CVE-2026-122043

repmgr 4.0.0 through 5.5.0 is affected by an OS command injection vulnerability CWE-78 in event notifications. When eventnotificationcommand is configured, repmgr substitutes the %a node name, %c connection string and %d details placeholders into the command and runs it through the shell. %a and ...

CVE-2026-122043

repmgr 4.0.0 through 5.5.0 is affected by an OS command injection vulnerability CWE-78 in event notifications. When eventnotificationcommand is configured, repmgr substitutes the %a node name, %c connection string and %d details placeholders into the command and runs it through the shell. %a and ...

CVE-2026-122043

repmgr 4.0.0 through 5.5.0 is affected by an OS command injection vulnerability CWE-78 in event notifications. When eventnotificationcommand is configured, repmgr substitutes the %a node name, %c connection string and %d details placeholders into the command and runs it through the shell. %a and ...

CVE-2026-122043

repmgr 4.0.0 through 5.5.0 is affected by an OS command injection vulnerability CWE-78 in event notifications. When eventnotificationcommand is configured, repmgr substitutes the %a node name, %c connection string and %d details placeholders into the command and runs it through the shell. %a and ...

EUVD-2026-123579

repmgr 4.0.0 through 5.5.0 is affected by an OS command injection vulnerability CWE-78 in event notifications. When eventnotificationcommand is configured, repmgr substitutes the %a node name, %c connection string and %d details placeholders into the command and runs it through the shell. %a and ...

CVE-2026-122043

The repmgr replication manager (versions 4.0.0 through 5.5.0 ) is vulnerable to an OS command injection (CWE-78) within event notifications. When event_notification_command is used, the software substitutes placeholders like %a (node name), %c (connection string), and %d (details) into shell comm...

PT-2026-145263

repmgr 4.0.0 through 5.5.0 is affected by an OS command injection vulnerability CWE-78 in event notifications. When event notification command is configured, repmgr substitutes the %a node name, %c connection string and %d details placeholders into the command and runs it through the shell. %a an...

CVE-2026-122043: EnterpriseDB repmgr: repmgr 4.0.0 through 5.5.0 is affected by an OS command injection vulnerability (CWE-78) in event notifications

repmgr 4.0.0 through 5.5.0 is affected by an OS command injection vulnerability CWE-78 in event notifications. When eventnotificationcommand is configured, repmgr substitutes the %a node name, %c connection string and %d details placeholders into the command and runs it through the shell. %a and ...

EUVD-2017-17928

Malware in sbrugna...

CVE-2025-22248 [pgpool] Unauthenticated access to postgres through pgpool

The bitnami/pgpool Docker image, and the bitnami/postgres-ha k8s chart, under default configurations, comes with an 'repmgr' user that allows unauthenticated access to the database inside the cluster. The PGPOOLSRCHECKUSER is the user that Pgpool itself uses to perform streaming replication check...

CVE-2025-22248: Initialization of a Resource with an Insecure Default

The bitnami/pgpool Docker image, and the bitnami/postgres-ha k8s chart, under default configurations, comes with an 'repmgr' user that allows unauthenticated access to the database inside the cluster. The PGPOOLSRCHECKUSER is the user that Pgpool itself uses to perform streaming replication check...

CVE-2019-5408

Command View Advanced Edition CVAE products contain a vulnerability that could expose configuration information of hosts and storage systems that are managed by Device Manager server. This problem is due to a vulnerability in Device Manager GUI. The following products are affected. DevMgr version...

Design/Logic Flaw

Command View Advanced Edition CVAE products contain a vulnerability that could expose configuration information of hosts and storage systems that are managed by Device Manager server. This problem is due to a vulnerability in Device Manager GUI. The following products are affected. DevMgr version...

CVE-2019-5408

CVE-2019-5408 affects HPE CVAE (Command View Advanced Edition) products, enabling an information disclosure of hosts/storage configuration via the Device Manager GUI. Affected stack: DevMgr 7.0.0-00 up to

CVE-2019-5408

Command View Advanced Edition CVAE products contain a vulnerability that could expose configuration information of hosts and storage systems that are managed by Device Manager server. This problem is due to a vulnerability in Device Manager GUI. The following products are affected. DevMgr version...

CVE-2019-5408: Undefined Security Weakness

Command View Advanced Edition CVAE products contain a vulnerability that could expose configuration information of hosts and storage systems that are managed by Device Manager server. This problem is due to a vulnerability in Device Manager GUI. The following products are affected. DevMgr version...

CVE-2018-7090

HPE XP P9000 Command View Advanced Edition Software CVAE has local and remote cross site scripting vulnerability in versions 7.0.0-00 to earlier than 8.60-00 of DevMgr, TSMgr and RepMgr...

CVE-2017-8988

A Remote Bypass of Security Restrictions vulnerability was identified in HPE XP Command View Advanced Edition Software Earlier than 8.5.3-00. The vulnerability impacts DevMgr Earlier than 8.5.3-00 for Windows, Linux, RepMgr earlier than 8.5.3-00 for Windows, Linux and HDLM earlier than 8.5.3-00 f...

Security feature bypass

A Remote Bypass of Security Restrictions vulnerability was identified in HPE XP Command View Advanced Edition Software Earlier than 8.5.3-00. The vulnerability impacts DevMgr Earlier than 8.5.3-00 for Windows, Linux, RepMgr earlier than 8.5.3-00 for Windows, Linux and HDLM earlier than 8.5.3-00 f...

Cross site scripting

HPE XP P9000 Command View Advanced Edition Software CVAE has local and remote cross site scripting vulnerability in versions 7.0.0-00 to earlier than 8.60-00 of DevMgr, TSMgr and RepMgr...