PostgreSQL refint plan cache type confusion executes arbitrary code

PostgreSQL pg_dump heap buffer overflow executes arbitrary code

PostgreSQL psql \unrestrict lets superuser of pg_dump origin server execute arbitrary code in psql client

PostgreSQL type confusion in cursor CLOSE + DECLARE executes arbitrary code

PostgreSQL type confusion in pg_restore_attribute_stats() executes arbitrary code

PostgreSQL fuzzystrmatch writes effectively-arbitrary addresses, via integer wraparound

PostgreSQL expression deparse allows SQL injection via EXTRACT argument

PostgreSQL type confusion via "internal" arguments

PostgreSQL 32-bit pltcl and plperl undersize allocations, via integer wraparound

PostgreSQL pg_stat_statements heap buffer overflow executes arbitrary code

PostgreSQL plperl tied object heap buffer overflow executes arbitrary code

PostgreSQL to_char heap buffer overflow executes arbitrary code

PostgreSQL regexp heap buffer overflow executes arbitrary code

PostgreSQL tsvector and tsquery undersize allocations, via integer wraparound

PostgreSQL REFRESH PUBLICATION allows SQL injection via table name

PostgreSQL refint allows stack buffer overflow and SQL injection

PostgreSQL libpq lo_* functions let server superuser overwrite client stack memory

PostgreSQL pg_basebackup and pg_rewind can overwrite unrelated files of origin superuser choice

PostgreSQL server undersizes allocations, via integer wraparound

PostgreSQL missing validation of multibyte character length executes arbitrary code

PostgreSQL pgcrypto heap buffer overflow executes arbitrary code

PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code

Incorrect control of environment variables in PostgreSQL PL/Perl allows an unprivileged database user to change sensitive process environment variables (e.g

A flaw was found in PostgreSQL that allows authenticated database users to execute arbitrary code through missing overflow checks during SQL array value modification

Postgresql: extension script @substitutions@ within quoting allow sql injection

A flaw was found in PostgreSQL

A flaw was found in postgresql in versions before 13.3, before 12.7, before 11.12, before 10.17 and before 9.6.22

A vulnerability was found in postgresql versions 11.x prior to 11.3

A flaw was found in PostgreSQL versions before 13.1, before 12.5, before 11.10, before 10.15, before 9.6.20 and before 9.5.24

Multiple buffer overflows in contrib/pgcrypto in PostgreSQL before 9.0.19, 9.1.x before 9.1.15, 9.2.x before 9.2.10, 9.3.x before 9.3.6, and 9.4.x before 9.4.1 allow remote…

Stack-based buffer overflow in the *printf function implementations in PostgreSQL before 9.0.19, 9.1.x before 9.1.15, 9.2.x before 9.2.10, 9.3.x before 9.3.6, and 9.4.x before…

The to_char function in PostgreSQL before 9.0.19, 9.1.x before 9.1.15, 9.2.x before 9.2.10, 9.3.x before 9.3.6, and 9.4.x before 9.4.1 allows remote authenticated users to cause a…

A flaw was discovered in postgresql versions 9.4.x before 9.4.24, 9.5.x before 9.5.19, 9.6.x before 9.6.15, 10.x before 10.10 and 11.x before 11.5 where arbitrary SQL statements…

PostgreSQL versions 10.x before 10.9 and versions 11.x before 11.4 are vulnerable to a stack-based buffer overflow

A flaw was found in the way Postgresql allowed a user to modify the behavior of a query for other users

PostgreSQL versions before 9.2.22, 9.3.18, 9.4.13, 9.5.8 and 9.6.4 are vulnerable to authorization flaw allowing remote authenticated attackers to retrieve passwords from the user…

PostgreSQL before 9.1.20, 9.2.x before 9.2.15, 9.3.x before 9.3.11, 9.4.x before 9.4.6, and 9.5.x before 9.5.1 does not properly restrict access to unspecified custom…

PostgreSQL before 9.1.23, 9.2.x before 9.2.18, 9.3.x before 9.3.14, 9.4.x before 9.4.9, and 9.5.x before 9.5.4 allow remote authenticated users to cause a denial of service (NULL…

PostgreSQL stack buffer overflow in argument match writes 0x0 and 0x1 to server memory

PostgreSQL pg_trgm heap buffer overflow writes pattern onto server memory

PostgreSQL psql COPY FROM STDIN early failure processes data lines as psql commands

PostgreSQL ctid type confusion in selectivity estimator discloses derivative of arbitrary read

When the server is configured to use trust authentication with a clientcert requirement or to use cert authentication, a man-in-the-middle attacker can inject arbitrary SQL…

A flaw was found in PostgreSQL versions before 13.1, before 12.5, before 11.10, before 10.15, before 9.6.20 and before 9.5.24

The interactive installer in PostgreSQL before 9.3.15, 9.4.x before 9.4.10, and 9.5.x before 9.5.5 might allow remote attackers to execute arbitrary code by leveraging use of HTTP…

It was discovered that PostgreSQL versions before 10.5, 9.6.10, 9.5.14, 9.4.19, and 9.3.24 failed to properly check authorization on certain statements involved with "INSERT

Invalid json_populate_recordset or jsonb_populate_recordset function calls in PostgreSQL 10.x before 10.1, 9.6.x before 9.6.6, 9.5.x before 9.5.10, 9.4.x before 9.4.15, and 9.3.x…

Late privilege drop in REFRESH MATERIALIZED VIEW CONCURRENTLY in PostgreSQL allows an object creator to execute arbitrary SQL functions as the command issuer

A vulnerability was found in PostgreSQL

A vulnerability was found in postgresql versions 11.x prior to 11.3