Lucene search
+L

17345 matches found

osv_alsa
osv_alsa
•added 2026/02/02 12:00 a.m.•17 views

ALSA-2026:1628 Important: php security update

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fixes: php: heap-based buffer overflow in arraymerge CVE-2025-14178 php: PHP: Information disclosure via getimagesize function when reading multi-chunk images CVE-2025-14177 php: PHP: Denial of Service...

8.2CVSS6.5AI score0.00697EPSS
SaveExploits4References8
Tenable Nessus
Tenable Nessus
•added 2026/02/02 12:00 a.m.•14 views

RHEL 10 : php (RHSA-2026:1628)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:1628 advisory. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fixes: php: heap-based buffer overflow in...

8.2CVSS6.8AI score0.00697EPSS
SaveExploits4References8
Tenable Nessus
Tenable Nessus
•added 2026/02/02 12:00 a.m.•19 views

AlmaLinux 10 : php (ALSA-2026:1628)

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:1628 advisory. php: heap-based buffer overflow in arraymerge CVE-2025-14178 php: PHP: Information disclosure via getimagesize function when reading multi-chunk images...

8.2CVSS6.9AI score0.00697EPSS
SaveExploits4References5
Tenable Nessus
Tenable Nessus
•added 2026/02/02 12:00 a.m.•16 views

MiracleLinux 8 : php:8.2 (AXSA:2026-124:01)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-124:01 advisory. php: pgsql extension does not check for errors during escaping CVE-2025-1735 php: NULL Pointer Dereference in PHP SOAP Extension via Large XML...

8.2CVSS7.1AI score0.01EPSS
SaveExploits6References7
Tenable Nessus
Tenable Nessus
•added 2026/01/31 12:00 a.m.•8 views

Linux Distros Unpatched Vulnerability : CVE-2025-69662

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - SQL injection vulnerability in geopandas before v.1.1.2 allows an attacker to obtain sensitive information via the topostgis function being used to write...

8.6CVSS6AI score0.00437EPSS
SaveExploits1References2
osv_ghsa
osv_ghsa
•added 2026/01/30 9:30 p.m.•17 views

GHSA-6497-PRX7-GPMQ geopandas SQL Injection Vulnerability in to_postgis() Allows Information Disclosure

SQL injection vulnerability in geopandas before v.1.1.2 allows an attacker to obtain sensitive information via the topostgis function being used to write GeoDataFrames to a PostgreSQL database...

8.6CVSS6AI score0.00437EPSS
SaveExploits1References9
Github Security Blog
Github Security Blog
•added 2026/01/30 9:30 p.m.•22 views

geopandas SQL Injection Vulnerability in to_postgis() Allows Information Disclosure

SQL injection vulnerability in geopandas before v.1.1.2 allows an attacker to obtain sensitive information via the topostgis function being used to write GeoDataFrames to a PostgreSQL database...

8.6CVSS6AI score0.00437EPSS
SaveExploits1References9Affected Software1
PyPA
PyPA
•added 2026/01/30 7:16 p.m.•22 views

PYSEC-2026-62

SQL injection vulnerability in geopandas before v.1.1.2 allows an attacker to obtain sensitive information via the topostgis function being used to write GeoDataFrames to a PostgreSQL database...

8.6CVSS6AI score0.00437EPSS
SaveExploits1References4Affected Software1
UbuntuCve
UbuntuCve
•added 2026/01/30 7:16 p.m.•11 views

CVE-2025-69662

SQL injection vulnerability in geopandas before v.1.1.2 allows an attacker to obtain sensitive information via the topostgis function being used to write GeoDataFrames to a PostgreSQL database...

8.6CVSS5.9AI score0.00437EPSS
SaveExploits1References4
osv_ubuntu
osv_ubuntu
•added 2026/01/30 7:16 p.m.•14 views

UBUNTU-CVE-2025-69662

SQL injection vulnerability in geopandas before v.1.1.2 allows an attacker to obtain sensitive information via the topostgis function being used to write GeoDataFrames to a PostgreSQL database...

8.6CVSS6AI score0.00437EPSS
SaveExploits1References5
osv_cleanstart
osv_cleanstart
•added 2026/01/30 5:21 p.m.•26 views

CLEANSTART-2026-HJ04971 vulnerability was found in PostgreSQL with the use of the MERGE command, which fails to test new rows against row security policies defined for UPDATE and SELECT

Multiple security vulnerabilities affect the postgresql package. A vulnerability was found in PostgreSQL with the use of the MERGE command, which fails to test new rows against row security policies defined for UPDATE and SELECT. See references for individual vulnerability details...

