CVE-2016-3065

CRITICAL Year: 2016
CVSS v3 Score
9.1
Critical
CVSS v2 Score
8.5
High
Weakness Type
CWE-264
View all →

Vulnerability Description

The (1) brin_page_type and (2) brin_metapage_info functions in the pageinspect extension in PostgreSQL before 9.5.x before 9.5.2 allows attackers to bypass intended access restrictions and consequently obtain sensitive server memory information or cause a denial of service (server crash) via a crafted bytea value in a BRIN index page.

Related Vulnerabilities

CVE-2014-5415

CRITICAL
CVSS:9.1(Critical)

Beckhoff Embedded PC images before 2014-10-22 and Automation Device Specification (ADS) TwinCAT components might allow remote attackers to obtain access via the (1) Windows CE Remote Configuration Too...

CWE-2642014

CVE-2015-8753

CRITICAL
CVSS:9.1(Critical)

SAP Afaria 7.0.6001.5 allows remote attackers to bypass authorization checks and wipe or lock mobile devices via a crafted request, related to "Insecure signature," aka SAP Security Note 2134905.

CWE-2642015

CVE-2016-6394

CRITICAL
CVSS:9.1(Critical)

Session fixation vulnerability in Cisco Firepower Management Center and Cisco FireSIGHT System Software through 6.1.0 allows remote attackers to hijack web sessions via a session identifier, aka Bug I...

CWE-2642016

CVE-2016-7435

CRITICAL
CVSS:9.1(Critical)

The (1) SCTC_REFRESH_EXPORT_TAB_COMP, (2) SCTC_REFRESH_CHECK_ENV, and (3) SCTC_TMS_MAINTAIN_ALOG functions in the SCTC subpackage in SAP Netweaver 7.40 SP 12 allow remote authenticated users with cert...

CWE-2642016

CVE-2016-8649

CRITICAL
CVSS:9.1(Critical)

lxc-attach in LXC before 1.0.9 and 2.x before 2.0.6 allows an attacker inside of an unprivileged container to use an inherited file descriptor, of the host's /proc, to access the rest of the host's fi...

CWE-2642016

CVE-2019-19106

CRITICAL
CVSS:9.1(Critical)

Improper implementation of Access Control in ABB Telephone Gateway TG/S 3.2 and Busch-Jaeger 6186/11 Telefon-Gateway allows an unauthorized user to access data marked as restricted, such as viewing or...

CWE-2642019