postgresql

186 tracked vulnerabilities.

CVE-2020-25696 HIGH
PostgreSQL < 9.5.24 - Remote Code Execution via \gset in psql Interactive Terminal
Nov 23, 2020
CVSS 7.5
EPSS 0.00
CVE-2020-25695 HIGH
PostgreSQL < 13.1, < 12.5, < 11.10, < 10.15, < 9.6.20, < 9.5.24 - SQL Injection via Object Creation
Nov 16, 2020
CVSS 8.8
EPSS 0.24
CVE-2020-25694 HIGH
PostgreSQL < 9.5.24 - Use of a Broken or Risky Cryptographic Algorithm
Nov 16, 2020
CVSS 8.1
EPSS 0.00
CVE-2020-10733 HIGH
PostgreSQL 9.5-12 - Untrusted Search Path via Windows Installer Executable Path
Sep 16, 2020
CVSS 7.3
EPSS 0.00
CVE-2020-14350 HIGH
PostgreSQL < 9.5.23 - Untrusted Search Path in Extension Installation Scripts
Aug 24, 2020
CVSS 7.3
EPSS 0.00
CVE-2020-14349 HIGH
PostgreSQL 10.0-10.13 - Authenticated SQL Injection via Logical Replication Search Path
Aug 24, 2020
CVSS 7.1
EPSS 0.02
CVE-2020-13692 HIGH
PostgreSQL JDBC Driver < 42.2.13 - XML External Entity Injection
Jun 04, 2020
CVSS 7.7
EPSS 0.08
CVE-2020-1720 LOW
PostgreSQL <12.2-9.6.17 - Privilege Escalation
Mar 17, 2020
CVSS 3.1
EPSS 0.00
CVE-2019-10128 HIGH
PostgreSQL < 9.4.22 - Improper Access Control via Inherited ACL
Mar 19, 2021
CVSS 7.8
EPSS 0.00
CVE-2019-10127 HIGH
PostgreSQL <11.3 - Privilege Escalation
Mar 19, 2021
CVSS 8.8
EPSS 0.00
CVE-2019-3466 HIGH
postgresql-common < 210 - Local Privilege Escalation via pg_ctlcluster Temporary Directory Creation
Nov 20, 2019
CVSS 7.8
EPSS 0.00
CVE-2019-10211 CRITICAL
Postgresql <11.5-9.4.24 - Code Injection
Oct 29, 2019
CVSS 9.8
EPSS 0.01
CVE-2019-10210 HIGH
Postgresql <11.5-9.4.24 - Info Disclosure
Oct 29, 2019
CVSS 7.0
EPSS 0.00
CVE-2019-10209 LOW
PostgreSQL 11.0-11.4 - Memory Disclosure in Cross-Type Comparison for Hashed Subplan
Oct 29, 2019
CVSS 2.2
EPSS 0.00
CVE-2019-10208 HIGH
PostgreSQL <9.4.24-11.5 - SQL Injection
Oct 29, 2019
CVSS 8.8
EPSS 0.00
CVE-2019-10130 MEDIUM
PostgreSQL <11.3, 10.8, 9.6.13, 9.5.17 - Info Disclosure
Jul 30, 2019
CVSS 4.3
EPSS 0.00
CVE-2019-10129 MEDIUM
Postgresql <11.3 - Memory Corruption
Jul 30, 2019
CVSS 6.5
EPSS 0.00
CVE-2019-10164 HIGH
PostgreSQL <10.9,11.4 - Buffer Overflow
Jun 26, 2019
CVSS 8.8
EPSS 0.13
CVE-2019-9193 HIGH NUCLEI
PostgreSQL 9.3-11.2 - Authenticated OS Command Injection via COPY TO/FROM PROGRAM
Apr 01, 2019
CVSS 7.2
EPSS 0.93
CVE-2018-16850 CRITICAL
postgresql <11.1, 10.6 - SQL Injection
Nov 13, 2018
CVSS 9.8
EPSS 0.01
CVE-2018-10936 HIGH
postgresql-jdbc <42.2.5 - SSL Man-In-The-Middle
Aug 30, 2018
CVSS 8.1
EPSS 0.01
CVE-2018-10925 HIGH
Canonical Ubuntu Linux < 9.5.14 - Incorrect Authorization
Aug 09, 2018
CVSS 8.1
EPSS 0.00
CVE-2018-10915 HIGH
Redhat Openstack < 9.3.24 - Information Disclosure
Aug 09, 2018
CVSS 8.5
EPSS 0.02
CVE-2018-1115 CRITICAL
postgresql <10.4, 9.6.9 - Privilege Escalation
May 10, 2018
CVSS 9.1
EPSS 0.01
CVE-2018-1058 HIGH
PostgreSQL 9.3-10 - Authenticated Remote Code Execution via Query Behavior Modification
Mar 02, 2018
CVSS 8.8
EPSS 0.82