postgresql vulnerabilities (Bitnami)
86 vulnerabilities.
postgresqlBitnamiPostgreSQL quoting APIs miss neutralizing quoting syntax in text that fails encoding validation8.1 HighpostgresqlBitnamiPostgreSQL PL/Perl environment variable changes execute arbitrary code8.8 HighpostgresqlBitnamiPostgreSQL SET ROLE, SET SESSION AUTHORIZATION reset to wrong user ID4.2 MediumpostgresqlBitnamiPostgreSQL libpq retains an error message from man-in-the-middle3.1 LowpostgresqlBitnamiPostgreSQL row security below e.g. subqueries disregards user ID changes4.2 MediumpostgresqlBitnamiPostgreSQL relation replacement during pg_dump executes arbitrary SQL8.8 HighpostgresqlBitnamiPostgreSQL pg_stats_ext and pg_stats_ext_exprs lack authorization checks3.1 LowpostgresqlBitnamiPostgreSQL non-owner REFRESH MATERIALIZED VIEW CONCURRENTLY executes arbitrary SQL8.0 HighpostgresqlBitnamiSupabase PostgreSQL v15.1 was discovered to contain a SQL injection vulnerability via the...9.8 CriticalpostgresqlBitnamiPostgresql: role pg_signal_backend can signal certain superuser processes.2.2 LowpostgresqlBitnamiPostgresql: buffer overrun from integer overflow in array modification8.8 HighpostgresqlBitnamiPostgresql: memory disclosure in aggregate function calls4.3 MediumpostgresqlBitnamiAn issue was discovered in PostgreSQL 12.2 allows attackers to cause a denial of service via...4.4 MediumpostgresqlBitnamiPostgresql: merge fails to enforce update or select row security policies3.1 LowpostgresqlBitnamiPostgresql: extension script @substitutions@ within quoting allow sql injection7.5 HighpostgresqlBitnamiRow security policies disregard user ID changes after inlining; PostgreSQL could permit incorrect...5.4 MediumpostgresqlBitnamischema_element defeats protective search_path changes; It was found that certain database calls...7.2 HighpostgresqlBitnamiIn PostgreSQL, a modified, unauthenticated server can send an unterminated string during the...3.7 LowpostgresqlBitnamiOdyssey passes to client unencrypted bytes from man-in-the-middle When Odyssey storage is...5.9 MediumpostgresqlBitnamiA vulnerability found in postgresql. On this security issue an attack requires permission to...8.0 HighpostgresqlBitnamiA flaw was found in PostgreSQL. There is an issue with incomplete efforts to operate safely when...8.8 HighpostgresqlBitnamiA man-in-the-middle attacker can inject false responses to the client's first few queries,...5.9 MediumpostgresqlBitnamiWhen the server is configured to use trust authentication with a clientcert requirement or to use...8.1 HighpostgresqlBitnamiA flaw was found in postgresql. A purpose-crafted query can read arbitrary bytes of server memory...6.5 MediumpostgresqlBitnamiA flaw was found in postgresql. Using an UPDATE ... RETURNING command on a purpose-crafted table,...6.5 MediumpostgresqlBitnamiA flaw was found in postgresql. Using an INSERT ... ON CONFLICT ... DO UPDATE command on a...6.5 MediumpostgresqlBitnamiA flaw was found in postgresql in versions before 13.3, before 12.7, before 11.12, before 10.17...8.8 HighpostgresqlBitnamiIncorrect Authorization in PostgreSQL4.3 MediumpostgresqlBitnamiGeneration of Error Message Containing Sensitive Information in postgresql4.3 MediumpostgresqlBitnamiIncorrect Comparison, Permissive List of Allowed Inputs, and Privilege Context Switching Error in PostgreSQL7.5 HighpostgresqlBitnamiSQL Injection8.8 HighpostgresqlBitnamiUse of a Broken or Risky Cryptographic Algorithm in PostgreSQL8.1 HighpostgresqlBitnamiThe Windows installer for PostgreSQL 9.5 - 12 invokes system-provided executables that do not...7.3 HighpostgresqlBitnamiUntrusted Search Path in PostgreSQL7.3 HighpostgresqlBitnamiIt was found that PostgreSQL versions before 12.4, before 11.9 and before 10.14 did not properly...7.1 HighpostgresqlBitnamiA flaw was found in PostgreSQL's "ALTER ... DEPENDS ON EXTENSION", where sub...3.1 Low