Search CVE reports
131 – 140 of 47349 results
Missing validation of type of input in PostgreSQL intarray extension selectivity estimator function allows an object creator to execute arbitrary code as the operating system user running the database. Versions before PostgreSQL...
8 affected packages
postgresql-18, postgresql-17, postgresql-16, postgresql-14, postgresql-12...
| Package | 16.04 LTS |
|---|---|
| postgresql-18 | — |
| postgresql-17 | — |
| postgresql-16 | — |
| postgresql-14 | — |
| postgresql-12 | — |
| postgresql-10 | — |
| postgresql-9.5 | Needs evaluation |
| postgresql-9.3 | — |
Improper validation of type "oidvector" in PostgreSQL allows a database user to disclose a few bytes of server memory. We have not ruled out viability of attacks that arrange for presence of confidential information in disclosed...
8 affected packages
postgresql-18, postgresql-17, postgresql-16, postgresql-14, postgresql-12...
| Package | 16.04 LTS |
|---|---|
| postgresql-18 | — |
| postgresql-17 | — |
| postgresql-16 | — |
| postgresql-14 | — |
| postgresql-12 | — |
| postgresql-10 | — |
| postgresql-9.5 | Needs evaluation |
| postgresql-9.3 | — |
[Denial of Service due to malformed SFTP message]
1 affected package
libssh
| Package | 16.04 LTS |
|---|---|
| libssh | Needs evaluation |
[Denial of Service via inefficient regular expression processing]
1 affected package
libssh
| Package | 16.04 LTS |
|---|---|
| libssh | Needs evaluation |
[Buffer underflow in ssh_get_hexa() on invalid input]
1 affected package
libssh
| Package | 16.04 LTS |
|---|---|
| libssh | Needs evaluation |
[Denial of Service via improper configuration file handling]
1 affected package
libssh
| Package | 16.04 LTS |
|---|---|
| libssh | Needs evaluation |
[Improper sanitation of paths received from SCP servers]
1 affected package
libssh
| Package | 16.04 LTS |
|---|---|
| libssh | Needs evaluation |
Cross Site Request Forgery vulnerability in Dolibarr ERP & CRM v.22.0.9 allows a remote attacker to escalate privileges via the notes field in perms.php
1 affected package
dolibarr
| Package | 16.04 LTS |
|---|---|
| dolibarr | Needs evaluation |
Stack traces in Grafana's Explore Traces view can be rendered as raw HTML, and thus inject malicious JavaScript in the browser. This would require malicious JavaScript to be entered into the stack trace field. Only datasources...
1 affected package
grafana
| Package | 16.04 LTS |
|---|---|
| grafana | Needs evaluation |
[Insecure default configuration leads to local man-in-the-middle attacks on Windows]
1 affected package
libssh
| Package | 16.04 LTS |
|---|---|
| libssh | Not affected |