Lucene search
K

13314 matches found

RedHat Linux
RedHat Linux
added 2024/12/05 9:15 a.m.4 views

postgresql: PostgreSQL PL/Perl environment variable changes execute arbitrary code

A flaw was found in PostgreSQL PL/Perl. This vulnerability allows an unprivileged database user to change sensitive process environment variables e.g., PATH via incorrect control of environment variables...

8.8CVSS7.3AI score0.04422EPSS
Exploits1References5
RedHat Linux
RedHat Linux
added 2024/12/05 6:49 a.m.22 views

Important: Red Hat Security Advisory: postgresql security update

An update for postgresql is now available for Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

8.8CVSS7.7AI score0.04422EPSS
Exploits1References2
RedHat Linux
RedHat Linux
added 2024/12/05 6:49 a.m.4 views

postgresql: PostgreSQL PL/Perl environment variable changes execute arbitrary code

A flaw was found in PostgreSQL PL/Perl. This vulnerability allows an unprivileged database user to change sensitive process environment variables e.g., PATH via incorrect control of environment variables...

8.8CVSS7.3AI score0.04422EPSS
Exploits1References5
OSV
OSV
added 2024/12/05 12:0 a.m.18 views

ALSA-2024:10832 Important: postgresql:13 security update

PostgreSQL is an advanced object-relational database management system DBMS. Security Fixes: postgresql: PostgreSQL SET ROLE, SET SESSION AUTHORIZATION reset to wrong user ID CVE-2024-10978 postgresql: PostgreSQL PL/Perl environment variable changes execute arbitrary code CVE-2024-10979 postgresq...

8.8CVSS8.2AI score0.04422EPSS
Exploits1References8
Oracle linux
Oracle linux
added 2024/12/05 12:0 a.m.37 views

postgresql:13 security update

pgaudit 1.5.0-1 - Update to version 1.5.0 Related: 1855776 1.4.0-4 - Bump release for rebuild against libpq-12.1-3 1.4.0-3 - BuildRequires libpq-devel 1.4.0-2 - BuildRequires postgresql-server-devel 1.4.0-1 - Update to 1.4.0 1.3.1-1 - Update to 1.3.1 and apply patch for pgsql v12 compatibility...

8.8CVSS7AI score0.04422EPSS
Exploits1
Tenable Nessus
Tenable Nessus
added 2024/12/05 12:0 a.m.18 views

AlmaLinux 8 : postgresql:13 (ALSA-2024:10832)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2024:10832 advisory. postgresql: PostgreSQL SET ROLE, SET SESSION AUTHORIZATION reset to wrong user ID CVE-2024-10978 postgresql: PostgreSQL PL/Perl environment variable...

8.8CVSS7.5AI score0.04422EPSS
Exploits1References5
Tenable Nessus
Tenable Nessus
added 2024/12/05 12:0 a.m.14 views

RHEL 8 : postgresql:13 (RHSA-2024:10832)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:10832 advisory. PostgreSQL is an advanced object-relational database management system DBMS. Security Fixes: postgresql: PostgreSQL SET ROLE, SET SESSION...

8.8CVSS7.7AI score0.04422EPSS
Exploits1References8
Tenable Nessus
Tenable Nessus
added 2024/12/05 12:0 a.m.10 views

AlmaLinux 9 : postgresql (ALSA-2024:10791)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2024:10791 advisory. postgresql: PostgreSQL SET ROLE, SET SESSION AUTHORIZATION reset to wrong user ID CVE-2024-10978 postgresql: PostgreSQL PL/Perl environment variable...

8.8CVSS7.6AI score0.04422EPSS
Exploits1References5
Tenable Nessus
Tenable Nessus
added 2024/12/05 12:0 a.m.12 views

RHEL 8 : postgresql:16 (RHSA-2024:10831)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:10831 advisory. PostgreSQL is an advanced object-relational database management system DBMS. Security Fixes: postgresql: PostgreSQL SET ROLE, SET SESSION...

8.8CVSS7.7AI score0.04422EPSS
Exploits1References8
Tenable Nessus
Tenable Nessus
added 2024/12/05 12:0 a.m.9 views

RHEL 9 : postgresql:15 (RHSA-2024:10807)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:10807 advisory. PostgreSQL is an advanced object-relational database management system DBMS. Security Fixes: postgresql: PostgreSQL PL/Perl environment variable...

