Lucene search
+L

2053 matches found

OSV
OSV
•added 2018/03/02 3:29 p.m.•9 views

ALPINE-CVE-2018-1058

A flaw was found in the way Postgresql allowed a user to modify the behavior of a query for other users. An attacker with a user account could use this flaw to execute code with the permissions of superuser in the database. Versions 9.3 through 10 are affected...

8.8CVSS7AI score0.13098EPSS
SaveExploits1References1
OSV
OSV
•added 2018/03/02 3:29 p.m.•37 views

CVE-2018-1058

A flaw was found in the way Postgresql allowed a user to modify the behavior of a query for other users. An attacker with a user account could use this flaw to execute code with the permissions of superuser in the database. Versions 9.3 through 10 are affected...

8.8CVSS5.6AI score
SaveExploits0References7
NVD
NVD
•added 2018/03/02 3:29 p.m.•34 views

CVE-2018-1058

A flaw was found in the way Postgresql allowed a user to modify the behavior of a query for other users. An attacker with a user account could use this flaw to execute code with the permissions of superuser in the database. Versions 9.3 through 10 are affected...

8.8CVSS7.6AI score0.13098EPSS
SaveExploits1References7
Debian CVE
Debian CVE
•added 2018/03/02 3:00 p.m.•34 views

CVE-2018-1058

Removed by vendor...

8.8CVSS7.7AI score0.13098EPSS
SaveExploits1
Mend
Mend
•added 2018/03/02 3:00 p.m.•1 views

CVE-2018-1058

A flaw was found in the way Postgresql allowed a user to modify the behavior of a query for other users. An attacker with a user account could use this flaw to execute code with the permissions of superuser in the database. Versions 9.3 through 10 are affected...

8.8CVSS0.13098EPSS
SaveExploits1References8
Cvelist
Cvelist
•added 2018/03/02 3:00 p.m.•49 views

CVE-2018-1058

A flaw was found in the way Postgresql allowed a user to modify the behavior of a query for other users. An attacker with a user account could use this flaw to execute code with the permissions of superuser in the database. Versions 9.3 through 10 are affected...

7.7AI score0.13098EPSS
SaveExploits1References7
CVE
CVE
•added 2018/03/02 3:00 p.m.•448 views

CVE-2018-1058

CVE-2018-1058 affects PostgreSQL 9.3–10, where a flaw in search_path handling allowed a logged-in user to modify query behavior for other users and potentially execute code with the database superuser privileges. The related connected advisories confirm upstream remediation: PostgreSQL upstream f...

8.8CVSS7.6AI score0.13098EPSS
SaveExploits1References7Affected Software1
AlpineLinux
AlpineLinux
•added 2018/03/02 3:00 p.m.•47 views

CVE-2018-1058

A flaw was found in the way Postgresql allowed a user to modify the behavior of a query for other users. An attacker with a user account could use this flaw to execute code with the permissions of superuser in the database. Versions 9.3 through 10 are affected...

8.8CVSS7.8AI score0.13098EPSS
SaveExploits1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/03/02 12:00 a.m.•3 views

CVE-2018-1058: Improper Input Validation

A flaw was found in the way Postgresql allowed a user to modify the behavior of a query for other users. An attacker with a user account could use this flaw to execute code with the permissions of superuser in the database. Versions 9.3 through 10 are affected...

8.8CVSS7.2AI score0.13098EPSS
SaveExploits1References2
UbuntuCve
UbuntuCve
•added 2018/02/28 12:00 a.m.•35 views

CVE-2018-1058

A flaw was found in the way Postgresql allowed a user to modify the behavior of a query for other users. An attacker with a user account could use this flaw to execute code with the permissions of superuser in the database. Versions 9.3 through 10 are affected...

8.8CVSS7AI score0.13098EPSS
SaveExploits1References2
OSV
OSV
•added 2018/02/28 12:00 a.m.•8 views

UBUNTU-CVE-2018-1058

A flaw was found in the way Postgresql allowed a user to modify the behavior of a query for other users. An attacker with a user account could use this flaw to execute code with the permissions of superuser in the database. Versions 9.3 through 10 are affected...

