https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T09:28:03.507504+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certa-2012-avi-455 certa-2012-avi-455 — Deux vulnérabilités ont été corrigées dans <span class="textit">PostgreSQL</span>. Leur exploitation réussie permet not… 2026-10-03T09:28:03.521405+00:00 certa-2012-avi-455 https://cve.radiocsirt.org/vuln/euvd-2026-111832 EUVD-2026-111832 2026-10-03T09:28:03.521446+00:00 EUVD-2026-111832 https://cve.radiocsirt.org/vuln/fkie_cve-2012-3488 fkie_cve-2012-3488 2026-10-03T09:28:03.521461+00:00

The libxslt support in contrib/xml2 in PostgreSQL 8.3 before 8.3.20, 8.4 before 8.4.13, 9.0 before 9.0.9, and 9.1 before 9.1.5 does not properly restrict access to files and URLs, which allows remote authenticated users to modify data, obtain sensitive information, or trigger outbound traffic to arbitrary external hosts by leveraging (1) stylesheet commands that are permitted by the libxslt security options or (2) an xslt_process feature, related to an XML External Entity (aka XXE) issue.

 https://cve.radiocsirt.org/vuln/ghsa-8wqv-9478-cg4h GHSA-8wqv-9478-cg4h 2026-10-03T09:28:03.521493+00:00

The libxslt support in contrib/xml2 in PostgreSQL 8.3 before 8.3.20, 8.4 before 8.4.13, 9.0 before 9.0.9, and 9.1 before 9.1.5 does not properly restrict access to files and URLs, which allows remote authenticated users to modify data, obtain sensitive information, or trigger outbound traffic to arbitrary external hosts by leveraging (1) stylesheet commands that are permitted by the libxslt security options or (2) an xslt_process feature, related to an XML External Entity (aka XXE) issue.

 https://cve.radiocsirt.org/vuln/gsd-2012-3488 gsd-2012-3488 2026-10-03T09:28:03.521511+00:00 gsd-2012-3488 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10030-1 openSUSE-SU-2024:10030-1 — postgresql94-9.4.10-1.1 on GA media 2026-10-03T09:28:03.521522+00:00

postgresql94-9.4.10-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2012:1263 RHSA-2012:1263 — Red Hat Security Advisory: postgresql and postgresql84 security update 2026-10-03T09:28:03.521554+00:00

module): XXE by applying XSL stylesheet to the document postgresql: File disclosure through XXE in xmlparse by DTD validation