Lucene search
K

3355 matches found

RedHat Linux
RedHat Linux
added 2020/12/22 9:25 a.m.1 views

mysql: Server: Replication unspecified vulnerability (CPU Apr 2019)

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Replication. Supported versions that are affected are 5.6.43 and prior, 5.7.25 and prior and 8.0.15 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple...

4.4CVSS6.8AI score0.00181EPSS
Exploits0References5
Tenable Nessus
Tenable Nessus
added 2020/12/18 12:0 a.m.233 views

RHEL 8 : postgresql:12 (RHSA-2020:5620)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:5620 advisory. PostgreSQL is an advanced object-relational database management system DBMS. The following packages have been upgraded to a later upstream...

8.8CVSS6.7AI score0.23757EPSS
Exploits1References18
RedHat Linux
RedHat Linux
added 2020/12/17 4:1 p.m.2 views

postgresql: Uncontrolled search path element in logical replication

A flaw was found in PostgreSQL, where it did not properly sanitize the searchpath during logical replication. This flaw allows an authenticated attacker to use this flaw in an attack similar to CVE-2018-1058 to execute an arbitrary SQL command in the user's context for replication. The highest...

8.8CVSS7.3AI score0.81248EPSS
Exploits1References4
Rockylinux
Rockylinux
added 2020/12/17 3:30 p.m.33 views

postgresql:12 security update

An update is available for pgaudit, postgres-decoderbufs. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list PostgreSQL is an advanced object-relational database...

8.8CVSS8.3AI score0.23757EPSS
Exploits1
OSV
OSV
added 2020/12/17 3:30 p.m.27 views

ALSA-2020:5620 Important: postgresql:12 security update

PostgreSQL is an advanced object-relational database management system DBMS. The following packages have been upgraded to a later upstream version: postgresql 12.5. Security Fixes: postgresql: Reconnection can downgrade connection security settings CVE-2020-25694 postgresql: Multiple features...

8.8CVSS7.8AI score0.23757EPSS
Exploits1References7
Virtuozzo
Virtuozzo
added 2020/12/17 12:0 a.m.99 views

Product update: Virtuozzo Hybrid Infrastructure 4.0 Update 1

This update provides a new feature, as well as bug fixes and improvements. Vulnerability id: VSTOR-38583 A non-admin user is unable to create volumes from the command line. Vulnerability id: VSTOR-38785 Enabled geo-replication on Backup Gateway with an S3 backend may result in a deadlock...

0.5AI score
Exploits0
AlmaLinux
AlmaLinux
added 2020/12/15 4:4 p.m.12 views

389-ds:1.4 bug fix update

389 Directory Server is an LDAP version 3 LDAPv3 compliant server. The base packages include the Lightweight Directory Access Protocol LDAP server and command-line utilities for server administration. Bug Fixes: Entries conflict not resolved by replication BZ1904347 Duplicate entryUSN numbers for...

1.8AI score
Exploits0
Citrix
Citrix
added 2020/12/11 12:0 a.m.5 views

Unable to boot the target device when vDisk is not replicated to all the Provisioning Service servers

The target device fails to startwhen vDisk is not replicated across all the servers. The target device freezesat "connecting to provisioning services"...

7AI score
Exploits0
IBM Security Bulletins
IBM Security Bulletins
added 2020/12/09 4:41 a.m.33 views

Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in PostgreSQL

Summary IBM Watson Discovery for IBM Cloud Pak for Data contains a vulnerable version of PostgreSQL. Vulnerability Details CVEID: CVE-2020-14349 DESCRIPTION: PostgreSQL could allow a remote authenticated attacker to execute arbitrary command on the system, caused by improper sanitization of...

7.3CVSS1.7AI score0.00526EPSS
Exploits1Affected Software1
RedHat Linux
RedHat Linux
added 2020/11/30 1:47 p.m.3 views

mysql: Server: Replication unspecified vulnerability (CPU Apr 2019)

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Replication. Supported versions that are affected are 5.6.43 and prior, 5.7.25 and prior and 8.0.15 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple...

