Skip to contentPostgresql vulnerabilities
Newest
- postgresql, debian linux +1 moreMultiple buffer overflows in contrib/pgcrypto in PostgreSQL before 9.0.19, 9.1.x before 9.1.15, 9...CVE-2015-0243Fix available8.8 High
- postgresql, debian linux +1 moreThe to_char function in PostgreSQL before 9.0.19, 9.1.x before 9.1.15, 9.2.x before 9.2.10, 9.3.x...CVE-2015-0241Fix available8.8 High
- postgresql, debian linux +1 morePostgreSQL before 9.0.19, 9.1.x before 9.1.15, 9.2.x before 9.2.10, 9.3.x before 9.3.6, and 9.4.x...CVE-2014-8161Fix available4.3 Medium
- postgresqlMultiple integer overflows in contrib/hstore/hstore_io.c in PostgreSQL 9.0.x before 9.0.16, 9.1.x...CVE-2014-2669Fix available6.5 Medium
- postgresql, apple mac os x, mac os x server +2 moreThe "make check" command for the test suites in PostgreSQL 9.3.3 and earlier does not properly...CVE-2014-0067Fix available4.6 Medium
- postgresqlThe chkpass extension in PostgreSQL before 8.4.20, 9.0.x before 9.0.16, 9.1.x before 9.1.12, 9.2...CVE-2014-0066Fix available4.0 Medium
- postgresqlMultiple buffer overflows in PostgreSQL before 8.4.20, 9.0.x before 9.0.16, 9.1.x before 9.1.12,...CVE-2014-0065Fix available6.5 Medium
- postgresqlMultiple integer overflows in the path_in and other unspecified functions in PostgreSQL before 8...CVE-2014-0064Fix available6.5 Medium
- postgresqlMultiple stack-based buffer overflows in PostgreSQL before 8.4.20, 9.0.x before 9.0.16, 9.1.x...CVE-2014-0063Fix available6.5 Medium
- postgresqlRace condition in the (1) CREATE INDEX and (2) unspecified ALTER TABLE commands in PostgreSQL...CVE-2014-0062Fix available4.9 Medium
- postgresqlThe validator functions for the procedural languages (PLs) in PostgreSQL before 8.4.20, 9.0.x...CVE-2014-0061Fix available6.5 Medium
- postgresqlPostgreSQL before 8.4.20, 9.0.x before 9.0.16, 9.1.x before 9.1.12, 9.2.x before 9.2.7, and 9.3.x...CVE-2014-0060Fix available4.0 Medium
- postgresqlPostgreSQL, possibly 9.2.x before 9.2.4, 9.1.x before 9.1.9, 9.0.x before 9.0.13, 8.4.x before 8...CVE-2013-190310.0 High
- postgresqlPostgreSQL, 9.2.x before 9.2.4, 9.1.x before 9.1.9, 9.0.x before 9.0.13, 8.4.x before 8.4.17, and...CVE-2013-190210.0 High
- postgresql, canonical ubuntu linux +1 morePostgreSQL 9.2.x before 9.2.4 and 9.1.x before 9.1.9 does not properly check REPLICATION...CVE-2013-19014.0 Medium
- postgresql, canonical ubuntu linux +1 morePostgreSQL 9.2.x before 9.2.4, 9.1.x before 9.1.9, 9.0.x before 9.0.13, and 8.4.x before 8.4.17,...CVE-2013-1900Fix available8.5 High
- postgresql, canonical ubuntu linux +1 moreArgument injection vulnerability in PostgreSQL 9.2.x before 9.2.4, 9.1.x before 9.1.9, and 9.0.x...CVE-2013-1899EPSS 54.3%6.5 Medium
- postgresqlPostgreSQL 9.2.x before 9.2.3, 9.1.x before 9.1.8, 9.0.x before 9.0.12, 8.4.x before 8.4.16, and...CVE-2013-0255Fix available6.8 Medium
- postgresql, postgresql jdbc driver +1 moreUnescaped parameters in the PostgreSQL JDBC driverCVE-2012-1618Fix available7.5 High
- postgresql, apple mac os x server, canonical ubuntu linux +6 more +8 moreThe xml_parse function in the libxml2 support in the core server component in PostgreSQL 8.3...CVE-2012-34896.5 Medium
- postgresqlThe libxslt support in contrib/xml2 in PostgreSQL 8.3 before 8.3.20, 8.4 before 8.4.13, 9.0...CVE-2012-3488Fix available4.9 Medium
- postgresqlPostgreSQL 8.3.x before 8.3.19, 8.4.x before 8.4.12, 9.0.x before 9.0.8, and 9.1.x before 9.1.4...CVE-2012-26554.0 Medium
- freebsd, php, postgresql +1 more +3 moreThe crypt_des (aka DES-based crypt) function in FreeBSD before 9.0-RELEASE-p2, as used in PHP,...CVE-2012-2143Fix available4.3 Medium
- postgresqlCRLF injection vulnerability in pg_dump in PostgreSQL 8.3.x before 8.3.18, 8.4.x before 8.4.11, 9...CVE-2012-08686.8 Medium
- postgresql, debian linux, opensuse project opensuse +8 more +10 morePostgreSQL 8.4.x before 8.4.11, 9.0.x before 9.0.7, and 9.1.x before 9.1.3 truncates the common...CVE-2012-08674.3 Medium
