R2] Security Center Version 6.8.0 Fixes Multiple Vulnerabilities

R2 Security Center Version 6.8.0 Fixes Multiple Vulnerabilities Arnie Cabral Wed, 02/18/2026 - 08:32 Security Center leverages third-party software to help provide underlying functionality. Several of the third-party components libssh, postgresql were found to contain vulnerabilities, and updated...

8.8CVSS5.8AI score0.00147EPSS
Exploits0
OSV
OSV
added 2026/01/29 10:56 a.m.2 views

SUSE-SU-2026:20193-1 Security update for postgresql16

This update for postgresql16 fixes the following issues: Security fixes: - CVE-2025-12817: Missing check for CREATE privileges on the schema in CREATE STATISTICS allowed table owners to create statistics in any schema, potentially leading to unexpected naming conflicts bsc1253332 - CVE-2025-12818...

5.9CVSS6.2AI score0.00061EPSS
Exploits0References5
Tenable Nessus
Tenable Nessus
added 2026/01/16 12:0 a.m.1 views

MiracleLinux 4 : rh-postgresql94-postgresql-9.4.12-1.AXS4 (AXSA:2017-1728:01)

The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2017-1728:01 advisory. PostgreSQL is an advanced Object-Relational database management system DBMS. The base postgresql package contains the client programs that you'll ne...

7.5CVSS7AI score0.04124EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2023-2150

Malicious code in bioql PyPI...

9.8CVSS5.9AI score0.00047EPSS
Exploits0References6
Tenable Product Security Advisories
Tenable Product Security Advisories
added 2025/09/24 2:34 p.m.4 views

[R1] Stand-alone Security Patch Available for Tenable Security Center versions 6.5.1 and 6.6.0: SC-202509.1

R1 Stand-alone Security Patch Available for Tenable Security Center versions 6.5.1 and 6.6.0: SC-202509.1 Jason Schavel Wed, 09/24/2025 - 10:34 Security Center leverages third-party software to help provide underlying functionality. One of the third-party components PostgreSQL was found to contai...

7.1AI score
Exploits0
CVE
CVE
added 2025/09/10 12:38 p.m.13 views

CVE-2025-10226

CVE-2025-10226 affects AxxonSoft Axxon One (C-Werk) 2.0.8 and earlier due to a dependency on vulnerable PostgreSQL back-end (v10.x). The root cause is reported as dependencies on vulnerable third-party components in PostgreSQL, enabling a remote attacker to escalate privileges, execute arbitrary ...

9.8CVSS7.2AI score0.00847EPSS
Exploits0References2Affected Software1
Snyk
Snyk
added 2025/08/14 1:0 p.m.1 views

CRLF Injection

Overview Affected versions of this package are vulnerable to CRLF Injection in the restore process via psql meta-commands inside a purpose-crafted object name. An attacker can execute arbitrary code by injecting meta commands into the file, which can be executed by an unknowing user during the...

8.8CVSS8AI score0.00085EPSS
Exploits1References2
CBLMariner
CBLMariner
added 2025/07/10 3:9 p.m.3 views

CVE-2025-4207 affecting package postgresql for versions less than 16.9-1

CVE-2025-4207 affecting package postgresql for versions less than 16.9-1. An upgraded version of the package is available that resolves this issue...

5.9CVSS7.3AI score0.00326EPSS
Exploits0
CBLMariner
CBLMariner
added 2025/07/10 3:7 p.m.3 views

CVE-2025-4207 affecting package postgresql for versions less than 14.18-1

CVE-2025-4207 affecting package postgresql for versions less than 14.18-1. An upgraded version of the package is available that resolves this issue...

5.9CVSS7.3AI score0.00326EPSS
Exploits0
Veeam
Veeam
added 2025/07/08 12:0 a.m.22 views

Upgrading the PostgreSQL Database Engine Software Used by Veeam Backup for Microsoft 365

Support Scope This article is provided as a courtesy to give customers a high-level explanation of how to upgrade the underlying PostgreSQL database engine used to host the Veeam Backup for Microsoft 365 configuration database. Per the Veeam Customer Support Policy, section 10: Support for Veeam...

