https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 17 Oct 2026 13:01:31 +0000 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0186 certfr-2023-avi-0186 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0186 https://cve.radiocsirt.org/vuln/euvd-2026-221149 EUVD-2026-221149 https://cve.radiocsirt.org/vuln/euvd-2026-221149 https://cve.radiocsirt.org/vuln/fkie_cve-2023-23554 <p>Uncontrolled search path element vulnerability exists in pg_ivm versions prior to 1.5.1. When refreshing an IMMV, pg_ivm executes functions without specifying schema names. Under certain conditions, pg_ivm may be tricked to execute unexpected functions from other schemas with the IMMV owner&#39;s privilege. If this vulnerability is exploited, an unexpected function provided by an attacker may be executed with the privilege of the materialized view owner.</p> <p>Uncontrolled search path element vulnerability exists in pg_ivm versions prior to 1.5.1. When refreshing an IMMV, pg_ivm executes functions without specifying schema names. Under certain conditions, pg_ivm may be tricked to execute unexpected functions from other schemas with the IMMV owner&#39;s privilege. If this vulnerability is exploited, an unexpected function provided by an attacker may be executed with the privilege of the materialized view owner.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-23554 https://cve.radiocsirt.org/vuln/ghsa-jwqx-q9h3-4q35 <p>Uncontrolled search path element vulnerability exists in pg_ivm versions prior to 1.5.1. When refreshing an IMMV, pg_ivm executes functions without specifying schema names. Under certain conditions, pg_ivm may be tricked to execute unexpected functions from other schemas with the IMMV owner&#39;s privilege. If this vulnerability is exploited, an unexpected function provided by an attacker may be executed with the privilege of the materialized view owner.</p> <p>Uncontrolled search path element vulnerability exists in pg_ivm versions prior to 1.5.1. When refreshing an IMMV, pg_ivm executes functions without specifying schema names. Under certain conditions, pg_ivm may be tricked to execute unexpected functions from other schemas with the IMMV owner&#39;s privilege. If this vulnerability is exploited, an unexpected function provided by an attacker may be executed with the privilege of the materialized view owner.</p> https://cve.radiocsirt.org/vuln/ghsa-jwqx-q9h3-4q35 https://cve.radiocsirt.org/vuln/gsd-2023-23554 gsd-2023-23554 https://cve.radiocsirt.org/vuln/gsd-2023-23554 https://cve.radiocsirt.org/vuln/jvndb-2023-000023 <p>pg_ivm provided by IVM Development Group is a PostgreSQL extension module that provides incremental view maintenance functionality of materialized views. pg_ivm contains multiple vulnerabilities listed below. &lt;ul&gt;&lt;li&gt;Exposure of sensitive information to an unauthorized actor (CWE-200) - CVE-2023-22847 An Incrementally Maintainable Materialized View (IMMV) created by pg_ivm may reflect rows with Row-Level Security that the owner of the IMMV should not have access to.&lt;/ul&gt; &lt;ul&gt;&lt;li&gt;Uncontrolled search path element (CWE-427) - CVE-2023-23554 When refreshing an IMMV, pg_ivm executes functions without specifying schema names. Under certain conditions, pg_ivm may be tricked to execute unexpected functions from other schemas with the IMMV owner&#39;s privilege.&lt;/ul&gt; IVM Development Group reported these vulnerabilities to IPA to notify users of its solution through JVN. JPCERT/CC and IVM Development Group coordinated under the Information Security Early Warning Partnership.</p> <p>pg_ivm provided by IVM Development Group is a PostgreSQL extension module that provides incremental view maintenance functionality of materialized views. pg_ivm contains multiple vulnerabilities listed below. &lt;ul&gt;&lt;li&gt;Exposure of sensitive information to an unauthorized actor (CWE-200) - CVE-2023-22847 An Incrementally Maintainable Materialized View (IMMV) created by pg_ivm may reflect rows with Row-Level Security that the owner of the IMMV should not have access to.&lt;/ul&gt; &lt;ul&gt;&lt;li&gt;Uncontrolled search path element (CWE-427) - CVE-2023-23554 When refreshing an IMMV, pg_ivm executes functions without specifying schema names. Under certain conditions, pg_ivm may be tricked to execute unexpected functions from other schemas with the IMMV owner&#39;s privilege.&lt;/ul&gt; IVM Development Group reported these vulnerabilities to IPA to notify users of its solution through JVN. JPCERT/CC and IVM Development Group coordinated under the Information Security Early Warning Partnership.</p> https://cve.radiocsirt.org/vuln/jvndb-2023-000023