17261 matches found
Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a privilege escalation in PostgreSQL [CVE-2026-6475]
Summary IBM Watson Speech Services Cartridge is vulnerable to a privilege escalation due to an issues in PostgreSQL pgbasebackup plain format and in pgrewind that allows an origin superuser to overwrite local files, e.g. /var/lib/postgres/.bashrc, that hijack the operating system account...
Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to credential exposure in PostgreSQL [CVE-2026-6478]
Summary IBM Watson Speech Services Cartridge is vulnerable to credential exposure in PostgreSQL, due to covert timing channel in comparison of MD5-hashed password in PostgreSQL authentication which allows an attacker to recover user credentials sufficient to authenticate CVE-2026-6478. PostgreSQL...
CVE-2026-76848
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
EUVD-2026-64853
TypeORM's SelectQueryBuilder.distinctOn accepts an array of strings and stores it on the expression map without validation. For PostgreSQL-family drivers, createSelectDistinctExpression in src/query-builder/SelectQueryBuilder.ts joins that array and interpolates the result into the generated...
CVE-2026-76848
CVE-2026-76848 targets TypeORM , specifically the SelectQueryBuilder.distinctOn function used with PostgreSQL-family drivers . The root cause is that createSelectDistinctExpression in src/query-builder/SelectQueryBuilder.ts joins the input array and interpolates it directly into the generated SEL...
CVE-2026-76848 TypeORM 0.2.21 through 1.1.0 SQL Injection via SelectQueryBuilder.distinctOn
TypeORM's SelectQueryBuilder.distinctOn accepts an array of strings and stores it on the expression map without validation. For PostgreSQL-family drivers, createSelectDistinctExpression in src/query-builder/SelectQueryBuilder.ts joins that array and interpolates the result into the generated...
CVE-2026-76848
...
Exploit for Inefficient Regular Expression Complexity in Koajs Koa
Patch: CVE-2025-25200 Vulnerability Details - CVE: CVE...
postgresql17-17.11-1.1 on GA media (moderate)
postgresql17-17.11-1.1 on GA media Announcement ID: openSUSE-SU-2026:11555-1 Rating: moderate Cross-References: CVE-2026-14662 CVE-2026-14663 CVE-2026-14664 CVE-2026-14666 CVE-2026-14668 CVE-2026-14669 CVE-2026-14670 CVE-2026-14671 CVE-2026-14672 CVE-2026-14677 CVE-2026-14678 CVE-2026-14679...
ROOT-OS-DEBIAN-11-CVE-2026-15741 CVE-2026-15741 in postgresql-13 - Patched by Root
Root has patched CVE-2026-15741 in the postgresql-13 package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2026-14670 CVE-2026-14670 in postgresql-13 - Patched by Root
Root has patched CVE-2026-14670 in the postgresql-13 package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2026-14671 CVE-2026-14671 in postgresql-13 - Patched by Root
Root has patched CVE-2026-14671 in the postgresql-13 package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2026-14677 CVE-2026-14677 in postgresql-13 - Patched by Root
Root has patched CVE-2026-14677 in the postgresql-13 package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2026-15742 CVE-2026-15742 in postgresql-13 - Patched by Root
Root has patched CVE-2026-15742 in the postgresql-13 package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2026-16239 CVE-2026-16239 in postgresql-13 - Patched by Root
Root has patched CVE-2026-16239 in the postgresql-13 package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2026-14662 CVE-2026-14662 in postgresql-13 - Patched by Root
Root has patched CVE-2026-14662 in the postgresql-13 package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2026-6464 CVE-2026-6464 in postgresql-13 - Patched by Root
Root has patched CVE-2026-6464 in the postgresql-13 package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2026-14669 CVE-2026-14669 in postgresql-13 - Patched by Root
Root has patched CVE-2026-14669 in the postgresql-13 package for Root:Debian:11. Multiple fixed versions available...