- postgresqlCREATE TRIGGER in PostgreSQL 8.3.x before 8.3.18, 8.4.x before 8.4.11, 9.0.x before 9.0.7, and 9...CVE-2012-08666.5 Medium
- php, postgresql, openwall crypt blowfish +2 morecrypt_blowfish before 1.1, as used in PHP before 5.3.7 on certain platforms, PostgreSQL before 8...CVE-2011-2483Fix available5.0 Medium
- postgresqlBuffer overflow in the gettoken function in contrib/intarray/_int_bool.c in the intarray array...CVE-2010-4015Fix available6.5 Medium
- postgresqlThe PL/perl and PL/Tcl implementations in PostgreSQL 7.4 before 7.4.30, 8.0 before 8.0.26, 8.1...CVE-2010-3433Fix available6.0 Medium
- postgresqlPostgreSQL 7.4 before 7.4.29, 8.0 before 8.0.25, 8.1 before 8.1.21, 8.2 before 8.2.17, 8.3 before...CVE-2010-19755.5 Medium
- postgresqlThe Safe (aka Safe.pm) module 2.26, and certain earlier versions, for Perl, as used in PostgreSQL...CVE-2010-1447Fix available8.5 High
- postgresqlThe PL/Tcl implementation in PostgreSQL 7.4 before 7.4.29, 8.0 before 8.0.25, 8.1 before 8.1.21,...CVE-2010-11706.0 Medium
- postgresqlPostgreSQL 7.4 before 7.4.29, 8.0 before 8.0.25, 8.1 before 8.1.21, 8.2 before 8.2.17, 8.3 before...CVE-2010-11698.5 High
- postgresqlInteger overflow in src/backend/executor/nodeHash.c in PostgreSQL 8.4.1 and earlier, and 8.5...CVE-2010-0733Public exploit3.5 Low
- postgresqlThe bitsubstr function in backend/utils/adt/varbit.c in PostgreSQL 8.0.23, 8.1.11, and 8.3.8...CVE-2010-0442Public exploitEPSS 13.3%6.5 Medium
- postgresqlPostgreSQL 7.4.x before 7.4.27, 8.0.x before 8.0.23, 8.1.x before 8.1.19, 8.2.x before 8.2.15, 8...CVE-2009-41366.5 Medium
- postgresqlPostgreSQL 7.4.x before 7.4.27, 8.0.x before 8.0.23, 8.1.x before 8.1.19, 8.2.x before 8.2.15, 8...CVE-2009-40345.8 Medium
- postgresql, canonical ubuntu linux, fedoraproject fedora +3 more +5 moreThe core server component in PostgreSQL 8.3 before 8.3.8 and 8.2 before 8.2.14, when using LDAP...CVE-2009-32316.8 Medium
- postgresqlThe core server component in PostgreSQL 8.4 before 8.4.1, 8.3 before 8.3.8, 8.2 before 8.2.14, 8...CVE-2009-3230Fix available6.5 Medium
- postgresqlThe core server component in PostgreSQL 8.4 before 8.4.1, 8.3 before 8.3.8, and 8.2 before 8.2.14...CVE-2009-32294.0 Medium
- postgresqlPostgreSQL before 8.3.7, 8.2.13, 8.1.17, 8.0.21, and 7.4.25 allows remote authenticated users to...CVE-2009-0922Public exploitEPSS 10.2%4.0 Medium
- postgresql, debian linux, fedoraproject fedora +2 moreThe DBLink module in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, 7.4...CVE-2007-66017.2 High
- postgresqlPostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, 7.4 before 7.4.19, and 7.3...CVE-2007-66006.5 Medium
- postgresql, tcl tk tk +1 moreAlgorithmic complexity vulnerability in the regular expression parser in TCL before 8.4.17, as...CVE-2007-60676.8 Medium
- postgresql, canonical ubuntu linux, debian linux +1 more +3 moreThe regular expression parser in TCL before 8.4.17, as used in PostgreSQL 8.2 before 8.2.6, 8.1...CVE-2007-47724.0 Medium
- postgresql, tcl tk tk +1 moreThe regular expression parser in TCL before 8.4.17, as used in PostgreSQL 8.2 before 8.2.6, 8.1...CVE-2007-47696.8 Medium
- postgresqlThe Database Link library (dblink) in PostgreSQL 8.1 implements functions via CREATE statements...CVE-2007-3280Public exploitEPSS 25.5%9.0 High
- postgresqlPostgreSQL 8.1 and probably later versions, when the PL/pgSQL (plpgsql) language has been created...CVE-2007-327910.0 High
- postgresql, debian linux +1 morePostgreSQL 8.1 and probably later versions, when local trust authentication is enabled and the...CVE-2007-32786.9 Medium
- postgresql, canonical ubuntu linux, debian linux +2 moreUntrusted search path vulnerability in PostgreSQL before 7.3.19, 7.4.x before 7.4.17, 8.0.x...CVE-2007-2138Fix available6.0 Medium
- Show moreLoading…