7.5AI score
Exploits0Affected Software1
Tenable Nessus
Tenable Nessus
added 2025/05/31 12:0 a.m.7 views

SUSE SLES15 Security Update : postgresql17 (SUSE-SU-2025:01783-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:01783-1 advisory. Upgrade to 17.5: - CVE-2025-4207: Fixed PostgreSQL GB18030 encoding validation can read one byte past end of allocation for text that fails...

5.9CVSS6.7AI score0.00326EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2025/05/27 12:0 a.m.3 views

SUSE SLES15 Security Update : postgresql13 (SUSE-SU-2025:01705-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:01705-1 advisory. Upgrade to 13.21: - CVE-2025-4207: Fixed PostgreSQL GB18030 encoding validation can read one byte past end of allocation for text that fail...

5.9CVSS6.7AI score0.00326EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2025/02/22 12:0 a.m.10 views

SUSE SLES15 Security Update : postgresql16 (SUSE-SU-2025:0636-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:0636-1 advisory. Upgrade to 16.8: - CVE-2025-1094: Harden PQescapeString and allied functions against invalidly-encoded input strings bsc1237093. Tenable has...

8.1CVSS8AI score0.82364EPSS
Exploits10References4
CBLMariner
CBLMariner
added 2025/02/20 10:12 p.m.9 views

CVE-2025-1094 affecting package postgresql for versions less than 14.16-1

CVE-2025-1094 affecting package postgresql for versions less than 14.16-1. An upgraded version of the package is available that resolves this issue...

8.1CVSS9.2AI score0.82364EPSS
Exploits10
CBLMariner
CBLMariner
added 2025/02/19 8:5 p.m.9 views

CVE-2025-1094 affecting package postgresql for versions less than 16.7-1

CVE-2025-1094 affecting package postgresql for versions less than 16.7-1. An upgraded version of the package is available that resolves this issue...

8.1CVSS8.4AI score0.82364EPSS
Exploits10
Tenable Nessus
Tenable Nessus
added 2024/11/05 12:0 a.m.12 views

RHEL 6 : rh-postgresql95-postgresql (RHSA-2017:2425)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2017:2425 advisory. PostgreSQL is an advanced object-relational database management system DBMS. The following packages have been upgraded to a later upstream...

8.3CVSS7.7AI score0.04124EPSS
Exploits0References14
Tenable Nessus
Tenable Nessus
added 2024/11/04 12:0 a.m.11 views

RHEL 6 / 7 : rh-postgresql94-postgresql (RHSA-2016:0348)

The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2016:0348 advisory. PostgreSQL is an advanced object-relational database management system DBMS. An integer overflow flaw, leading to a heap-based buffer overflow, w...

7.5CVSS8.3AI score0.10867EPSS
Exploits0References6
OpenVAS
OpenVAS
added 2024/07/10 12:0 a.m.17 views

openSUSE Security Advisory (SUSE-SU-2024:2266-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

4.3CVSS6.5AI score0.00263EPSS
Exploits0References6
Tenable Nessus
Tenable Nessus
added 2024/07/03 12:0 a.m.18 views

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : postgresql16 (SUSE-SU-2024:2266-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:2266-1 advisory. PostgreSQL upgrade to version 16.3 bsc1224051: - CVE-2024-4317: Fixed visibility restriction of pgstatsex...

4.3CVSS6.6AI score0.00263EPSS
Exploits0References5
Tenable Nessus
Tenable Nessus
added 2024/05/25 12:0 a.m.20 views

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : postgresql15 (SUSE-SU-2024:1777-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:1777-1 advisory. PostgreSQL upgrade to version 15.7 bsc1224051: - CVE-2024-4317: Fixed visibility restriction of pgstatsex...

4.3CVSS6.6AI score0.00263EPSS
Exploits0References5
Rows per page
Query Builder