Количество 36
Количество 36
CVE-2024-10979
Incorrect control of environment variables in PostgreSQL PL/Perl allows an unprivileged database user to change sensitive process environment variables (e.g. PATH). That often suffices to enable arbitrary code execution, even if the attacker lacks a database server operating system user. Versions before PostgreSQL 17.1, 16.5, 15.9, 14.14, 13.17, and 12.21 are affected.
CVE-2024-10979
Incorrect control of environment variables in PostgreSQL PL/Perl allows an unprivileged database user to change sensitive process environment variables (e.g. PATH). That often suffices to enable arbitrary code execution, even if the attacker lacks a database server operating system user. Versions before PostgreSQL 17.1, 16.5, 15.9, 14.14, 13.17, and 12.21 are affected.
CVE-2024-10979
Incorrect control of environment variables in PostgreSQL PL/Perl allows an unprivileged database user to change sensitive process environment variables (e.g. PATH). That often suffices to enable arbitrary code execution, even if the attacker lacks a database server operating system user. Versions before PostgreSQL 17.1, 16.5, 15.9, 14.14, 13.17, and 12.21 are affected.
CVE-2024-10979
CVE-2024-10979
Incorrect control of environment variables in PostgreSQL PL/Perl allow ...
GHSA-2r9h-x757-8j9q
Incorrect control of environment variables in PostgreSQL PL/Perl allows an unprivileged database user to change sensitive process environment variables (e.g. PATH). That often suffices to enable arbitrary code execution, even if the attacker lacks a database server operating system user. Versions before PostgreSQL 17.1, 16.5, 15.9, 14.14, 13.17, and 12.21 are affected.
ELSA-2024-10882
ELSA-2024-10882: postgresql security update (IMPORTANT)
BDU:2024-09679
Уязвимость переменных среды PL/Perl системы управления базами данных PostgreSQL, позволяющая нарушителю выполнить произвольный код
ELSA-2024-10832
ELSA-2024-10832: postgresql:13 security update (IMPORTANT)
ELSA-2024-10831
ELSA-2024-10831: postgresql:16 security update (IMPORTANT)
ELSA-2024-10830
ELSA-2024-10830: postgresql:15 security update (IMPORTANT)
ELSA-2024-10791
ELSA-2024-10791: postgresql security update (IMPORTANT)
ELSA-2024-10788
ELSA-2024-10788: postgresql:16 security update (IMPORTANT)
ELSA-2024-10787
ELSA-2024-10787: postgresql:15 security update (IMPORTANT)
ELSA-2024-10785
ELSA-2024-10785: postgresql:12 security update (IMPORTANT)
SUSE-SU-2025:01799-1
Security update for postgresql, postgresql16, postgresql17
SUSE-SU-2024:4176-1
Security update for postgresql14
SUSE-SU-2024:4175-1
Security update for postgresql13
SUSE-SU-2024:4174-1
Security update for postgresql15
SUSE-SU-2024:4173-1
Security update for postgresql, postgresql16, postgresql17
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2024-10979 Incorrect control of environment variables in PostgreSQL PL/Perl allows an unprivileged database user to change sensitive process environment variables (e.g. PATH). That often suffices to enable arbitrary code execution, even if the attacker lacks a database server operating system user. Versions before PostgreSQL 17.1, 16.5, 15.9, 14.14, 13.17, and 12.21 are affected. | CVSS3: 8.8 | 1% Низкий | 7 месяцев назад |
 | CVE-2024-10979 Incorrect control of environment variables in PostgreSQL PL/Perl allows an unprivileged database user to change sensitive process environment variables (e.g. PATH). That often suffices to enable arbitrary code execution, even if the attacker lacks a database server operating system user. Versions before PostgreSQL 17.1, 16.5, 15.9, 14.14, 13.17, and 12.21 are affected. | CVSS3: 8.8 | 1% Низкий | 7 месяцев назад |
 | CVE-2024-10979 Incorrect control of environment variables in PostgreSQL PL/Perl allows an unprivileged database user to change sensitive process environment variables (e.g. PATH). That often suffices to enable arbitrary code execution, even if the attacker lacks a database server operating system user. Versions before PostgreSQL 17.1, 16.5, 15.9, 14.14, 13.17, and 12.21 are affected. | CVSS3: 8.8 | 1% Низкий | 7 месяцев назад |
 | CVSS3: 8.8 | 1% Низкий | 7 месяцев назад | |
| CVE-2024-10979 Incorrect control of environment variables in PostgreSQL PL/Perl allow ... | CVSS3: 8.8 | 1% Низкий | 7 месяцев назад |
| GHSA-2r9h-x757-8j9q Incorrect control of environment variables in PostgreSQL PL/Perl allows an unprivileged database user to change sensitive process environment variables (e.g. PATH). That often suffices to enable arbitrary code execution, even if the attacker lacks a database server operating system user. Versions before PostgreSQL 17.1, 16.5, 15.9, 14.14, 13.17, and 12.21 are affected. | CVSS3: 8.8 | 1% Низкий | 7 месяцев назад |
| ELSA-2024-10882 ELSA-2024-10882: postgresql security update (IMPORTANT) | 6 месяцев назад | ||
 | BDU:2024-09679 Уязвимость переменных среды PL/Perl системы управления базами данных PostgreSQL, позволяющая нарушителю выполнить произвольный код | CVSS3: 8.8 | 1% Низкий | 7 месяцев назад |
| ELSA-2024-10832 ELSA-2024-10832: postgresql:13 security update (IMPORTANT) | 7 месяцев назад | ||
| ELSA-2024-10831 ELSA-2024-10831: postgresql:16 security update (IMPORTANT) | 7 месяцев назад | ||
| ELSA-2024-10830 ELSA-2024-10830: postgresql:15 security update (IMPORTANT) | 7 месяцев назад | ||
| ELSA-2024-10791 ELSA-2024-10791: postgresql security update (IMPORTANT) | 6 месяцев назад | ||
| ELSA-2024-10788 ELSA-2024-10788: postgresql:16 security update (IMPORTANT) | 7 месяцев назад | ||
| ELSA-2024-10787 ELSA-2024-10787: postgresql:15 security update (IMPORTANT) | 7 месяцев назад | ||
| ELSA-2024-10785 ELSA-2024-10785: postgresql:12 security update (IMPORTANT) | 7 месяцев назад | ||
 | SUSE-SU-2025:01799-1 Security update for postgresql, postgresql16, postgresql17 | 16 дней назад | ||
| SUSE-SU-2024:4176-1 Security update for postgresql14 | 7 месяцев назад | ||
| SUSE-SU-2024:4175-1 Security update for postgresql13 | 7 месяцев назад | ||
| SUSE-SU-2024:4174-1 Security update for postgresql15 | 7 месяцев назад | ||
| SUSE-SU-2024:4173-1 Security update for postgresql, postgresql16, postgresql17 | 7 месяцев назад |
Уязвимостей на страницу