Lucene search
K

13301 matches found

OSV
OSV
added 2024/10/21 10:47 p.m.22 views

RHSA-2021:0161 Red Hat Security Advisory: postgresql:10 security update

Bulletin has no description...

8.8CVSS6.9AI score0.4644EPSS
Exploits0References17
OSV
OSV
added 2024/10/21 10:47 p.m.18 views

RHSA-2020:5567 Red Hat Security Advisory: postgresql:10 security update

Bulletin has no description...

8.8CVSS6.9AI score0.4644EPSS
Exploits0References17
CNNVD
CNNVD
added 2024/10/15 12:0 a.m.2 views

Ruijie Networks NBR3000D-E 安全漏洞

Ruijie Networks NBR3000D-E is a gateway from Ruijie Networks China. A security vulnerability exists in the Ruijie Networks NBR3000D-E that stems from the /tool/shell/postgresql.conf component containing an information disclosure issue...

7.5CVSS6.2AI score0.00381EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2024/10/15 12:0 a.m.3 views

PT-2024-33218 · Ruijie · Ruijie Nbr3000D-E Gateway

Name of the Vulnerable Software and Affected Versions: Ruijie NBR3000D-E Gateway affected versions not specified Description: An issue in the Ruijie NBR3000D-E Gateway allows a remote attacker to obtain sensitive information via the "/tool/shell/postgresql.conf" component. Recommendations: At the...

7.5CVSS6.4AI score0.00381EPSS
Exploits0References4
OpenVAS
OpenVAS
added 2024/10/15 12:0 a.m.10 views

Ubuntu: Security Advisory (USN-6968-3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS7.4AI score0.01565EPSS
Exploits0References2
Ubuntu
Ubuntu
added 2024/10/14 2:0 p.m.12 views

USN-6968-3: PostgreSQL vulnerability

USN-6968-1 fixed CVE-2024-7348 in PostgreSQL-12, PostgreSQL-14, and PostgreSQL-16. This update provides the corresponding updates for PostgreSQL-9.3 in Ubuntu 14.04 LTS and PostgreSQL-10 in Ubuntu 18.04 LTS. Original advisory details: Noah Misch discovered that PostgreSQL incorrectly handled...

8.8CVSS7.6AI score0.01565EPSS
Exploits0
OSV
OSV
added 2024/10/14 2:0 p.m.0 views

USN-6968-3 postgresql-10, postgresql-9.3 vulnerability

USN-6968-1 fixed CVE-2024-7348 in PostgreSQL-12, PostgreSQL-14, and PostgreSQL-16. This update provides the corresponding updates for PostgreSQL-9.3 in Ubuntu 14.04 LTS and PostgreSQL-10 in Ubuntu 18.04 LTS. Original advisory details: Noah Misch discovered that PostgreSQL incorrectly handled...

8.8CVSS7.1AI score0.01565EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2024/10/14 12:0 a.m.23 views

Ubuntu 14.04 LTS / 18.04 LTS : PostgreSQL vulnerability (USN-6968-3)

The remote Ubuntu 14.04 LTS / 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-6968-3 advisory. USN-6968-1 fixed CVE-2024-7348 in PostgreSQL-12, PostgreSQL-14, and PostgreSQL-16. This update provides the corresponding updates for PostgreSQL-9.3 i...

8.8CVSS7.2AI score0.01565EPSS
Exploits0References2
NVD
NVD
added 2024/10/11 3:15 p.m.14 views

CVE-2024-47074

DataEase is an open source data visualization analysis tool. In Dataease, the PostgreSQL data source in the data source function can customize the JDBC connection parameters and the PG server target to be connected. In backend/src/main/java/io/dataease/provider/datasource/JdbcProvider.java,...

9.8CVSS0.00569EPSS
Exploits0References2
CVE
CVE
added 2024/10/11 2:45 p.m.48 views

CVE-2024-47074

DataEase prior to version 1.18.25 is affected. The root cause is the PgConfiguration class in JdbcProvider that does not filter JDBC URL parameters and directly concatenates user input, allowing an attacker to append parameters and connect to a malicious PostgreSQL server. This enables triggering...