8.8CVSS7AI score0.13098EPSS
SaveExploits1References3
CNVD
CNVD
•added 2018/02/11 12:00 a.m.•4 views

Deep Internet Behavior Management Router Has Superuser Password Reset Vulnerability

IP-COM Deep Internet Behavior Management is a network management device that provides network administrators with user authentication, web filtering, application control, traffic control, content filtering, behavioral auditing, VPN and other functions. Deep Internet Behavior Management router has...

6.8AI score
SaveExploits0
OpenVAS
OpenVAS
•added 2017/12/04 12:00 a.m.•211 views

PostgreSQL Privilege Escalation Vulnerability (Dec 2017) - Linux

PostgreSQL is prone to a privilege escalation vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

7.2CVSS6.4AI score0.00586EPSS
SaveExploits0References3
OSV
OSV
•added 2017/11/22 7:29 p.m.•16 views

CVE-2017-12172

PostgreSQL 10.x before 10.1, 9.6.x before 9.6.6, 9.5.x before 9.5.10, 9.4.x before 9.4.15, 9.3.x before 9.3.20, and 9.2.x before 9.2.24 runs under a non-root operating system account, and database superusers have effective ability to run arbitrary code under that system account. PostgreSQL provid...

6.7CVSS7.5AI score0.00586EPSS
SaveExploits0References8
Fedora
Fedora
•added 2017/11/22 5:09 a.m.•28 views

[SECURITY] Fedora 25 Update: perl-Net-Ping-External-0.15-11.fc25

Net::Ping::External is a module which interfaces with the "ping" command on many systems. It presently provides a single function, ping, that takes in a hostname and optionally a timeout and returns true if the host is alive, and false otherwise. Unless you have the ability and willingness to run...

10CVSS0.7AI score0.06189EPSS
SaveExploits0
Fedora
Fedora
•added 2017/11/22 2:34 a.m.•41 views

[SECURITY] Fedora 26 Update: perl-Net-Ping-External-0.15-11.fc26

Net::Ping::External is a module which interfaces with the "ping" command on many systems. It presently provides a single function, ping, that takes in a hostname and optionally a timeout and returns true if the host is alive, and false otherwise. Unless you have the ability and willingness to run...

10CVSS0.7AI score0.06189EPSS
SaveExploits0
Fedora
Fedora
•added 2017/11/21 11:38 p.m.•34 views

[SECURITY] Fedora 27 Update: perl-Net-Ping-External-0.15-11.fc27

Net::Ping::External is a module which interfaces with the "ping" command on many systems. It presently provides a single function, ping, that takes in a hostname and optionally a timeout and returns true if the host is alive, and false otherwise. Unless you have the ability and willingness to run...

10CVSS0.7AI score0.06189EPSS
SaveExploits0
exploitpack
exploitpack
•added 2017/10/17 12:00 a.m.•72 views

OpenText Documentum Content Server - Privilege Escalation

OpenText Documentum Content Server - Privilege Escalation !/usr/bin/env python Opentext Documentum Content Server formerly known as EMC Documentum Content Server contains following design gap, which allows authenticated user to gain privileges of superuser: Content Server allows to upload content...

6.5CVSS1.1AI score0.09494EPSS
SaveExploits4
exploitpack
exploitpack
•added 2017/10/17 12:00 a.m.•118 views

OpenText Documentum Content Server - dmr_content Privilege Escalation

OpenText Documentum Content Server - dmrcontent Privilege Escalation !/usr/bin/env python Opentext Documentum Content Server formerly known as EMC Documentum Content Server contains following design gap, which allows authenticated user to gain privileges of superuser: Content Server stores...

6.5CVSS1.2AI score0.06639EPSS
SaveExploits4
Exploit DB
Exploit DB
•added 2017/10/17 12:00 a.m.•75 views

OpenText Documentum Content Server - Privilege Escalation

!/usr/bin/env python Opentext Documentum Content Server formerly known as EMC Documentum Content Server contains following design gap, which allows authenticated user to gain privileges of superuser: Content Server allows to upload content using batches TAR archives, when unpacking TAR archives...

8.8CVSS7.9AI score0.09494EPSS
SaveExploits4
Rows per page
Query Builder