Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2024-9014

OAuth2 client id and secret exposed through the web browser in pgAdmin 4

pgAdmin versions 8.11 and earlier are vulnerable to a security flaw in OAuth2 authentication. This vulnerability allows an attacker to potentially obtain the client ID and secret, leading to unauthorized access to user data.

CVSS 3.1 · 9.9 Critical EPSS 9.7% KEV · Not listed
Vendors
Pgadmin Postgresql
Products
Pgadmin 4 Pgadmin 4
CVE-2024-3116

Remote Code Execution Vulnerability through the validate binary path API in pgAdmin 4

pgAdmin <= 8.4 is affected by a Remote Code Execution (RCE) vulnerability through the validate binary path API. This vulnerability allows attackers to execute arbitrary code on the server hosting PGAdmin, posing a severe risk to the database management system's integrity and the security of the underlying data.

CVSS 3.1 · 7.4 High EPSS 65.8% KEV · Not listed
Vendors
Fedoraproject Pgadmin Postgresql
Products
Fedora Pgadmin 4 Pgadmin 4