4.4CVSS6.8AI score0.00181EPSS
Exploits0References5
OSV
OSV
added 2020/11/24 3:15 a.m.14 views

CVE-2020-26890

Matrix Synapse before 1.20.0 erroneously permits non-standard NaN, Infinity, and -Infinity JSON values in fields of m.room.member events, allowing remote attackers to execute a denial of service attack against the federation and common Matrix clients. If such a malformed event is accepted into th...

7.5CVSS7.5AI score
Exploits0References3
OpenVAS
OpenVAS
added 2020/11/20 12:0 a.m.7 views

GaussDB Kernel: Enabling the Archiving Mode

The parameter wallevel specifies the amount of information to be written into a WAL. If wallevel is set to the minimum value, information recorded in backup files and WALs is insufficient to reconstruct databases. Therefore, you must set wallevel to archive or hotstandby, and enable the archiving...

7AI score
Exploits0
RedHat Linux
RedHat Linux
added 2020/11/18 2:30 a.m.1 views

postgresql: Uncontrolled search path element in logical replication

A flaw was found in PostgreSQL, where it did not properly sanitize the searchpath during logical replication. This flaw allows an authenticated attacker to use this flaw in an attack similar to CVE-2018-1058 to execute an arbitrary SQL command in the user's context for replication. The highest...

8.8CVSS7.3AI score0.81248EPSS
Exploits1References4
RedHat Linux
RedHat Linux
added 2020/11/16 12:11 p.m.0 views

postgresql: Uncontrolled search path element in logical replication

A flaw was found in PostgreSQL, where it did not properly sanitize the searchpath during logical replication. This flaw allows an authenticated attacker to use this flaw in an attack similar to CVE-2018-1058 to execute an arbitrary SQL command in the user's context for replication. The highest...

8.8CVSS7.3AI score0.81248EPSS
Exploits1References4
Veeam
Veeam
added 2020/11/13 12:0 a.m.17 views

Release notes for Veeam Backup & Replication 10a Cumulative Patch 20201202

More Recent Version Available Please find the latest version of Veeam Backup & Replication here: Veeam Downloads - Latest Version Requirements Please confirm that you are running version 10a build 10.0.1.4854 prior to installing this update. You can check this under Help | About in the Veeam Back...

7.3AI score
Exploits0Affected Software1
Fedora
Fedora
added 2020/11/11 1:32 a.m.48 views

[SECURITY] Fedora 31 Update: galera-25.3.31-1.fc31

Galera is a fast synchronous multi-master wsrep provider replication engin e for transactional databases and similar applications. For more information about wsrep API see http://launchpad.net/wsrep. For a description of Galera replication engine see http://www.codership.com...

8.8CVSS7AI score0.0118EPSS
Exploits0
OpenVAS
OpenVAS
added 2020/11/11 12:0 a.m.6 views

openGauss: Enabling the Archiving Mode

The parameter wallevel specifies the amount of information to be written into a WAL. If wallevel is set to the minimum value, information recorded in backup files and WALs is insufficient to reconstruct databases. Therefore, you must set wallevel to archive or hotstandby, and enable the archiving...

7AI score
Exploits0References1
Fedora
Fedora
added 2020/11/09 1:13 a.m.44 views

[SECURITY] Fedora 33 Update: galera-26.4.6-1.fc33

Galera is a fast synchronous multi-master wsrep provider replication engin e for transactional databases and similar applications. For more information about wsrep API see http://launchpad.net/wsrep. For a description of Galera replication engine see http://www.codership.com...

6.8CVSS6.6AI score0.0118EPSS
Exploits0
Citrix
Citrix
added 2020/11/09 12:0 a.m.5 views

Citrix StoreFront Web GUI Assistant

StoreFront Web GUI DevlopedDate: 09/12/2013 Modified Date: 04/16/2020 Where to download ? Certain legacy Citrix tools are now available on request only. Please submit the request here - https://forms.gle/obA39PEz5qpDiSPq8 Once we verify your request, we will provide access to the download locatio...

7.2AI score
Exploits0
OpenVAS
OpenVAS
added 2020/11/09 12:0 a.m.28 views

Fedora: Security Advisory for galera (FEDORA-2020-b995eb2973)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

6.8CVSS7AI score0.0124EPSS
Exploits0References2
Rows per page
Query Builder