8.8CVSS8.5AI score0.04422EPSS
Exploits1References4
Tenable Nessus
Tenable Nessus
added 2024/12/05 12:0 a.m.10 views

AlmaLinux 9 : postgresql:16 (ALSA-2024:10788)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2024:10788 advisory. postgresql: PostgreSQL SET ROLE, SET SESSION AUTHORIZATION reset to wrong user ID CVE-2024-10978 postgresql: PostgreSQL PL/Perl environment variable...

8.8CVSS7.6AI score0.04422EPSS
Exploits1References5
Tenable Nessus
Tenable Nessus
added 2024/12/05 12:0 a.m.8 views

AlmaLinux 8 : postgresql:12 (ALSA-2024:10785)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2024:10785 advisory. postgresql: PostgreSQL SET ROLE, SET SESSION AUTHORIZATION reset to wrong user ID CVE-2024-10978 postgresql: PostgreSQL PL/Perl environment variable...

8.8CVSS7.6AI score0.04422EPSS
Exploits1References5
Tenable Nessus
Tenable Nessus
added 2024/12/05 12:0 a.m.14 views

RHEL 8 : postgresql:15 (RHSA-2024:10830)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:10830 advisory. PostgreSQL is an advanced object-relational database management system DBMS. Security Fixes: postgresql: PostgreSQL SET ROLE, SET SESSION...

8.8CVSS7.7AI score0.04422EPSS
Exploits1References8
OpenVAS
OpenVAS
added 2024/12/05 12:0 a.m.9 views

SUSE: Security Advisory (SUSE-SU-2024:4173-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS7AI score0.04422EPSS
Exploits1References17
OSV
OSV
added 2024/12/05 12:0 a.m.15 views

ALSA-2024:10831 Important: postgresql:16 security update

PostgreSQL is an advanced object-relational database management system DBMS. Security Fixes: postgresql: PostgreSQL SET ROLE, SET SESSION AUTHORIZATION reset to wrong user ID CVE-2024-10978 postgresql: PostgreSQL PL/Perl environment variable changes execute arbitrary code CVE-2024-10979 postgresq...

8.8CVSS8.2AI score0.04422EPSS
Exploits1References8
OSV
OSV
added 2024/12/05 12:0 a.m.19 views

ALSA-2024:10830 Important: postgresql:15 security update

PostgreSQL is an advanced object-relational database management system DBMS. Security Fixes: postgresql: PostgreSQL SET ROLE, SET SESSION AUTHORIZATION reset to wrong user ID CVE-2024-10978 postgresql: PostgreSQL PL/Perl environment variable changes execute arbitrary code CVE-2024-10979 postgresq...

8.8CVSS8.2AI score0.04422EPSS
Exploits1References8
Tenable Nessus
Tenable Nessus
added 2024/12/05 12:0 a.m.11 views

AlmaLinux 9 : postgresql:15 (ALSA-2024:10787)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2024:10787 advisory. postgresql: PostgreSQL SET ROLE, SET SESSION AUTHORIZATION reset to wrong user ID CVE-2024-10978 postgresql: PostgreSQL PL/Perl environment variable...

8.8CVSS7.6AI score0.04422EPSS
Exploits1References5
Tenable Nessus
Tenable Nessus
added 2024/12/05 12:0 a.m.10 views

RHEL 9 : postgresql (RHSA-2024:10827)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:10827 advisory. PostgreSQL is an advanced object-relational database management system DBMS. Security Fixes: postgresql: PostgreSQL PL/Perl environment variable...

8.8CVSS8.5AI score0.04422EPSS
Exploits1References4
OpenVAS
OpenVAS
added 2024/12/05 12:0 a.m.9 views

openSUSE Security Advisory (SUSE-SU-2024:4173-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS7AI score0.04422EPSS
Exploits1References17
Oracle linux
Oracle linux
added 2024/12/05 12:0 a.m.261 views

postgresql:16 security update

pgaudit 16.0-1 - Update to 16.0 - Support postgresql 16 - Initial import for PG 16 module - Resolves: RHEL-3636 pgrepack 1.5.1-1 - Update to 1.5.1 postgres-decoderbufs 2.4.0-1.Final - Initial import for postgresql 16 stream - Related: RHEL-3636 postgresql 16.6-1 - Update to 16.6 - Fixes:...

8.8CVSS6.9AI score0.04422EPSS
Exploits1
Rows per page
Query Builder