#cwe-115

共收录 6 条相关情报。

← 返回所有主题
漏洞预警2026-10-30 发布CRITICAL

pgAdmin 4's Import/Export Data tool wraps a user's query export in a psql \copy (...) TO command and checks that the query's parentheses are balanced so that nothing can escape ...

CVE-2026-116241

pgAdmin 4's Import/Export Data tool wraps a user's query export in a psql \copy (...) TO command and checks that the que

来源摘录 · NVD / GitHub Advisory

安全公告2026-08-15 发布INFO

OpenVPN 2.7_alpha1 through 2.7.5 using mbedTLS allows remote authenticated users to be...

CVE-2026-63650

OpenVPN 2.7_alpha1 through 2.7.5 using mbedTLS allows remote authenticated users to be misidentified by ignoring the con

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-14 发布LOW

OpenVPN 2.7_alpha1 through 2.7.5 using mbedTLS allows remote authenticated users to be misidentified by ignoring the configured X.509 username identity lookup field

CVE-2026-63650

该漏洞影响 OpenVPN 2.7_alpha1 至 2.7.5 版本,且仅在使用 mbedTLS 加密库时触发。根本原因是 OpenVPN 在基于 X.509 证书进行用户身份识别时,忽略了管理员配置的“用户名身份查找字段”(即指定从证书

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-31 发布INFO

pgAdmin 4's Import/Export Data tool builds a psql \copy (...) command line by interpolating a user-supplied SQL query into a Jinja template and passing the rendered line to psql...

CVE-2026-17566

pgAdmin 4's Import/Export Data tool builds a psql \copy (...) command line by interpolating a user-supplied SQL query in

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-31 发布INFO

The fix for CVE-2026-12045 in pgAdmin 4 9.16 required the LLM-supplied query passed to the AI Assistant's execute_sql_query tool to parse, via sqlparse, as exactly one non-trans...

CVE-2026-17351

The fix for CVE-2026-12045 in pgAdmin 4 9.16 required the LLM-supplied query passed to the AI Assistant's execute_sql_qu

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-25 发布INFO

An attacker can send a crafted EDNS OPT record that will be ignored by DNSdist’s filtering rules, but will be rewritten as a valid OPT record when EDNS Client Subnet is inserted...

CVE-2026-42004

An attacker can send a crafted EDNS OPT record that will be ignored by DNSdist’s filtering rules, but will be rewritten

历史摘要 · 未重新核验 · NVD