Description

PostgreSQL 9.2.x before 9.2.4, 9.1.x before 9.1.9, 9.0.x before 9.0.13, and 8.4.x before 8.4.17, when using OpenSSL, generates insufficiently random numbers, which might allow remote authenticated users to have an unspecified impact via vectors related to the "contrib/pgcrypto functions."

Remediation

References

CVE-2013-1900

Related Vulnerabilities

WordPress Plugin Media Library Assistant Multiple Cross-Site Scripting Vulnerabilities (2.73)

Oracle Database Server CVE-2018-3259 Vulnerability (CVE-2018-3259)

WordPress Plugin Cool Video Gallery Cross-Site Request Forgery (1.8)

easyXDM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2013-5212)

WordPress Plugin YITH Maintenance Mode Multiple Cross-Site Scripting Vulnerabilities (1.3.8)

Severity

High

Classification

CVE-2013-1900

Tags

Missing Update Known Vulnerabilities