Download
| Alert*
|
oval:org.secpod.oval:def:33653
PostgreSQL (64-bit) is installed oval:org.secpod.oval:def:33769 The host is installed with PostgreSQL 7.4 before 7.4.29, 8.0 before 8.0.25, 8.1 before 8.1.21, 8.2 before 8.2.17, 8.3 before 8.3.11 or 8.4 before 8.4.4 and is prone to a privilege escalation vulnerability. A flaw is present in the application, which fails to properly handle a crafted script, related ... oval:org.secpod.oval:def:33768 The host is installed with PostgreSQL 7.4 before 7.4.29, 8.0 before 8.0.25, 8.1 before 8.1.21, 8.2 before 8.2.17, 8.3 before 8.3.11 or 8.4 before 8.4.4 and is prone to a privilege escalation vulnerability. A flaw is present in the application, which fails to properly handle pltcl_modules table. Succ ... oval:org.secpod.oval:def:33766 The host is installed with PostgreSQL 7.4 before 7.4.29, 8.0 before 8.0.25, 8.1 before 8.1.21, 8.2 before 8.2.17, 8.3 before 8.3.11 or 8.4 before 8.4.4 and is prone to a privilege escalation vulnerability. A flaw is present in the application, which fails to properly handle (1) ALTER USER or (2) ALT ... oval:org.secpod.oval:def:33761 The host is installed with PostgreSQL 7.4.x before 7.4.27, 8.0.x before 8.0.23, 8.1.x before 8.1.19, 8.2.x before 8.2.15, 8.3.x before 8.3.9 or 8.4.x before 8.4.2 and is prone to a spoofing vulnerability. A flaw is present in the application, which fails to properly handle a '\0' character in a doma ... oval:org.secpod.oval:def:33760 The host is installed with PostgreSQL 7.4.x before 7.4.27, 8.0.x before 8.0.23, 8.1.x before 8.1.19, 8.2.x before 8.2.15, 8.3.x before 8.3.9 or 8.4.x before 8.4.2 and is prone to a privilege escalation vulnerability. A flaw is present in the application, which fails to properly handle a table with c ... oval:org.secpod.oval:def:33747 The host is installed with PostgreSQL before 9.0.20, 9.1.x before 9.1.16, 9.2.x before 9.2.11, 9.3.x before 9.3.7 or 9.4.x before 9.4.2 and is prone to a double free vulnerability. A flaw is present in the application, which fails to properly handle session shutdown sequence. Successful exploitation ... oval:org.secpod.oval:def:33767 The host is installed with PostgreSQL 7.4 before 7.4.29, 8.0 before 8.0.25, 8.1 before 8.1.21, 8.2 before 8.2.17, 8.3 before 8.3.11 or 8.4 before 8.4.4 and is prone to an intended restriction bypass vulnerability. A flaw is present in the application, which fails to properly handle vectors involving ... oval:org.secpod.oval:def:33754 The host is installed with PostgreSQL 9.0.x before 9.0.16, 9.1.x before 9.1.12, 9.2.x before 9.2.7 or 9.3.x before 9.3.3 and is prone to multiple integer overflow vulnerabilities. The flaws are present in the application, which fails to handle vectors related to the (1) hstore_recv, (2) hstore_from_ ... oval:org.secpod.oval:def:33753 The host is installed with PostgreSQL 9.3.3 or earlier versions and is prone to a privilege escalation vulnerability. A flaw is present in the application, which fails to properly invoke initdb to specify the authentication requirements for a database cluster to be used for the tests. Successful exp ... oval:org.secpod.oval:def:33741 The host is installed with PostgreSQL before 9.1.20, 9.2.x before 9.2.15, 9.3.x before 9.3.11, 9.4.x before 9.4.6, or 9.5.x before 9.5.1 and is prone to a denial of service vulnerability. A flaw is present in the application, which fails to handle a large Unicode character range in a regular express ... oval:org.secpod.oval:def:38564 The host is installed with PostgreSQL before 9.1.23, 9.2.x before 9.2.18, 9.3.x before 9.3.14, 9.4.x before 9.4.9, or 9.5.x before 