All CVEs — page 1147 of 1220
The complete archive, 25 per page, newest first. 30483 records. Search instead.
The flaw allows a low-privileged authenticated user to inject SQL statements, potentially leading to unauthorized data access and system impact.
The flaw allows a remote unauthenticated attacker to execute arbitrary code on the system by deserializing untrusted data, posing a critical risk.
The flaw allows a low-privileged authenticated user to inject SQL statements, potentially leading to unauthorized data access and system impact.
The flaw is a SQL injection vulnerability in IBM Guardium Data Protection 12.2, allowing unauthenticated users to inject SQL statements and potentially gain unauthorized access to data.
The flaw allows an authenticated attacker to inject OS commands, potentially leading to unauthorized command execution and system compromise.
The flaw is an unauthenticated second-order SQL injection vulnerability in IBM Guardium Data Protection 12.2, allowing remote attackers to inject malicious SQL and potentially compromise the system’s confidentiality, integrity, and availability.
This flaw allows a remote attacker to bypass authentication by exploiting an unvalidated SSO header, gaining full access to the system.
The flaw allows a role with partman_user access to bypass authorization checks and relocate retained child tables between schemas, potentially leading to unauthorized data manipulation.
This flaw allows a partman_user to craft a column name that breaks out of the generated SQL, executing with superuser privileges, leading to full database compromise and potential OS command execution.
This flaw allows a partman_user to inject SQL by creating a parent-table name containing a single quote, leading to database-wide compromise and OS command execution as the PostgreSQL service account.
The flaw allows a role with partman_user access to store SQL within the undo_partition() function, which can be executed with the caller's privileges, leading to potential data manipulation and system compromise.
The flaw allows a role with partman_user privileges to store SQL, leading to potential database-wide compromise and OS command execution.
The flaw allows a role with specific privileges to execute arbitrary SQL, leading to potential database-wide compromise and OS command execution.