https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 21:07:56 +0000 https://cve.radiocsirt.org/vuln/certa-2009-avi-380 certa-2009-avi-380 https://cve.radiocsirt.org/vuln/certa-2009-avi-380 https://cve.radiocsirt.org/vuln/euvd-2026-123946 EUVD-2026-123946 https://cve.radiocsirt.org/vuln/euvd-2026-123946 https://cve.radiocsirt.org/vuln/fkie_cve-2009-3230 <p>The core server component in PostgreSQL 8.4 before 8.4.1, 8.3 before 8.3.8, 8.2 before 8.2.14, 8.1 before 8.1.18, 8.0 before 8.0.22, and 7.4 before 7.4.26 does not use the appropriate privileges for the (1) RESET ROLE and (2) RESET SESSION AUTHORIZATION operations, which allows remote authenticated users to gain privileges. NOTE: this is due to an incomplete fix for CVE-2007-6600.</p> <p>The core server component in PostgreSQL 8.4 before 8.4.1, 8.3 before 8.3.8, 8.2 before 8.2.14, 8.1 before 8.1.18, 8.0 before 8.0.22, and 7.4 before 7.4.26 does not use the appropriate privileges for the (1) RESET ROLE and (2) RESET SESSION AUTHORIZATION operations, which allows remote authenticated users to gain privileges. NOTE: this is due to an incomplete fix for CVE-2007-6600.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2009-3230 https://cve.radiocsirt.org/vuln/ghsa-cjf3-jm6v-3h96 <p>The core server component in PostgreSQL 8.4 before 8.4.1, 8.3 before 8.3.8, 8.2 before 8.2.14, 8.1 before 8.1.18, 8.0 before 8.0.22, and 7.4 before 7.4.26 does not use the appropriate privileges for the (1) RESET ROLE and (2) RESET SESSION AUTHORIZATION operations, which allows remote authenticated users to gain privileges. NOTE: this is due to an incomplete fix for CVE-2007-6600.</p> <p>The core server component in PostgreSQL 8.4 before 8.4.1, 8.3 before 8.3.8, 8.2 before 8.2.14, 8.1 before 8.1.18, 8.0 before 8.0.22, and 7.4 before 7.4.26 does not use the appropriate privileges for the (1) RESET ROLE and (2) RESET SESSION AUTHORIZATION operations, which allows remote authenticated users to gain privileges. NOTE: this is due to an incomplete fix for CVE-2007-6600.</p> https://cve.radiocsirt.org/vuln/ghsa-cjf3-jm6v-3h96 https://cve.radiocsirt.org/vuln/gsd-2009-3230 gsd-2009-3230 https://cve.radiocsirt.org/vuln/gsd-2009-3230 https://cve.radiocsirt.org/vuln/rhsa-2009:1461 <p>mysql: mysql command line client XSS flaw MySQL: Format string vulnerability by manipulation with database instances (crash) php: exif_read_data crash on corrupted JPEG files httpd: NULL pointer defer in mod_proxy_ftp caused by crafted EPSV and PASV reply httpd: mod_proxy_ftp FTP command injection via Authorization HTTP header postgresql: SQL privilege escalation, incomplete fix for CVE-2007-6600</p> <p>mysql: mysql command line client XSS flaw MySQL: Format string vulnerability by manipulation with database instances (crash) php: exif_read_data crash on corrupted JPEG files httpd: NULL pointer defer in mod_proxy_ftp caused by crafted EPSV and PASV reply httpd: mod_proxy_ftp FTP command injection via Authorization HTTP header postgresql: SQL privilege escalation, incomplete fix for CVE-2007-6600</p> https://cve.radiocsirt.org/vuln/rhsa-2009:1461