redhat software collections - vulnerabilities and exploits

(subscribe to this query)

An information leak exists in postgresql in versions prior to 13.2, prior to 12.6 and prior to 11.11. A user having UPDATE permission but not SELECT permission to a particular column could craft queries which, under some circumstances, might disclose values from that column in er...

Postgresql Postgresql Redhat Software Collections -Redhat Enterprise Linux 8.0

A flaw was found in PostgreSQL's "ALTER ... DEPENDS ON EXTENSION", where sub-commands did not perform authorization checks. An authenticated attacker could use this flaw in certain configurations to perform drop objects such as function, triggers, et al., leading t...

Postgresql Postgresql Redhat Decision Manager 7.0 Redhat Enterprise Linux 8.0 Redhat Software Collections -

The CGIHTTPServer module in Python 2.7.5 and 3.3.4 does not properly handle URLs in which URL encoding is used for path separators, which allows remote malicious users to read script source code or conduct directory traversal attacks and execute unintended code via a crafted char...

Python Python Redhat Enterprise Linux 7.0 Redhat Enterprise Linux 6.0 Redhat Enterprise Linux 5.0 Redhat Software Collections -

1 EDB exploit

A flaw was found in PostgreSQL in versions prior to 13.2. This flaw allows a user with SELECT privilege on one column to craft a special query that returns all columns of the table. The highest threat from this vulnerability is to confidentiality.

Postgresql Postgresql Redhat Software Collections -Redhat Enterprise Linux 7.0 Redhat Enterprise Linux 8.0 Fedoraproject Fedora 33

schema_element defeats protective search_path changes; It was found that certain database calls in PostgreSQL could permit an authed attacker with elevated database-level privileges to execute arbitrary code.

Postgresql Postgresql Redhat Enterprise Linux 8.0 Redhat Software Collections -Redhat Enterprise Linux 9.0 Fedoraproject Fedora 38

Row security policies disregard user ID changes after inlining; PostgreSQL could permit incorrect policies to be applied in certain cases where role-specific policies are used and a given query is planned under one role and then executed under other roles. This scenario can happe...

Postgresql Postgresql Redhat Enterprise Linux 8.0 Redhat Software Collections -Redhat Enterprise Linux 9.0 Fedoraproject Fedora 38

A flaw was found in postgresql in versions prior to 13.3, prior to 12.7, prior to 11.12, prior to 10.17 and prior to 9.6.22. While modifying certain SQL array values, missing bounds checks let authenticated database users write arbitrary bytes to a wide area of server memory. The...

Postgresql Postgresql Redhat Enterprise Linux 7.0 Redhat Jboss Enterprise Application Platform 7.0.0 Redhat Enterprise Linux 8.0 Redhat Software Collections -

A flaw was found in the c-ares package. The ares_set_sortlist is missing checks about the validity of the input string, which allows a possible arbitrary length stack overflow. This issue may cause a denial of service or a limited impact on confidentiality and integrity.

C-ares Project C-ares Redhat Enterprise Linux 8.0 Redhat Software Collections -Redhat Enterprise Linux 9.0 Fedoraproject Fedora 36

A flaw was found in http-proxy-agent, prior to version 2.1.0. It exists http-proxy-agent passes an auth option to the Buffer constructor without proper sanitization. This could result in a Denial of Service through the usage of all available CPU resources and data exposure throug...

Http-proxy-agent Project Http-proxy-agent Fedoraproject Fedora 27 Redhat Software Collections -Redhat Enterprise Linux 7.0

A flaw was found in the way HAProxy processed HTTP responses containing the "Set-Cookie2" header. This flaw could allow an malicious user to send crafted HTTP response packets which lead to an infinite loop, eventually resulting in a denial of service condition. The hig...

Haproxy Haproxy Redhat Enterprise Linux 7.0 Redhat Enterprise Linux 8.0 Redhat Software Collections -Redhat Openshift Container Platform 4.0 Debian Debian Linux 11.0

1 2 3 4 5 6 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook