1193 matches found
OSV-2017-41 Heap-buffer-overflow in OSS_FUZZ_png_combine_row
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=3606 Crash type: Heap-buffer-overflow WRITE 4 Crash state: OSSFUZZpngcombinerow OSSFUZZpngreadrow start...
postgresql: Selectivity estimators bypass row security policies
PostgreSQL maintains column statistics for tables. Certain statistics, such as histograms and lists of most common values, contain values taken from the column. PostgreSQL does not evaluate row security policies before consulting those statistics during query planning; an attacker can exploit thi...
postgresql: Selectivity estimators bypass row security policies
PostgreSQL maintains column statistics for tables. Certain statistics, such as histograms and lists of most common values, contain values taken from the column. PostgreSQL does not evaluate row security policies before consulting those statistics during query planning; an attacker can exploit thi...
File Upload Vulnerability in Fast Platoon CMS
Fast Row CMS is open source and free PHP enterprise website production, construction, development and optimization of SEO management system. A file upload vulnerability exists in Fastrack CMS. Attackers can use the vulnerability to upload webshell and gain server privileges...
postgresql: Selectivity estimators bypass row security policies
PostgreSQL maintains column statistics for tables. Certain statistics, such as histograms and lists of most common values, contain values taken from the column. PostgreSQL does not evaluate row security policies before consulting those statistics during query planning; an attacker can exploit thi...
Rowhammer DDR4 Vulnerability - Lenovo Support US
No description provided...
Authorization Bypass
postgresql is vulnerable to authroization bypass. The selectivity estimators allows an attacker to bypass row security policies and view common values of certain columns...
postgresql: Selectivity estimators bypass row security policies
PostgreSQL maintains column statistics for tables. Certain statistics, such as histograms and lists of most common values, contain values taken from the column. PostgreSQL does not evaluate row security policies before consulting those statistics during query planning; an attacker can exploit thi...
Swiss-Swedish Diplomatic Row Over Crypto AG
Previously I have written about the Swedish-owned Swiss-based cryptographic hardware company: Crypto AG. It was a CIA-owned Cold War operation for decades. Today it is called Crypto International, still based in Switzerland but owned by a Swedish company. Its back in the news: Late last week,...
[20220303] - Core - User row are not bound to a authentication mechanism
A user row was not bound to a specific authentication mechanism which could under very special circumstances allow an account takeover...
Moderate: Red Hat Security Advisory: postgresql:10 security and bug fix update
An update for the postgresql:10 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
postgresql: Selectivity estimators bypass row security policies
PostgreSQL maintains column statistics for tables. Certain statistics, such as histograms and lists of most common values, contain values taken from the column. PostgreSQL does not evaluate row security policies before consulting those statistics during query planning; an attacker can exploit thi...
GHSA-HGR5-82RC-P936 Cross-Site Scripting in md-data-table
All versions of md-data-table are vulnerable to cross-site scripting XSS. This vulnerability is exploitable if an attacker has control over data that is rendered by mdt-row Recommendation As there is no fix for this vulnerability at this time we recommend either selecting another package to perfo...
row-gmbh.at Cross Site Scripting vulnerability OBB-1287067
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
ALPINE-CVE-2020-13790
libjpeg-turbo 2.0.4, and mozjpeg 4.0.0, has a heap-based buffer over-read in getrgbrow in rdppm.c via a malformed PPM input file...
DEBIAN-CVE-2020-13790
libjpeg-turbo 2.0.4, and mozjpeg 4.0.0, has a heap-based buffer over-read in getrgbrow in rdppm.c via a malformed PPM input file...
February 10, 2015 update for SharePoint Server 2010 (KB2899589)
February 10, 2015 update for SharePoint Server 2010 KB2899589 This article describes update KB2899589 for Microsoft SharePoint Server 2010 that was released on February 10, 2015. This update has a prerequisite. Improvements and Fixes Fixes the following issue: Assume that you open an Excel workbo...
February 10, 2015 update for SharePoint Server 2010 Excel Web App (KB2899588)
February 10, 2015 update for SharePoint Server 2010 Excel Web App KB2899588 This article describes update KB2899588 for Microsoft SharePoint Server 2010 Excel Web App that was released on February 10, 2015. This update has a prerequisite. Improvements and Fixes Fixes the following issue: Assume...
ImageMagick: out-of-bounds write in InsertRow function in coders/cut.c
The function InsertRow in coders/cut.c in ImageMagick 7.0.7-37 allows remote attackers to cause a denial of service via a crafted image file due to an out-of-bounds write...
postgresql: Selectivity estimators bypass row security policies
PostgreSQL maintains column statistics for tables. Certain statistics, such as histograms and lists of most common values, contain values taken from the column. PostgreSQL does not evaluate row security policies before consulting those statistics during query planning; an attacker can exploit thi...