Lucene search
K

11 matches found

Tenable Nessus
Tenable Nessus
added 2026/02/11 12:0 a.m.3 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: postgresql-13 (UTSA-2026-005346)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005346 advisory. PostgreSQL optimizer statistics allow a user to read sampled data within a view that the user cannot access. Separately, statistics allow a user to read sampled data...

7.5CVSS5.6AI score0.01443EPSS
Exploits0References4
Amazon
Amazon
added 2025/09/08 12:0 a.m.2 views

Important: postgresql15

Issue Overview: PostgreSQL optimizer statistics allow a user to read sampled data within a view that the user cannot access. Separately, statistics allow a user to read sampled data that a row security policy intended to hide. PostgreSQL maintains statistics for tables by sampling data available ...

8.8CVSS8.1AI score0.04372EPSS
Exploits2
OSV
OSV
added 2025/09/05 12:42 p.m.2 views

OESA-2025-2137 libpq security update

PostgreSQL is a powerful, open source object-relational database system that uses and extends the SQL language combined with many features that safely store and scale the most complicated data workloads. This package provides the essential shared library for any PostgreSQL client program or...

8.8CVSS8.3AI score0.00085EPSS
Exploits2References4
RedHat Linux
RedHat Linux
added 2025/09/02 6:44 a.m.3 views

postgresql: PostgreSQL optimizer statistics can expose sampled data within a view, partition, or child table

An access control bypass flaw has been discovered in PostgreSQL. The PostgreSQL optimizer statistics allow a user to read sampled data within a view that the user cannot access. Separately, statistics allow a user to read sampled data that a row security policy intended to hide...

3.1CVSS7AI score0.00053EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2025/08/28 12:14 p.m.3 views

postgresql: PostgreSQL optimizer statistics can expose sampled data within a view, partition, or child table

An access control bypass flaw has been discovered in PostgreSQL. The PostgreSQL optimizer statistics allow a user to read sampled data within a view that the user cannot access. Separately, statistics allow a user to read sampled data that a row security policy intended to hide...

3.1CVSS7AI score0.00053EPSS
Exploits0References5
OSV
OSV
added 2025/08/14 1:15 p.m.0 views

ALPINE-CVE-2025-8713

PostgreSQL optimizer statistics allow a user to read sampled data within a view that the user cannot access. Separately, statistics allow a user to read sampled data that a row security policy intended to hide. PostgreSQL maintains statistics for tables by sampling data available in columns; this...

3.1CVSS6.7AI score0.00053EPSS
Exploits0References1
OSV
OSV
added 2025/08/14 1:15 p.m.1 views

UBUNTU-CVE-2025-8713

PostgreSQL optimizer statistics allow a user to read sampled data within a view that the user cannot access. Separately, statistics allow a user to read sampled data that a row security policy intended to hide. PostgreSQL maintains statistics for tables by sampling data available in columns; this...

3.1CVSS7.1AI score0.00053EPSS
Exploits0References5
CNNVD
CNNVD
added 2025/08/14 12:0 a.m.2 views

PostgreSQL 安全漏洞

PostgreSQL is a free object-relational database management system from the PostgreSQL organization. The system supports most of the SQL standards and provides many other features such as foreign keys, triggers, views, and more. A security vulnerability exists in PostgreSQL versions 17.6, 16.10,...

3.1CVSS7.8AI score0.00053EPSS
Exploits0References3
CNNVD
CNNVD
added 2025/07/16 12:0 a.m.3 views

Icinga DB Web 信息泄露漏洞

Icinga DB Web is an Icinga open source graphical interface to the Icinga DB database. An information disclosure vulnerability exists in Icinga DB Web versions prior to 1.2.0 to 1.2.2, which stems from improper dependency view access control that could cause a user to view unauthorized hosts and...

2.4CVSS5.8AI score0.00239EPSS
Exploits0References2
OSV
OSV
added 2022/02/09 3:17 p.m.1 views

DRUPAL-CONTRIB-2022-023

This module enables you to manage and delete files. The module doesn't sufficiently protect unmanaged files from view under the scenario unauthenticated user knows path to visit the view and can attempt to delete files which results in duplicate files being created. To mitigate this issue without...

6.8AI score
Exploits0References1
IBM Security Bulletins
IBM Security Bulletins
added 2019/03/08 9:30 p.m.20 views

Security Bulletin: Multiple security vulnerabilities affect Rational Engineering Lifecycle Manager

Summary Rational Engineering Lifecycle Manager is affected by multiple security vulnerabilities Vulnerability Details CVEID: CVE-2018-1929 DESCRIPTION: IBM RELM could allow a malicious user to be allowed to view any view if he knows the URL link of a the view, and access information that should n...

5.4CVSS0.9AI score0.00322EPSS
Exploits0Affected Software1
Rows per page
Query Builder