https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T21:07:54.936980+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certa-2009-avi-380 certa-2009-avi-380 — Plusieurs vulnérabilités dans PostgreSQL permettent à une personne malintentionnée de provoquer un déni de service à di… 2026-10-03T21:07:55.037432+00:00 certa-2009-avi-380 https://cve.radiocsirt.org/vuln/euvd-2026-123946 EUVD-2026-123946 2026-10-03T21:07:55.037477+00:00 EUVD-2026-123946 https://cve.radiocsirt.org/vuln/fkie_cve-2009-3230 fkie_cve-2009-3230 2026-10-03T21:07:55.037492+00:00

The core server component in PostgreSQL 8.4 before 8.4.1, 8.3 before 8.3.8, 8.2 before 8.2.14, 8.1 before 8.1.18, 8.0 before 8.0.22, and 7.4 before 7.4.26 does not use the appropriate privileges for the (1) RESET ROLE and (2) RESET SESSION AUTHORIZATION operations, which allows remote authenticated users to gain privileges. NOTE: this is due to an incomplete fix for CVE-2007-6600.

 https://cve.radiocsirt.org/vuln/ghsa-cjf3-jm6v-3h96 GHSA-cjf3-jm6v-3h96 2026-10-03T21:07:55.037521+00:00

The core server component in PostgreSQL 8.4 before 8.4.1, 8.3 before 8.3.8, 8.2 before 8.2.14, 8.1 before 8.1.18, 8.0 before 8.0.22, and 7.4 before 7.4.26 does not use the appropriate privileges for the (1) RESET ROLE and (2) RESET SESSION AUTHORIZATION operations, which allows remote authenticated users to gain privileges. NOTE: this is due to an incomplete fix for CVE-2007-6600.

 https://cve.radiocsirt.org/vuln/gsd-2009-3230 gsd-2009-3230 2026-10-03T21:07:55.037537+00:00 gsd-2009-3230 https://cve.radiocsirt.org/vuln/rhsa-2009:1461 RHSA-2009:1461 — Red Hat Security Advisory: Red Hat Application Stack v2.4 security and enhancement update 2026-10-03T21:07:55.037548+00:00

mysql: mysql command line client XSS flaw MySQL: Format string vulnerability by manipulation with database instances (crash) php: exif_read_data crash on corrupted JPEG files httpd: NULL pointer defer in mod_proxy_ftp caused by crafted EPSV and PASV reply httpd: mod_proxy_ftp FTP command injection via Authorization HTTP header postgresql: SQL privilege escalation, incomplete fix for CVE-2007-6600