Description

PostgreSQL 9.2.x before 9.2.4, 9.1.x before 9.1.9, 9.0.x before 9.0.13, and 8.4.x before 8.4.17, when using OpenSSL, generates insufficiently random numbers, which might allow remote authenticated users to have an unspecified impact via vectors related to the "contrib/pgcrypto functions."

Remediation

References

CVE-2013-1900

Related Vulnerabilities

WordPress Plugin MediaRSS external gallery TimThumb Arbitrary File Upload (0.1)

Piwigo Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-17825)

WordPress Plugin Tajer Arbitrary File Upload (1.0.5)

XWiki Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2023-48293)

WordPress Plugin RAYS Grid Cross-Site Request Forgery (1.2.2)

Severity

High

Classification

CVE-2013-1900

Tags

Missing Update Known Vulnerabilities