Most recent entries from all

EUVD-2026-96708

fkie_cve-2014-0137

SQL injection vulnerability in the saved_report_delete action in the ReportController in Red Hat CloudForms Management Engine (CFME) before 5.2.3.2 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, related to MiqReportResult.exists.

GHSA-vc39-w9gh-6rx2

gsd-2014-0137

RHSA-2014:0469 — Red Hat Security Advisory: cfme security, bug fix, and enhancement update

rubygem-actionpack: unsafe query generation risk (incomplete fix for CVE-2013- 0155) postgresql: SET ROLE without ADMIN OPTION allows adding and removing group members postgresql: privilege escalation via procedural language validator functions postgresql: CREATE INDEX race condition possibly leading to privilege escalation postgresql: stack-based buffer overflow in datetime input/output postgresql: integer overflows leading to buffer overflows postgresql: possible buffer overflow flaws postgresql: NULL pointer dereference CFME: multiple authorization bypass vulnerabilities in CatalogController CFME: ReportController SQL injection postgresql: multiple integer overflows in hstore_io.c