Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 62

Export CSV
CVE-2023-5002

Pgadmin4: remote code execution by an authenticated user

A flaw was found in pgAdmin. This issue occurs when the pgAdmin server HTTP API validates the path a user selects to external PostgreSQL utilities such as pg_dump and pg_restore. Versions of pgAdmin prior to 7.6 failed to properly control the server code executed on this API, allowing an authenticated user to run arbitrary commands on the server.

CVSS 3.1 · 6 Medium EPSS 1.8% KEV · Not listed
Vendors
Fedoraproject Pgadmin
Products
Fedora Pgadmin 4
CVE-2024-3116

Remote Code Execution Vulnerability through the validate binary path API in pgAdmin 4

pgAdmin <= 8.4 is affected by a Remote Code Execution (RCE) vulnerability through the validate binary path API. This vulnerability allows attackers to execute arbitrary code on the server hosting PGAdmin, posing a severe risk to the database management system's integrity and the security of the underlying data.

CVSS 3.1 · 7.4 High EPSS 65.8% KEV · Not listed
Vendors
Fedoraproject Pgadmin Postgresql
Products
Fedora Pgadmin 4 Pgadmin 4