9.8CVSS6.4AI score0.61566EPSS
SaveExploits3References69
osv_cleanstart
osv_cleanstart
•added 2026/01/30 5:19 p.m.•29 views

CLEANSTART-2026-FW42039 vulnerability was found in PostgreSQL with the use of the MERGE command, which fails to test new rows against row security policies defined for UPDATE and SELECT

Multiple security vulnerabilities affect the postgresql package. A vulnerability was found in PostgreSQL with the use of the MERGE command, which fails to test new rows against row security policies defined for UPDATE and SELECT. See references for individual vulnerability details...

9.8CVSS6.4AI score0.61566EPSS
SaveExploits3References73
osv_cleanstart
osv_cleanstart
•added 2026/01/30 5:04 p.m.•21 views

CLEANSTART-2026-ZC18474 PostgreSQL optimizer statistics allow a user to read sampled data within a view that the user cannot access

Multiple security vulnerabilities affect the postgresql package. PostgreSQL optimizer statistics allow a user to read sampled data within a view that the user cannot access. See references for individual vulnerability details...

9.8CVSS7AI score0.9003EPSS
SaveExploits12References21
osv_cleanstart
osv_cleanstart
•added 2026/01/30 5:03 p.m.•20 views

CLEANSTART-2026-KA40024 PostgreSQL optimizer statistics allow a user to read sampled data within a view that the user cannot access

Multiple security vulnerabilities affect the postgresql package. PostgreSQL optimizer statistics allow a user to read sampled data within a view that the user cannot access. See references for individual vulnerability details...

9.8CVSS7AI score0.9003EPSS
SaveExploits12References19
osv_cleanstart
osv_cleanstart
•added 2026/01/30 4:26 p.m.•13 views

CLEANSTART-2026-AI42483 PostgreSQL optimizer statistics allow a user to read sampled data within a view that the user cannot access

Multiple security vulnerabilities affect the postgresql package. PostgreSQL optimizer statistics allow a user to read sampled data within a view that the user cannot access. See references for individual vulnerability details...

9.8CVSS6.7AI score0.02555EPSS
SaveExploits1References11
osv_cleanstart
osv_cleanstart
•added 2026/01/30 4:26 p.m.•15 views

CLEANSTART-2026-DJ71086 PostgreSQL optimizer statistics allow a user to read sampled data within a view that the user cannot access

Multiple security vulnerabilities affect the postgresql package. PostgreSQL optimizer statistics allow a user to read sampled data within a view that the user cannot access. See references for individual vulnerability details...

9.8CVSS6.7AI score0.02555EPSS
SaveExploits1References11
Cvelist
Cvelist
•added 2026/01/30 12:00 a.m.•43 views

CVE-2025-69662

SQL injection vulnerability in geopandas before v.1.1.2 allows an attacker to obtain sensitive information via the topostgis function being used to write GeoDataFrames to a PostgreSQL database...

0.00437EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2026/01/30 12:00 a.m.•12 views

CVE-2025-69662

SQL injection vulnerability in geopandas before v.1.1.2 allows an attacker to obtain sensitive information via the topostgis function being used to write GeoDataFrames to a PostgreSQL database...

8.6CVSS6AI score0.00437EPSS
SaveExploits1References3
CVE
CVE
•added 2026/01/30 12:00 a.m.•65 views

CVE-2025-69662

The geopandas library, a tool for geospatial data analysis within the Pandas suite, contains a SQL injection vulnerability in versions prior to v.1.1.2 . The flaw exists in the to_postgis() function, which is used to write GeoDataFrames to a PostgreSQL database. An attacker could exploit this vul...

8.6CVSS6AI score0.00437EPSS
SaveExploits1References3Affected Software1
CNNVD
CNNVD
•added 2026/01/30 12:00 a.m.•37 views

Geopandas security vulnerabilities

Geopandas is an open-source Python tool for processing geospatial data. Versions of geopandas prior to 1.1.2 contained a security vulnerability. This vulnerability stemmed from a flaw in the topostgis function, which could allow attackers to access sensitive information when writing GeoDataFrames...

8.6CVSS5.9AI score0.00437EPSS
SaveExploits1References2
Rows per page
Query Builder