https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 12:06:49 +0000 https://cve.radiocsirt.org/vuln/certa-2012-avi-455 certa-2012-avi-455 https://cve.radiocsirt.org/vuln/certa-2012-avi-455 https://cve.radiocsirt.org/vuln/euvd-2026-111832 EUVD-2026-111832 https://cve.radiocsirt.org/vuln/euvd-2026-111832 https://cve.radiocsirt.org/vuln/fkie_cve-2012-3488 <p>The libxslt support in contrib/xml2 in PostgreSQL 8.3 before 8.3.20, 8.4 before 8.4.13, 9.0 before 9.0.9, and 9.1 before 9.1.5 does not properly restrict access to files and URLs, which allows remote authenticated users to modify data, obtain sensitive information, or trigger outbound traffic to arbitrary external hosts by leveraging (1) stylesheet commands that are permitted by the libxslt security options or (2) an xslt_process feature, related to an XML External Entity (aka XXE) issue.</p> <p>The libxslt support in contrib/xml2 in PostgreSQL 8.3 before 8.3.20, 8.4 before 8.4.13, 9.0 before 9.0.9, and 9.1 before 9.1.5 does not properly restrict access to files and URLs, which allows remote authenticated users to modify data, obtain sensitive information, or trigger outbound traffic to arbitrary external hosts by leveraging (1) stylesheet commands that are permitted by the libxslt security options or (2) an xslt_process feature, related to an XML External Entity (aka XXE) issue.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2012-3488 https://cve.radiocsirt.org/vuln/ghsa-8wqv-9478-cg4h <p>The libxslt support in contrib/xml2 in PostgreSQL 8.3 before 8.3.20, 8.4 before 8.4.13, 9.0 before 9.0.9, and 9.1 before 9.1.5 does not properly restrict access to files and URLs, which allows remote authenticated users to modify data, obtain sensitive information, or trigger outbound traffic to arbitrary external hosts by leveraging (1) stylesheet commands that are permitted by the libxslt security options or (2) an xslt_process feature, related to an XML External Entity (aka XXE) issue.</p> <p>The libxslt support in contrib/xml2 in PostgreSQL 8.3 before 8.3.20, 8.4 before 8.4.13, 9.0 before 9.0.9, and 9.1 before 9.1.5 does not properly restrict access to files and URLs, which allows remote authenticated users to modify data, obtain sensitive information, or trigger outbound traffic to arbitrary external hosts by leveraging (1) stylesheet commands that are permitted by the libxslt security options or (2) an xslt_process feature, related to an XML External Entity (aka XXE) issue.</p> https://cve.radiocsirt.org/vuln/ghsa-8wqv-9478-cg4h https://cve.radiocsirt.org/vuln/gsd-2012-3488 gsd-2012-3488 https://cve.radiocsirt.org/vuln/gsd-2012-3488 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10030-1 <p>postgresql94-9.4.10-1.1 on GA media</p> <p>postgresql94-9.4.10-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:10030-1 https://cve.radiocsirt.org/vuln/rhsa-2012:1263 <p>module): XXE by applying XSL stylesheet to the document postgresql: File disclosure through XXE in xmlparse by DTD validation</p> <p>module): XXE by applying XSL stylesheet to the document postgresql: File disclosure through XXE in xmlparse by DTD validation</p> https://cve.radiocsirt.org/vuln/rhsa-2012:1263