2488 matches found
CVE-2023-39418
A vulnerability was found in PostgreSQL with the use of the MERGE command, which fails to test new rows against row security policies defined for UPDATE and SELECT. If UPDATE and SELECT policies forbid some rows that INSERT policies do not forbid, a user could store such rows...
CVE-2023-39418
A vulnerability was found in PostgreSQL with the use of the MERGE command, which fails to test new rows against row security policies defined for UPDATE and SELECT. If UPDATE and SELECT policies forbid some rows that INSERT policies do not forbid, a user could store such rows...
postgresql-server -- MERGE fails to enforce UPDATE or SELECT row security policies
PostgreSQL Project reports PostgreSQL 15 introduced the MERGE command, which fails to test new rows against row security policies defined for UPDATE and SELECT. If UPDATE and SELECT policies forbid some row that INSERT policies do not forbid, a user could store such rows. Subsequent consequences...
PT-2023-4423 · Unknown +9 · Postgresql +8
Name of the Vulnerable Software and Affected Versions: PostgreSQL versions 15 and later Description: A vulnerability was found in PostgreSQL with the use of the MERGE command, which fails to test new rows against row security policies defined for UPDATE and SELECT. If UPDATE and SELECT policies...
CISA Releases One Industrial Control Systems Advisory
CISA released one Critical Industrial Control Systems ICS advisory on July 12, 2023. This advisory provides timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-23-193-01 Rockwell Automation Select Communication Modules CISA encourages users and...
USN-6195-1 vim vulnerabilities
It was discovered that Vim contained an out-of-bounds read vulnerability. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. CVE-2022-0128 It was discovered that Vim did not properly manage memory when freeing allocated memory. An attacker could...
Remote Code Execution (RCE)
Overview Affected versions of this package are vulnerable to Remote Code Execution RCE due to allowing attackers to execute arbitrary code and commands when untrusted input to methods including Where, Select, OrderBy is parsed. Remediation Upgrade System.Linq.Dynamic.Core to version 1.3.0 or...
Dynamic Linq 安全漏洞
Dynamic Linq is a free open source LINQ dynamic query library. A security vulnerability exists in Dynamic Linq versions 1.0.7.10 through 1.2.25 that could allow an attacker to execute arbitrary code and commands while parsing methods on untrusted inputs such as Where, Select, and OrderBy...
PT-2023-3376 · Unknown · Dynamic Linq
Name of the Vulnerable Software and Affected Versions: Dynamic Linq versions 1.0.7.10 through 1.2.25 Description: The issue is related to the use of an incomplete blacklist in the Dynamic Linq library, allowing attackers to execute arbitrary code when untrusted input is parsed by methods includin...
Malicious code in fc-country-select (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 24c2e34746019c8babb7529002f310acda6cd4d5f8ae99347e250d6ee9c6fb34 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2023-339 Malicious code in fc-country-select (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 24c2e34746019c8babb7529002f310acda6cd4d5f8ae99347e250d6ee9c6fb34 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
The vulnerability of the dialog/select_media.php implementation in the DedeCMS content management system allows attackers to read arbitrary files.
The vulnerability of the dialog/selectmedia.php implementation in the DedeCMS content management system is related to an incorrect restriction on the path to the restricted catalog. Exploiting this vulnerability could allow a malicious actor to read arbitrary files...
Medium: mariadb
Issue Overview: getsortbytable in MariaDB before 10.6.2 allows an application crash via certain subquery uses of ORDER BY. CVE-2021-46657 MariaDB before 10.7.2 allows an application crash because it does not recognize that SELECTLEX::nestlevel is local to each VIEW. CVE-2021-46659 MariaDB through...
CVE-2023-31614
An issue in the mpboxdeserializestring function in openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service DoS after running a SELECT statement...
CVE-2023-31614
An issue in the mpboxdeserializestring function in openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service DoS after running a SELECT statement...
DEBIAN-CVE-2023-31614
An issue in the mpboxdeserializestring function in openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service DoS after running a SELECT statement...
CVE-2023-31614
An issue in the mpboxdeserializestring function in openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service DoS after running a SELECT statement...
Design/Logic Flaw
An issue in the mpboxdeserializestring function in openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service DoS after running a SELECT statement...
