All CVEs — page 559 of 631
The complete archive, 25 per page, newest first. 15775 records. Search instead.
This flaw allows a remote attacker to bypass authentication by exploiting an unvalidated SSO header, gaining full access to the system.
The flaw allows a role with partman_user access to bypass authorization checks and relocate retained child tables between schemas, potentially leading to unauthorized data manipulation.
This flaw allows a partman_user to craft a column name that breaks out of the generated SQL, executing with superuser privileges, leading to full database compromise and potential OS command execution.
This flaw allows a partman_user to inject SQL by creating a parent-table name containing a single quote, leading to database-wide compromise and OS command execution as the PostgreSQL service account.
The flaw allows a role with partman_user access to store SQL within the undo_partition() function, which can be executed with the caller's privileges, leading to potential data manipulation and system compromise.
The flaw allows a role with partman_user privileges to store SQL, leading to potential database-wide compromise and OS command execution.
The flaw allows a role with specific privileges to execute arbitrary SQL, leading to potential database-wide compromise and OS command execution.
The flaw allows a crafted DLS file to cause out-of-bounds reads and potential memory disclosure, leading to denial of service and undefined behavior.
This vulnerability allows out-of-bounds reads and writes due to improper handling of MIDI channels, potentially compromising confidentiality, integrity, or availability.
FluidSynth versions from 1.1.2 to 2.5.5 are vulnerable to out-of-bounds heap write due to unbounded channel argument in pitch_bend_range command, leading to potential code execution or denial of service.