https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 22 Oct 2026 10:15:48 +0000 https://cve.radiocsirt.org/vuln/bell-cve-2019-9193 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Withdrawn by the publisher.</strong></p> https://cve.radiocsirt.org/vuln/bell-cve-2019-9193 https://cve.radiocsirt.org/vuln/certfr-2020-avi-395 certfr-2020-avi-395 https://cve.radiocsirt.org/vuln/certfr-2020-avi-395 https://cve.radiocsirt.org/vuln/cnvd-2019-08279 cnvd-2019-08279 https://cve.radiocsirt.org/vuln/cnvd-2019-08279 https://cve.radiocsirt.org/vuln/euvd-2026-201763 EUVD-2026-201763 https://cve.radiocsirt.org/vuln/euvd-2026-201763 https://cve.radiocsirt.org/vuln/fkie_cve-2019-9193 <p>In PostgreSQL 9.3 through 11.2, the &#34;COPY TO/FROM PROGRAM&#34; function allows superusers and users in the &#39;pg_execute_server_program&#39; group to execute arbitrary code in the context of the database&#39;s operating system user. This functionality is enabled by default and can be abused to run arbitrary operating system commands on Windows, Linux, and macOS. NOTE: Third parties claim/state this is not an issue because PostgreSQL functionality for ‘COPY TO/FROM PROGRAM’ is acting as intended. References state that in PostgreSQL, a superuser can execute commands as the server user without using the ‘COPY FROM PROGRAM’.</p> <p>In PostgreSQL 9.3 through 11.2, the &#34;COPY TO/FROM PROGRAM&#34; function allows superusers and users in the &#39;pg_execute_server_program&#39; group to execute arbitrary code in the context of the database&#39;s operating system user. This functionality is enabled by default and can be abused to run arbitrary operating system commands on Windows, Linux, and macOS. NOTE: Third parties claim/state this is not an issue because PostgreSQL functionality for ‘COPY TO/FROM PROGRAM’ is acting as intended. References state that in PostgreSQL, a superuser can execute commands as the server user without using the ‘COPY FROM PROGRAM’.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-9193 https://cve.radiocsirt.org/vuln/ghsa-j83j-hfqj-cf5p <p>** DISPUTED ** In PostgreSQL 9.3 through 11.2, the &#34;COPY TO/FROM PROGRAM&#34; function allows superusers and users in the &#39;pg_execute_server_program&#39; group to execute arbitrary code in the context of the database&#39;s operating system user. This functionality is enabled by default and can be abused to run arbitrary operating system commands on Windows, Linux, and macOS. NOTE: Third parties claim/state this is not an issue because PostgreSQL functionality for ‘COPY TO/FROM PROGRAM’ is acting as intended. References state that in PostgreSQL, a superuser can execute commands as the server user without using the ‘COPY FROM PROGRAM’.</p> <p>** DISPUTED ** In PostgreSQL 9.3 through 11.2, the &#34;COPY TO/FROM PROGRAM&#34; function allows superusers and users in the &#39;pg_execute_server_program&#39; group to execute arbitrary code in the context of the database&#39;s operating system user. This functionality is enabled by default and can be abused to run arbitrary operating system commands on Windows, Linux, and macOS. NOTE: Third parties claim/state this is not an issue because PostgreSQL functionality for ‘COPY TO/FROM PROGRAM’ is acting as intended. References state that in PostgreSQL, a superuser can execute commands as the server user without using the ‘COPY FROM PROGRAM’.</p> https://cve.radiocsirt.org/vuln/ghsa-j83j-hfqj-cf5p https://cve.radiocsirt.org/vuln/gsd-2019-9193 gsd-2019-9193 https://cve.radiocsirt.org/vuln/gsd-2019-9193