Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 22:33:16 +0000 certa-2012-avi-455 — Deux vulnérabilités ont été corrigées dans <span class="textit">PostgreSQL</span>. Leur exploitation réussie permet not… https://cve.radiocsirt.org/vuln/certa-2012-avi-455 certa-2012-avi-455 https://cve.radiocsirt.org/vuln/certa-2012-avi-455 EUVD-2026-111829 https://cve.radiocsirt.org/vuln/euvd-2026-111829 EUVD-2026-111829 https://cve.radiocsirt.org/vuln/euvd-2026-111829 fkie_cve-2012-3489 https://cve.radiocsirt.org/vuln/fkie_cve-2012-3489 <p>The xml_parse function in the libxml2 support in the core server component in PostgreSQL 8.3 before 8.3.20, 8.4 before 8.4.13, 9.0 before 9.0.9, and 9.1 before 9.1.5 allows remote authenticated users to determine the existence of arbitrary files or URLs, and possibly obtain file or URL content that triggers a parsing error, via an XML value that refers to (1) a DTD or (2) an entity, related to an XML External Entity (aka XXE) issue.</p> <p>The xml_parse function in the libxml2 support in the core server component in PostgreSQL 8.3 before 8.3.20, 8.4 before 8.4.13, 9.0 before 9.0.9, and 9.1 before 9.1.5 allows remote authenticated users to determine the existence of arbitrary files or URLs, and possibly obtain file or URL content that triggers a parsing error, via an XML value that refers to (1) a DTD or (2) an entity, related to an XML External Entity (aka XXE) issue.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2012-3489 GHSA-fpq4-mcf9-c5w9 https://cve.radiocsirt.org/vuln/ghsa-fpq4-mcf9-c5w9 <p>The xml_parse function in the libxml2 support in the core server component in PostgreSQL 8.3 before 8.3.20, 8.4 before 8.4.13, 9.0 before 9.0.9, and 9.1 before 9.1.5 allows remote authenticated users to determine the existence of arbitrary files or URLs, and possibly obtain file or URL content that triggers a parsing error, via an XML value that refers to (1) a DTD or (2) an entity, related to an XML External Entity (aka XXE) issue.</p> <p>The xml_parse function in the libxml2 support in the core server component in PostgreSQL 8.3 before 8.3.20, 8.4 before 8.4.13, 9.0 before 9.0.9, and 9.1 before 9.1.5 allows remote authenticated users to determine the existence of arbitrary files or URLs, and possibly obtain file or URL content that triggers a parsing error, via an XML value that refers to (1) a DTD or (2) an entity, related to an XML External Entity (aka XXE) issue.</p> https://cve.radiocsirt.org/vuln/ghsa-fpq4-mcf9-c5w9 gsd-2012-3489 https://cve.radiocsirt.org/vuln/gsd-2012-3489 gsd-2012-3489 https://cve.radiocsirt.org/vuln/gsd-2012-3489 openSUSE-SU-2024:10030-1 — postgresql94-9.4.10-1.1 on GA media https://cve.radiocsirt.org/vuln/opensuse-su-2024:10030-1 <p>postgresql94-9.4.10-1.1 on GA media</p> <p>postgresql94-9.4.10-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:10030-1 RHSA-2012:1263 — Red Hat Security Advisory: postgresql and postgresql84 security update https://cve.radiocsirt.org/vuln/rhsa-2012:1263 <p>module): XXE by applying XSL stylesheet to the document postgresql: File disclosure through XXE in xmlparse by DTD validation</p> <p>module): XXE by applying XSL stylesheet to the document postgresql: File disclosure through XXE in xmlparse by DTD validation</p> https://cve.radiocsirt.org/vuln/rhsa-2012:1263