9.5.4 and is prone to a privilege escalation vulnerability. A flaw is present in the application, which fails to handle a (1) " (double quote), (2) \ (backslash), (3) ca ... oval:org.secpod.oval:def:38565 The host is installed with PostgreSQL before 9.1.23, 9.2.x before 9.2.18, 9.3.x before 9.3.14, 9.4.x before 9.4.9, or 9.5.x before 9.5.4 and is prone to a denial of service vulnerability. A flaw is present in the application, which fails to handle a CASE expression or inlining of an SQL function. Su ... oval:org.secpod.oval:def:33740 The host is installed with PostgreSQL before 9.1.20, 9.2.x before 9.2.15, 9.3.x before 9.3.11, 9.4.x before 9.4.6, or 9.5.x before 9.5.1 and is prone to a privilege escalation vulnerability. A flaw is present in the application, which fails to properly restrict access to unspecified custom configura ... oval:org.secpod.oval:def:33755 The host is installed with PostgreSQL before 8.4.20, 9.0.x before 9.0.16, 9.1.x before 9.1.12, 9.2.x before 9.2.7 or 9.3.x before 9.3.3 and is prone to NULL pointer dereference vulnerability. A flaw is present in the application, which fails to properly check the return value of the crypt library fu ... oval:org.secpod.oval:def:33765 The host is installed with PostgreSQL 9.0.x before 9.0.3, 8.4.x before 8.4.7, 8.3.x before 8.3.14 or 8.2.x before 8.2.20 and is prone to a buffer overflow vulnerability. A flaw is present in the application, which fails to properly handle integers with a large number of digits to unspecified functio ... oval:org.secpod.oval:def:34004 The host is installed with PostgreSQL 9.5.x before 9.5.2 and is prone to an information disclosure vulnerability. A flaw is present in the application, which fails to handle a crafted byte value in a BRIN index page. Successful exploitation allow attackers to bypass intended access restrictions and ... oval:org.secpod.oval:def:34003 The host is installed with PostgreSQL 9.5.x before 9.5.2 and is prone to an intended access restriction bypass vulnerability. A flaw is present in the application, which fails to properly maintain row-security status in cached plans. Successful exploitation allow attackers to bypass intended access ... oval:org.secpod.oval:def:33750 The host is installed with PostgreSQL before 8.4.20, 9.0.x before 9.0.16, 9.1.x before 9.1.12, 9.2.x before 9.2.7 or 9.3.x before 9.3.3 and is prone to a privilege escalation vulnerability. A flaw is present in the application, which fails to handle crafted data. Successful exploitation allow remote ... oval:org.secpod.oval:def:33752 The host is installed with PostgreSQL before 8.4.20, 9.0.x before 9.0.16, 9.1.x before 9.1.12, 9.2.x before 9.2.7 or 9.3.x before 9.3.3 and is prone to multiple integer overflow vulnerabilities. The flaws are present in the application, which fails to handle crafted data. Successful exploitation all ... oval:org.secpod.oval:def:33751 The host is installed with PostgreSQL before 8.4.20, 9.0.x before 9.0.16, 9.1.x before 9.1.12, 9.2.x before 9.2.7 or 9.3.x before 9.3.3 and is prone to multiple stack based buffer overflow vulnerabilities. The flaws are present in the application, which fails to handle vectors related to an incorrec ... oval:org.secpod.oval:def:33749 The host is installed with PostgreSQL before 8.4.20, 9.0.x before 9.0.16, 9.1.x before 9.1.12, 9.2.x before 9.2.7 or 9.3.x before 9.3.3 and is prone to a privilege escalation vulnerability. A flaw is present in the application, which fails to handle a function that is (1) defined in another language ... oval:org.secpod.oval:def:33748 The host is installed with PostgreSQL before 