Description PostgreSQL PL/Java after 9.0 does not honor access controls on large objects. Remediation References CVE-2016-0768 Related Vulnerabilities WordPress Plugin OPS Old Post Spinner 'ops_file' Parameter Local File Include (2.2.1) Apache Tomcat Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2005-4838) MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-2853) WordPress Plugin Broadcast Live Video-Live Streaming:HTML5, WebRTC, HLS, RTSP, RTMP Remote Code Execution (5.5.15) WordPress Plugin Integration for HubSpot and WooCommerce Cross-Site Scripting (1.0.4) Severity High Classification CVE-2016-0768 CWE-284 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Tags Missing Update Known Vulnerabilities