Debian Linux 8.0 (Jessie)

A vulnerability was found in systemd-resolved. This issue may allow systemd-resolved to accept records of DNSSEC-signed domains even when they have no signature, allowing man-in-the-middles (or the upstream DNS resolver) to manipulate records.

Published: 2023-12-23T13:00:50.515Z
Updated: 2025-11-06T21:45:35.192Z

IN THE EXTENSION SCRIPT, a SQL Injection vulnerability was found in PostgreSQL if it uses @extowner@, @extschema@, or @extschema:...@ inside a quoting construct (dollar quoting, '', or ""). If an administrator has installed files of a vulnerable, trusted, non-bundled extension, an attacker with database-level CREATE privilege can execute arbitrary code as the bootstrap superuser.

Published: 2023-08-11T12:19:15.108Z
Updated: 2026-03-12T06:14:20.423Z

Incorrect handling of url fragment vulnerability of Apache Traffic Server allows an attacker to poison the cache. This issue affects Apache Traffic Server 7.0.0 to 7.1.12, 8.0.0 to 8.1.1, 9.0.0 to 9.0.1.

Published: 2021-06-29T11:45:19.000Z
Updated: 2024-08-03T21:26:09.764Z

An issue was discovered in WeeChat before 2.7.1 (0.3.4 to 2.7 are affected). When a new IRC message 005 is received with longer nick prefixes, a buffer overflow and possibly a crash can happen when a new mode is set for a nick.

Published: 2020-03-23T15:39:49.000Z
Updated: 2024-08-04T10:43:04.502Z

In PDFResurrect 0.12 through 0.19, get_type in pdf.c has an out-of-bounds write via a crafted PDF document.

Published: 2020-03-02T04:32:20.000Z
Updated: 2024-08-04T10:34:39.426Z