8.4.20, 9.0.x before 9.0.16, 9.1.x before 9.1.12, 9.2.x before 9.2.7 or 9.3.x before 9.3.3 and is prone to an unspecified vulnerability. A flaw is present in the application, which does not properly enforce the ADMIN OPTION restriction. Successful exploit ... oval:org.secpod.oval:def:33756 The host is installed with PostgreSQL before 8.4.20, 9.0.x before 9.0.16, 9.1.x before 9.1.12, 9.2.x before 9.2.7 or 9.3.x before 9.3.3 and is prone to multiple buffer overflow vulnerabilities. The flaws are present in the application, which fails to handle unspecified vectors. Successful exploitati ... oval:org.secpod.oval:def:33772 The host is installed with PostgreSQL 8.3 before 8.3.19, 8.4 before 8.4.12, 9.0 before 9.0.8 or 9.1 before 9.1.4 and is prone to a denial of service vulnerability. A flaw is present in the application, which fails to properly handle (1) SECURITY DEFINER or (2) SET attributes to a procedural language ... oval:org.secpod.oval:def:33771 The host is installed with PostgreSQL 8.3 before 8.3.18, 8.4 before 8.4.11, 9.0 before 9.0.7 or 9.1 before 9.1.3 and is prone to a spoofing vulnerability. A flaw is present in the application, which fails to properly handle truncation of the common name. Successful exploitation allows remote attacke ... oval:org.secpod.oval:def:33774 The host is installed with PostgreSQL 8.3 before 8.3.20, 8.4 before 8.4.13, 9.0 before 9.0.9 or 9.1 before 9.1.5 and is prone to an information disclosure vulnerability. A flaw is present in the application, which fails to properly handle an XML value that refers to (1) a DTD or (2) an entity, relat ... oval:org.secpod.oval:def:33773 The host is installed with PostgreSQL 8.3 before 8.3.20, 8.4 before 8.4.13, 9.0 before 9.0.9 or 9.1 before 9.1.5 and is prone to an information disclosure vulnerability. A flaw is present in the application, which fails to properly handle (1) stylesheet commands that are permitted by the libxslt sec ... oval:org.secpod.oval:def:33770 The host is installed with PostgreSQL 8.3 before 8.3.18, 8.4 before 8.4.11, 9.0 before 9.0.7 or 9.1 before 9.1.3 and is prone to a privilege escalation vulnerability. A flaw is present in the application, which fails to properly check the execute permission for trigger functions marked SECURITY DEFI ... oval:org.secpod.oval:def:33758 The host is installed with PostgreSQL 8.3 before 8.3.18, 8.4 before 8.4.11, 9.0 before 9.0.7 or 9.1 before 9.1.3 and is prone to a CRLF injection vulnerability. A flaw is present in the application, which fails to properly handle a crafted file containing object names with newlines, which are insert ... oval:org.secpod.oval:def:33764 The host is installed with PostgreSQL 8.4 before 8.4.1, 8.3 before 8.3.8 or 8.2 before 8.2.14 and is prone to a denial of service vulnerability. A flaw is present in the application, which fails to properly handle "re-LOAD-ing" libraries from a certain plugins directory. Successful exploitation allo ... oval:org.secpod.oval:def:33763 The host is installed with PostgreSQL 8.4 before 8.4.1, 8.3 before 8.3.8, 8.2 before 8.2.14, 8.1 before 8.1.18, 8.0 before 8.0.22 or 7.4 before 7.4.26 and is prone to a privilege escalation vulnerability. A flaw is present in the application, which fails to properly use the appropriate privileges fo ... oval:org.secpod.oval:def:33762 The host is installed with PostgreSQL 8.3 before 8.3.8 or 8.2 before 8.2.14 and is prone to a security bypass vulnerability. A flaw is present in the application, which fails to properly handle an empty password. Successful exploitation allows remote attackers to bypass authentication. |