9.8CVSS9.7AI score0.00569EPSS
Exploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2024/10/11 2:45 p.m.27 views

CVE-2024-47074 Dataease PostgreSQL Data Source JDBC Connection Parameters Not Verified Leads to Deserialization Vulnerability

DataEase is an open source data visualization analysis tool. In Dataease, the PostgreSQL data source in the data source function can customize the JDBC connection parameters and the PG server target to be connected. In backend/src/main/java/io/dataease/provider/datasource/JdbcProvider.java,...

9.3CVSS7.2AI score0.00569EPSS
Exploits0References2
Cvelist
Cvelist
added 2024/10/11 2:45 p.m.32 views

CVE-2024-47074 Dataease PostgreSQL Data Source JDBC Connection Parameters Not Verified Leads to Deserialization Vulnerability

DataEase is an open source data visualization analysis tool. In Dataease, the PostgreSQL data source in the data source function can customize the JDBC connection parameters and the PG server target to be connected. In backend/src/main/java/io/dataease/provider/datasource/JdbcProvider.java,...

9.3CVSS0.00569EPSS
Exploits0References2
OSV
OSV
added 2024/10/11 2:45 p.m.15 views

CVE-2024-47074 Dataease PostgreSQL Data Source JDBC Connection Parameters Not Verified Leads to Deserialization Vulnerability

DataEase is an open source data visualization analysis tool. In Dataease, the PostgreSQL data source in the data source function can customize the JDBC connection parameters and the PG server target to be connected. In backend/src/main/java/io/dataease/provider/datasource/JdbcProvider.java,...

9.3CVSS7.3AI score0.00569EPSS
Exploits0References4
CNNVD
CNNVD
added 2024/10/11 12:0 a.m.3 views

DataEase 代码问题漏洞

DataEase is an open source data visualization and analysis tool from DataEase Open Source. Used to help users quickly analyze data and insight into business trends , so as to achieve business improvement and optimization . A code issue vulnerability exists in versions prior to DataEase v1.18.25...

9.8CVSS7.1AI score0.00569EPSS
Exploits0References3
Veeam
Veeam
added 2024/10/11 12:0 a.m.56 views

How to Update NATS and PostgreSQL Passwords Used by Veeam Backup for Microsoft 365

Purpose This article documents the procedures for updating the password Veeam Backup for Microsoft 365 uses to connect to the NATS server and the configuration database. Solution Expand the section below relevant to the password that has been changed: How to Update NATS Server Password Default...

6.9AI score
Exploits0Affected Software1
Tenable Nessus
Tenable Nessus
added 2024/10/09 12:0 a.m.17 views

CentOS 7 : postgresql (RHSA-2021:2397)

The remote CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:2397 advisory. - A flaw was found in postgresql in versions before 13.3, before 12.7, before 11.12, before 10.17 and before 9.6.22. While modifying certain SQL array values,...

8.8CVSS7.3AI score0.02046EPSS
Exploits0References2
Fedora
Fedora
added 2024/10/07 12:16 a.m.29 views

[SECURITY] Fedora 41 Update: pgadmin4-8.12-1.fc41

pgAdmin is the most popular and feature rich Open Source administration and d evelopment platform for PostgreSQL, the most advanced Open Source database in the world...

9.9CVSS7AI score0.09681EPSS
Exploits2
Tenable Nessus
Tenable Nessus
added 2024/10/07 12:0 a.m.2 views

PostgreSQL pgAdmin4 Installed (Windows)

Binary data postgresqlpgadmin4wininstalled.nbin...

7.3AI score
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2024/10/07 12:0 a.m.5 views

PostgreSQL pgAdmin4 Installed (macOS)

Binary data postgresqlpgadmin4macosinstalled.nbin...

7.3AI score
Exploits0References1
GithubExploit
GithubExploit
added 2024/10/06 5:16 p.m.130 views

Exploit for OS Command Injection in Postgresql

EN GenPostgresRCEExploit is a PoC tool designed to exploit...

9CVSS7.7AI score0.91877EPSS
Exploits17
Rows per page
Query Builder