https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 05 Nov 2026 02:51:12 +0000 https://db.gcve.eu/vuln/certfr-2026-avi-1445 certfr-2026-avi-1445 https://db.gcve.eu/vuln/certfr-2026-avi-1445 https://db.gcve.eu/vuln/fkie_cve-2026-120066 <p>On Unix-like systems, when logging is enabled, psqlODBC creates its log files in /tmp by default, named from the program name, user name, and process ID, with the default permissions, typically world-readable, and follows symbolic links when opening them. A local user can read query text and data from another user&#39;s logs, and can place a symbolic link at the predictable path so that the driver appends log data to a file of the attacker&#39;s choosing with the victim&#39;s privileges. Versions before psqlODBC 18.00.0006 are affected.</p> <p>On Unix-like systems, when logging is enabled, psqlODBC creates its log files in /tmp by default, named from the program name, user name, and process ID, with the default permissions, typically world-readable, and follows symbolic links when opening them. A local user can read query text and data from another user&#39;s logs, and can place a symbolic link at the predictable path so that the driver appends log data to a file of the attacker&#39;s choosing with the victim&#39;s privileges. Versions before psqlODBC 18.00.0006 are affected.</p> https://db.gcve.eu/vuln/fkie_cve-2026-120066 https://db.gcve.eu/vuln/ghsa-rvv3-vcvv-5fqj <p>On Unix-like systems, when logging is enabled, psqlODBC creates its log files in /tmp by default, named from the program name, user name, and process ID, with the default permissions, typically world-readable, and follows symbolic links when opening them. A local user can read query text and data from another user&#39;s logs, and can place a symbolic link at the predictable path so that the driver appends log data to a file of the attacker&#39;s choosing with the victim&#39;s privileges. Versions before psqlODBC 18.00.0006 are affected.</p> <p>On Unix-like systems, when logging is enabled, psqlODBC creates its log files in /tmp by default, named from the program name, user name, and process ID, with the default permissions, typically world-readable, and follows symbolic links when opening them. A local user can read query text and data from another user&#39;s logs, and can place a symbolic link at the predictable path so that the driver appends log data to a file of the attacker&#39;s choosing with the victim&#39;s privileges. Versions before psqlODBC 18.00.0006 are affected.</p> https://db.gcve.eu/vuln/ghsa-rvv3-vcvv-5fqj https://db.gcve.eu/vuln/ubuntu-cve-2026-120066 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: psqlodbc, Ubuntu:18.04:LTS: psqlodbc, Ubuntu:20.04:LTS: psqlodbc, Ubuntu:22.04:LTS: psqlodbc, Ubuntu:24.04:LTS: psqlodbc, Ubuntu:26.10: psqlodbc, Ubuntu:26.04:LTS: psqlodbc</p> <p>On Unix-like systems, when logging is enabled, psqlODBC creates its log files in /tmp by default, named from the program name, user name, and process ID, with the default permissions, typically world-readable, and follows symbolic links when opening them. A local user can read query text and data from another user&#39;s logs, and can place a symbolic link at the predictable path so that the driver appends log data to a file of the attacker&#39;s choosing with the victim&#39;s privileges. Versions before psqlODBC 18.00.0006 are affected.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: psqlodbc, Ubuntu:18.04:LTS: psqlodbc, Ubuntu:20.04:LTS: psqlodbc, Ubuntu:22.04:LTS: psqlodbc, Ubuntu:24.04:LTS: psqlodbc, Ubuntu:26.10: psqlodbc, Ubuntu:26.04:LTS: psqlodbc</p> <p>On Unix-like systems, when logging is enabled, psqlODBC creates its log files in /tmp by default, named from the program name, user name, and process ID, with the default permissions, typically world-readable, and follows symbolic links when opening them. A local user can read query text and data from another user&#39;s logs, and can place a symbolic link at the predictable path so that the driver appends log data to a file of the attacker&#39;s choosing with the victim&#39;s privileges. Versions before psqlODBC 18.00.0006 are affected.</p> https://db.gcve.eu/vuln/ubuntu-cve-2026-120066