PO
Database
PostgreSQL
204
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 7High 73Medium 38Low 6
Watch
Add PostgreSQL to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2015-0244 | 9.8 | Jan 27 | PostgreSQL before 9.0.19, 9.1.x before 9.1.15, 9.2.x before 9.2.10, 9.3.x before 9.3.6, and 9.4.x before 9.4.1 does not properly handle errors while reading a protocol message,… Affected: before 9.0.19; 9.1.0 before 9.1.15; 9.2.0 before 9.2.10; 9.3.0 before 9.3.6; 9.4.0 before 9.4.1 |
| CVE-2015-3166 | 9.8 | Nov 20 | The snprintf implementation in PostgreSQL before 9.0.20, 9.1.x before 9.1.16, 9.2.x before 9.2.11, 9.3.x before 9.3.7, and 9.4.x before 9.4.2 does not properly handle system-call… Affected: before 9.0.20; 9.1 before 9.1.16; 9.2 before 9.2.11; 9.3 before 9.3.7; 9.4 before 9.4.2 |
| CVE-2019-10211 | 9.8 | Oct 29 | Postgresql Windows installer before versions 11.5, 10.10, 9.6.15, 9.5.19, 9.4.24 is vulnerable via bundled OpenSSL executing code from unprotected directory Affected: before 9.4.24; 9.5.0 before 9.5.19; 9.6.0 before 9.6.15; 10.0 before 10.10; 11.0 before 11.5 |
| CVE-2018-16850 | 9.8 | Nov 13 | postgresql before versions 11.1, 10.6 is vulnerable to a to SQL injection in pg_upgrade and pg_dump via CREATE TRIGGER Affected: 10.0 before 10.6; 11.0 before 11.1 |
| CVE-2017-7546 | 9.8 | Aug 16 | PostgreSQL versions before 9.2.22, 9.3.18, 9.4.13, 9.5.8 and 9.6.4 are vulnerable to incorrect authentication flaw allowing remote attackers to gain access to database accounts… Affected: 9.2; 9.2.1; 9.2.2; 9.2.3; 9.2.4; 9.2.5; +34 more |
| CVE-2018-1115 | 9.1 | May 10 | postgresql before versions 10.4, 9.6.9 is vulnerable in the adminpack extension, the pg_catalog.pg_logfile_rotate() function doesn't follow the same ACLs than pg_rorate_logfile Affected: postegresql 10.4; postegresql 9.6.9 |
| CVE-2016-3065 | 9.1 | Apr 11 | The (1) brin_page_type and (2) brin_metapage_info functions in the pageinspect extension in PostgreSQL before 9.5.x before 9.5.2 allows attackers to bypass intended access… Affected: 9.5; 9.5.1 |
Showing 7