Поиск уязвимостей
Количество 11
Количество 11
GHSA-727h-hrw8-jg8q
Path traversal in org.postgresql:postgresql
CVE-2022-26520
In pgjdbc before 42.3.3, an attacker (who controls the jdbc URL or properties) can call java.util.logging.FileHandler to write to arbitrary files through the loggerFile and loggerLevel connection properties. An example situation is that an attacker could create an executable JSP file under a Tomcat web root. NOTE: the vendor's position is that there is no pgjdbc vulnerability; instead, it is a vulnerability for any application to use the pgjdbc driver with untrusted connection properties
CVE-2022-26520
In pgjdbc before 42.3.3, an attacker (who controls the jdbc URL or properties) can call java.util.logging.FileHandler to write to arbitrary files through the loggerFile and loggerLevel connection properties. An example situation is that an attacker could create an executable JSP file under a Tomcat web root. NOTE: the vendor's position is that there is no pgjdbc vulnerability; instead, it is a vulnerability for any application to use the pgjdbc driver with untrusted connection properties
CVE-2022-26520
In pgjdbc before 42.3.3, an attacker (who controls the jdbc URL or properties) can call java.util.logging.FileHandler to write to arbitrary files through the loggerFile and loggerLevel connection properties. An example situation is that an attacker could create an executable JSP file under a Tomcat web root. NOTE: the vendor's position is that there is no pgjdbc vulnerability; instead, it is a vulnerability for any application to use the pgjdbc driver with untrusted connection properties
CVE-2022-26520
In pgjdbc before 42.3.3, an attacker (who controls the jdbc URL or pro ...
SUSE-SU-2022:2655-1
Security update for postgresql-jdbc
SUSE-FU-2022:2794-1
Feature update for ongres-scram, ongres-stringprep, postgresql-jdbc
BDU:2024-06539
Уязвимость драйвера JDBC pgjdbc для подключения Java-программ к базе данных PostgreSQL, связанная с недостаточной проверкой входных данных, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации
ROS-20240815-11
Уязвимость postgresql-jdbc
ALT-PU-2018-3702
ALT-PU-2018-3702: package `postgresql-jdbc` update to version 42.2.1-alt1_2jpp8
ALT-PU-2023-8458
ALT-PU-2023-8458: package `postgresql-jdbc` update to version 42.6.0-alt1_1jpp11
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-727h-hrw8-jg8q Path traversal in org.postgresql:postgresql | 3% Низкий | больше 4 лет назад | |
 | CVE-2022-26520 In pgjdbc before 42.3.3, an attacker (who controls the jdbc URL or properties) can call java.util.logging.FileHandler to write to arbitrary files through the loggerFile and loggerLevel connection properties. An example situation is that an attacker could create an executable JSP file under a Tomcat web root. NOTE: the vendor's position is that there is no pgjdbc vulnerability; instead, it is a vulnerability for any application to use the pgjdbc driver with untrusted connection properties | CVSS3: 9.8 | 3% Низкий | больше 4 лет назад |
 | CVE-2022-26520 In pgjdbc before 42.3.3, an attacker (who controls the jdbc URL or properties) can call java.util.logging.FileHandler to write to arbitrary files through the loggerFile and loggerLevel connection properties. An example situation is that an attacker could create an executable JSP file under a Tomcat web root. NOTE: the vendor's position is that there is no pgjdbc vulnerability; instead, it is a vulnerability for any application to use the pgjdbc driver with untrusted connection properties | CVSS3: 9.8 | 3% Низкий | почти 5 лет назад |
 | CVE-2022-26520 In pgjdbc before 42.3.3, an attacker (who controls the jdbc URL or properties) can call java.util.logging.FileHandler to write to arbitrary files through the loggerFile and loggerLevel connection properties. An example situation is that an attacker could create an executable JSP file under a Tomcat web root. NOTE: the vendor's position is that there is no pgjdbc vulnerability; instead, it is a vulnerability for any application to use the pgjdbc driver with untrusted connection properties | CVSS3: 9.8 | 3% Низкий | больше 4 лет назад |
| CVE-2022-26520 In pgjdbc before 42.3.3, an attacker (who controls the jdbc URL or pro ... | CVSS3: 9.8 | 3% Низкий | больше 4 лет назад |
 | SUSE-SU-2022:2655-1 Security update for postgresql-jdbc | 3% Низкий | больше 4 лет назад | |
| SUSE-FU-2022:2794-1 Feature update for ongres-scram, ongres-stringprep, postgresql-jdbc | 3% Низкий | около 4 лет назад | |
 | BDU:2024-06539 Уязвимость драйвера JDBC pgjdbc для подключения Java-программ к базе данных PostgreSQL, связанная с недостаточной проверкой входных данных, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации | CVSS3: 9.8 | 3% Низкий | больше 4 лет назад |
 | ROS-20240815-11 Уязвимость postgresql-jdbc | CVSS3: 9.8 | 3% Низкий | около 2 лет назад |
| ALT-PU-2018-3702 ALT-PU-2018-3702: package `postgresql-jdbc` update to version 42.2.1-alt1_2jpp8 | CVSS3: 9.8 | 3% Низкий | больше 8 лет назад |
| ALT-PU-2023-8458 ALT-PU-2023-8458: package `postgresql-jdbc` update to version 42.6.0-alt1_1jpp11 | CVSS3: 9.8 | больше 3 лет назад |
Уязвимостей на страницу