17297 matches found
CVE-2026-68563 Ansible-collection-redhat-leapp: ansible-collection-redhat-leapp: information disclosure of postgresql data via insecure backup permissions
A flaw was found in ansible-collection-redhat-leapp. When a remediation task is executed with elevated privileges and the leappoldpostgresqldata option is selected, a PostgreSQL data backup archive is created with insecure permissions. This allows a local non-root user on the managed node to read...
CVE-2026-68563
The CVE applies to the Ansible collection redhat leapp. When a remediation task runs with elevated privileges and leapp_old_postgresql_data is selected, a PostgreSQL data backup archive is created with insecure permissions. This may allow a local non-root user on the managed node to read sensitiv...
EUVD-2026-51312
Kamaji is the Hosted Control Plane Manager for Kubernetes. Prior to 26.7.4-edge, the PostgreSQL and MySQL datastore drivers build DDL statements by interpolating the user-supplied DataStoreUsername/DataStoreSchema directly into SQL via fmt.Sprintf, without escaping identifiers. These fields have ...
CVE-2026-62845 Kamaji: SQL injection via unescaped datastore identifiers in PostgreSQL/MySQL drivers
Kamaji is the Hosted Control Plane Manager for Kubernetes. Prior to 26.7.4-edge, the PostgreSQL and MySQL datastore drivers build DDL statements by interpolating the user-supplied DataStoreUsername/DataStoreSchema directly into SQL via fmt.Sprintf, without escaping identifiers. These fields have ...
CVE-2026-62845
Kamaji is the Hosted Control Plane Manager for Kubernetes. Prior to 26.7.4-edge, the PostgreSQL and MySQL datastore drivers build DDL statements by interpolating the user-supplied DataStoreUsername/DataStoreSchema directly into SQL via fmt.Sprintf, without escaping identifiers. These fields have ...
CVE-2026-62845 Kamaji: SQL injection via unescaped datastore identifiers in PostgreSQL/MySQL drivers
Kamaji is the Hosted Control Plane Manager for Kubernetes. Prior to 26.7.4-edge, the PostgreSQL and MySQL datastore drivers build DDL statements by interpolating the user-supplied DataStoreUsername/DataStoreSchema directly into SQL via fmt.Sprintf, without escaping identifiers. These fields have ...
CVE-2026-62845
Kamaji (Hosted Control Plane Manager for Kubernetes) is affected by a SQL injection in the PostgreSQL and MySQL datastore drivers. The root cause is that DataStoreUsername and DataStoreSchema are interpolated into SQL statements via fmt.Sprintf without escaping identifiers, and these fields have ...
CVE-2026-62845 Kamaji: SQL injection via unescaped datastore identifiers in PostgreSQL/MySQL drivers
Kamaji is the Hosted Control Plane Manager for Kubernetes. Prior to 26.7.4-edge, the PostgreSQL and MySQL datastore drivers build DDL statements by interpolating the user-supplied DataStoreUsername/DataStoreSchema directly into SQL via fmt.Sprintf, without escaping identifiers. These fields have ...
pgaudit v19beta3
pgAudit Open Source PostgreSQL Audit Logging Introduction The PostgreSQL Audit Extension pgAudit provides detailed session and/or object audit logging via the standard PostgreSQL logging facility. The goal of pgAudit is to provide PostgreSQL users with capability to produce audit logs often...
CVE-2026-54368
CentreStack before 17.4 contains a SQL injection vulnerability in GladDBFiles.SearchEx and SearchExUnder that allows authenticated attackers to execute arbitrary SQL statements by supplying a crafted x-glad-filter request header through the jsondir API endpoint. Attackers can exploit unsanitized...
CVE-2026-54368 CentreStack < 17.4 SQL Injection via x-glad-filter Header
CentreStack before 17.4 contains a SQL injection vulnerability in GladDBFiles.SearchEx and SearchExUnder that allows authenticated attackers to execute arbitrary SQL statements by supplying a crafted x-glad-filter request header through the jsondir API endpoint. Attackers can exploit unsanitized...
pgaudit v19beta2
pgAudit Open Source PostgreSQL Audit Logging Introduction The PostgreSQL Audit Extension pgAudit provides detailed session and/or object audit logging via the standard PostgreSQL logging facility. The goal of pgAudit is to provide PostgreSQL users with capability to produce audit logs often...
CLEANSTART-2026-YL92500 Security fixes in postgresql15 15.4-r0
Package postgresql15 version 15.4-r0 fixes 2 vulnerabilities: CVE-2023-39418, CVE-2023-39417...
CLEANSTART-2026-SP49571 Security fixes in postgresql15 10.5-r0
Package postgresql15 version 10.5-r0 fixes 2 vulnerabilities: CVE-2018-10915, CVE-2018-10925...
CLEANSTART-2026-RW65132 Security fixes in postgresql 16.1-r0
Package postgresql version 16.1-r0 fixes 3 vulnerabilities: CVE-2023-5868, CVE-2023-5869, CVE-2023-5870...
CLEANSTART-2026-QJ83672 Security fixes in postgresql15 15.8-r0
Package postgresql15 version 15.8-r0 fixes 1 vulnerabilities: CVE-2024-7348...
CLEANSTART-2026-IF88864 Security fixes in postgresql15 15.5-r0
Package postgresql15 version 15.5-r0 fixes 3 vulnerabilities: CVE-2023-5868, CVE-2023-5869, CVE-2023-5870...
CLEANSTART-2026-GB17688 Security fixes in postgresql15 15.2-r0
Package postgresql15 version 15.2-r0 fixes 1 vulnerabilities: CVE-2022-41862...