https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 12:49:03 +0000 https://cve.radiocsirt.org/vuln/bdu:2024-01869 bdu:2024-01869 https://cve.radiocsirt.org/vuln/bdu:2024-01869 https://cve.radiocsirt.org/vuln/euvd-2026-217139 EUVD-2026-217139 https://cve.radiocsirt.org/vuln/euvd-2026-217139 https://cve.radiocsirt.org/vuln/fkie_cve-2024-2044 <p>pgAdmin &lt;= 8.3 is affected by a path-traversal vulnerability while deserializing users’ sessions in the session handling code. If the server is running on Windows, an unauthenticated attacker can load and deserialize remote pickle objects and gain code execution. If the server is running on POSIX/Linux, an authenticated attacker can upload pickle objects, deserialize them, and gain code execution.</p> <p>pgAdmin &lt;= 8.3 is affected by a path-traversal vulnerability while deserializing users’ sessions in the session handling code. If the server is running on Windows, an unauthenticated attacker can load and deserialize remote pickle objects and gain code execution. If the server is running on POSIX/Linux, an authenticated attacker can upload pickle objects, deserialize them, and gain code execution.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-2044 https://cve.radiocsirt.org/vuln/ghsa-rj98-crf4-g69w <p><strong>Affected:</strong> PyPI: pgAdmin4</p> <p>pgAdmin prior to version 8.4 is affected by a path-traversal vulnerability while deserializing users’ sessions in the session handling code. If the server is running on Windows, an unauthenticated attacker can load and deserialize remote pickle objects and gain code execution. If the server is running on POSIX/Linux, an authenticated attacker can upload pickle objects, deserialize them and gain code execution.</p> <p><strong>Affected:</strong> PyPI: pgAdmin4</p> <p>pgAdmin prior to version 8.4 is affected by a path-traversal vulnerability while deserializing users’ sessions in the session handling code. If the server is running on Windows, an unauthenticated attacker can load and deserialize remote pickle objects and gain code execution. If the server is running on POSIX/Linux, an authenticated attacker can upload pickle objects, deserialize them and gain code execution.</p> https://cve.radiocsirt.org/vuln/ghsa-rj98-crf4-g69w https://cve.radiocsirt.org/vuln/gsd-2024-2044 gsd-2024-2044 https://cve.radiocsirt.org/vuln/gsd-2024-2044 https://cve.radiocsirt.org/vuln/opensuse-su-2024:13843-1 <p>pgadmin4-8.5-1.1 on GA media</p> <p>pgadmin4-8.5-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:13843-1 https://cve.radiocsirt.org/vuln/pysec-2026-453 <p><strong>Affected:</strong> PyPI: pgadmin4</p> <p>pgAdmin prior to version 8.4 is affected by a path-traversal vulnerability while deserializing users’ sessions in the session handling code. If the server is running on Windows, an unauthenticated attacker can load and deserialize remote pickle objects and gain code execution. If the server is running on POSIX/Linux, an authenticated attacker can upload pickle objects, deserialize them and gain code execution.</p> <p><strong>Affected:</strong> PyPI: pgadmin4</p> <p>pgAdmin prior to version 8.4 is affected by a path-traversal vulnerability while deserializing users’ sessions in the session handling code. If the server is running on Windows, an unauthenticated attacker can load and deserialize remote pickle objects and gain code execution. If the server is running on POSIX/Linux, an authenticated attacker can upload pickle objects, deserialize them and gain code execution.</p> https://cve.radiocsirt.org/vuln/pysec-2026-453 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0576 <p>Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in pgAdmin ausnutzen, um beliebigen Programmcode auszuführen.</p> <p>Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in pgAdmin ausnutzen, um beliebigen Programmcode auszuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0576