Lucene search
K

8 matches found

Github Security Blog
Github Security Blog
added 2018/07/24 7:44 p.m.13 views

Remote Code Execution in pg

Affected versions of pg contain a remote code execution vulnerability that occurs when the remote database or query specifies a crafted column name. There are two specific scenarios in which it is likely for an application to be vulnerable: 1. The application executes unsafe, user-supplied sql...

9.8CVSS5.6AI score0.70815EPSS
Exploits1References4Affected Software1
OSV
OSV
added 2018/07/24 7:44 p.m.1 views

GHSA-WC9V-MJ63-M9G5 Remote Code Execution in pg

Affected versions of pg contain a remote code execution vulnerability that occurs when the remote database or query specifies a crafted column name. There are two specific scenarios in which it is likely for an application to be vulnerable: 1. The application executes unsafe, user-supplied sql...

9.8CVSS6.5AI score0.70815EPSS
Exploits1References4
NVD
NVD
added 2018/06/07 2:29 a.m.8 views

CVE-2017-16082

A remote code execution vulnerability was found within the pg module when the remote database or query specifies a specially crafted column name. There are 2 likely scenarios in which one would likely be vulnerable. 1 Executing unsafe, user-supplied sql which contains a malicious column name. 2...

9.8CVSS9.7AI score0.70815EPSS
Exploits1References2
OSV
OSV
added 2018/06/07 2:29 a.m.2 views

DEBIAN-CVE-2017-16082

A remote code execution vulnerability was found within the pg module when the remote database or query specifies a specially crafted column name. There are 2 likely scenarios in which one would likely be vulnerable. 1 Executing unsafe, user-supplied sql which contains a malicious column name. 2...

9.8CVSS9.5AI score0.70815EPSS
Exploits1References1
OSV
OSV
added 2018/06/07 2:29 a.m.2 views

CVE-2017-16082

A remote code execution vulnerability was found within the pg module when the remote database or query specifies a specially crafted column name. There are 2 likely scenarios in which one would likely be vulnerable. 1 Executing unsafe, user-supplied sql which contains a malicious column name. 2...

9.8CVSS9.6AI score
Exploits0References2
UbuntuCve
UbuntuCve
added 2018/06/07 2:29 a.m.14 views

CVE-2017-16082

A remote code execution vulnerability was found within the pg module when the remote database or query specifies a specially crafted column name. There are 2 likely scenarios in which one would likely be vulnerable. 1 Executing unsafe, user-supplied sql which contains a malicious column name. 2...

9.8CVSS7.7AI score0.70815EPSS
Exploits1References2
OSV
OSV
added 2018/06/07 2:29 a.m.1 views

UBUNTU-CVE-2017-16082

A remote code execution vulnerability was found within the pg module when the remote database or query specifies a specially crafted column name. There are 2 likely scenarios in which one would likely be vulnerable. 1 Executing unsafe, user-supplied sql which contains a malicious column name. 2...

9.8CVSS6.4AI score0.70815EPSS
Exploits1References3
Prion
Prion
added 2018/06/07 2:29 a.m.11 views

Remote code execution

A remote code execution vulnerability was found within the pg module when the remote database or query specifies a specially crafted column name. There are 2 likely scenarios in which one would likely be vulnerable. 1 Executing unsafe, user-supplied sql which contains a malicious column name. 2...

7.5CVSS9.6AI score0.70815EPSS
Exploits1References2Affected Software1
Rows per page
Query Builder