https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 02:25:07 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-07701 bdu:2025-07701 https://cve.radiocsirt.org/vuln/bdu:2025-07701 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0049 certfr-2023-avi-0049 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0049 https://cve.radiocsirt.org/vuln/euvd-2026-258381 EUVD-2026-258381 https://cve.radiocsirt.org/vuln/euvd-2026-258381 https://cve.radiocsirt.org/vuln/fkie_cve-2023-22332 <p>Information disclosure vulnerability exists in Pgpool-II 4.4.0 to 4.4.1 (4.4 series), 4.3.0 to 4.3.4 (4.3 series), 4.2.0 to 4.2.11 (4.2 series), 4.1.0 to 4.1.14 (4.1 series), 4.0.0 to 4.0.21 (4.0 series), All versions of 3.7 series, All versions of 3.6 series, All versions of 3.5 series, All versions of 3.4 series, and All versions of 3.3 series. A specific database user&#39;s authentication information may be obtained by another database user. As a result, the information stored in the database may be altered and/or database may be suspended by a remote attacker who successfully logged in the product with the obtained credentials.</p> <p>Information disclosure vulnerability exists in Pgpool-II 4.4.0 to 4.4.1 (4.4 series), 4.3.0 to 4.3.4 (4.3 series), 4.2.0 to 4.2.11 (4.2 series), 4.1.0 to 4.1.14 (4.1 series), 4.0.0 to 4.0.21 (4.0 series), All versions of 3.7 series, All versions of 3.6 series, All versions of 3.5 series, All versions of 3.4 series, and All versions of 3.3 series. A specific database user&#39;s authentication information may be obtained by another database user. As a result, the information stored in the database may be altered and/or database may be suspended by a remote attacker who successfully logged in the product with the obtained credentials.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-22332 https://cve.radiocsirt.org/vuln/ghsa-w496-f5jm-w9c3 <p>Information disclosure vulnerability exists in Pgpool-II 4.4.0 to 4.4.1 (4.4 series), 4.3.0 to 4.3.4 (4.3 series), 4.2.0 to 4.2.11 (4.2 series), 4.1.0 to 4.1.14 (4.1 series), 4.0.0 to 4.0.21 (4.0 series), All versions of 3.7 series, All versions of 3.6 series, All versions of 3.5 series, All versions of 3.4 series, and All versions of 3.3 series. A specific database user&#39;s authentication information may be obtained by another database user. As a result, the information stored in the database may be altered and/or database may be suspended by a remote attacker who successfully logged in the product with the obtained credentials.</p> <p>Information disclosure vulnerability exists in Pgpool-II 4.4.0 to 4.4.1 (4.4 series), 4.3.0 to 4.3.4 (4.3 series), 4.2.0 to 4.2.11 (4.2 series), 4.1.0 to 4.1.14 (4.1 series), 4.0.0 to 4.0.21 (4.0 series), All versions of 3.7 series, All versions of 3.6 series, All versions of 3.5 series, All versions of 3.4 series, and All versions of 3.3 series. A specific database user&#39;s authentication information may be obtained by another database user. As a result, the information stored in the database may be altered and/or database may be suspended by a remote attacker who successfully logged in the product with the obtained credentials.</p> https://cve.radiocsirt.org/vuln/ghsa-w496-f5jm-w9c3 https://cve.radiocsirt.org/vuln/gsd-2023-22332 gsd-2023-22332 https://cve.radiocsirt.org/vuln/gsd-2023-22332 https://cve.radiocsirt.org/vuln/jvndb-2023-000008 <p>Pgpool-II is cluster management tool. Pgpool-II contains an information disclosure vulnerability (CWE-200) in its watchdog function. Note that, only systems that meet all of the following setting requirements are affected by this vulnerability. &lt;ul&gt; &lt;li&gt;Watchdog function is enabled (use_watchdog = on) &lt;li&gt;&#34;query mode&#34; is used for the alive monitoring of watchdog (wd_lifecheck_method = &#39;query&#39;) &lt;li&gt;Plain text password is set for wd_lifecheck_password &lt;/ul&gt; PgPool Global Development Group reported this vulnerability to IPA to notify users of its solution through JVN. JPCERT/CC and PgPool Global Development Group coordinated under the Information Security Early Warning Partnership.</p> <p>Pgpool-II is cluster management tool. Pgpool-II contains an information disclosure vulnerability (CWE-200) in its watchdog function. Note that, only systems that meet all of the following setting requirements are affected by this vulnerability. &lt;ul&gt; &lt;li&gt;Watchdog function is enabled (use_watchdog = on) &lt;li&gt;&#34;query mode&#34; is used for the alive monitoring of watchdog (wd_lifecheck_method = &#39;query&#39;) &lt;li&gt;Plain text password is set for wd_lifecheck_password &lt;/ul&gt; PgPool Global Development Group reported this vulnerability to IPA to notify users of its solution through JVN. JPCERT/CC and PgPool Global Development Group coordinated under the Information Security Early Warning Partnership.</p> https://cve.radiocsirt.org/vuln/jvndb-2023-000008 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-22332 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: pgpool2, Ubuntu:20.04:LTS: pgpool2, Ubuntu:22.04:LTS: pgpool2, Ubuntu:25.10: pgpool2</p> <p>Information disclosure vulnerability exists in Pgpool-II 4.4.0 to 4.4.1 (4.4 series), 4.3.0 to 4.3.4 (4.3 series), 4.2.0 to 4.2.11 (4.2 series), 4.1.0 to 4.1.14 (4.1 series), 4.0.0 to 4.0.21 (4.0 series), All versions of 3.7 series, All versions of 3.6 series, All versions of 3.5 series, All versions of 3.4 series, and All versions of 3.3 series. A specific database user&#39;s authentication information may be obtained by another database user. As a result, the information stored in the database may be altered and/or database may be suspended by a remote attacker who successfully logged in the product with the obtained credentials.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: pgpool2, Ubuntu:20.04:LTS: pgpool2, Ubuntu:22.04:LTS: pgpool2, Ubuntu:25.10: pgpool2</p> <p>Information disclosure vulnerability exists in Pgpool-II 4.4.0 to 4.4.1 (4.4 series), 4.3.0 to 4.3.4 (4.3 series), 4.2.0 to 4.2.11 (4.2 series), 4.1.0 to 4.1.14 (4.1 series), 4.0.0 to 4.0.21 (4.0 series), All versions of 3.7 series, All versions of 3.6 series, All versions of 3.5 series, All versions of 3.4 series, and All versions of 3.3 series. A specific database user&#39;s authentication information may be obtained by another database user. As a result, the information stored in the database may be altered and/or database may be suspended by a remote attacker who successfully logged in the product with the obtained credentials.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-22332