Skip to contentPostgresql vulnerabilities
Newest
- postgresql, debian linux +1 moreSQL InjectionCVE-2020-25695Fix availableEPSS 46.4%8.8 High
- postgresql, debian linux +1 moreUse of a Broken or Risky Cryptographic Algorithm in PostgreSQLCVE-2020-25694Fix available8.1 High
- postgresqlThe Windows installer for PostgreSQL 9.5 - 12 invokes system-provided executables that do not...CVE-2020-10733Fix available7.3 High
- postgresql, canonical ubuntu linux, debian linux +1 more +3 moreUntrusted Search Path in PostgreSQLCVE-2020-14350Fix available7.3 High
- postgresql, opensuse leap +1 moreIt was found that PostgreSQL versions before 12.4, before 11.9 and before 10.14 did not properly...CVE-2020-14349Fix available7.1 High
- postgresql jdbc driver, debian linux, fedoraproject fedora +2 more +4 moreImproper Restriction of XML External Entity ReferenceCVE-2020-13692Fix available7.7 High
- postgresql, redhat decision manager, enterprise linux +1 more +3 moreA flaw was found in PostgreSQL's "ALTER ... DEPENDS ON EXTENSION", where sub...CVE-2020-1720Fix available3.1 Low
- postgresql postgresql-common, canonical ubuntu linux, debian linux +2 moreThe pg_ctlcluster script in postgresql-common in versions prior to 210 didn't drop privileges...CVE-2019-3466Fix available7.8 High
- postgresqlPostgresql Windows installer before versions 11.5, 10.10, 9.6.15, 9.5.19, 9.4.24 is vulnerable...CVE-2019-102117.8 High
- postgresqlPostgresql Windows installer before versions 11.5, 10.10, 9.6.15, 9.5.19, 9.4.24 is vulnerable...CVE-2019-102106.7 Medium
- postgresqlPostgresql, versions 11.x before 11.5, is vulnerable to a memory disclosure in cross-type...CVE-2019-10209Fix available3.1 Low
- postgresqlA flaw was discovered in postgresql where arbitrary SQL statements can be executed given a...CVE-2019-10208Fix available7.5 High
- postgresql, fedoraproject fedora, opensuse leap +1 more +3 morePostgreSQL versions 10.x before 10.9 and versions 11.x before 11.4 are vulnerable to a stack...CVE-2019-10164Fix available7.5 High
- postgresqlA vulnerability was found in postgresql versions 11.x prior to 11.3. Using a purpose-crafted...CVE-2019-10129Fix available6.5 Medium
- postgresql, opensuse leap +1 moreA vulnerability was found in PostgreSQL versions 11.x up to excluding 11.3, 10.x up to excluding...CVE-2019-10130Fix available3.1 Low
- postgresql** DISPUTED ** In PostgreSQL 9.3 through 11.2, the "COPY TO/FROM PROGRAM" function allows...CVE-2019-9193Public exploitDisputedEPSS 91.7%7.2 High
- postgresql, canonical ubuntu linux, redhat enterprise linux +2 morepostgresql before versions 11.1, 10.6 is vulnerable to a to SQL injection in pg_upgrade and...CVE-2018-16850Fix available8.0 High
- [unknown] postgresql, postgresql jdbc driver, redhat enterprise linux +2 moreModerate severity vulnerability that affects org.postgresql:pgjdbc-aggregateCVE-2018-10936Public exploitFix available8.1 High
- postgresqlThe interactive installer in PostgreSQL before 9.3.15, 9.4.x before 9.4.10, and 9.5.x before 9.5...CVE-2016-70488.1 High
- postgresql, canonical ubuntu linux, debian linux +2 moreIt was discovered that PostgreSQL versions before 10.5, 9.6.10, 9.5.14, 9.4.19, and 9.3.24 failed...CVE-2018-10925Fix available7.1 High
- postgresql, canonical ubuntu linux, debian linux +6 more +8 moreA vulnerability was found in libpq, the default PostgreSQL client library where libpq failed to...CVE-2018-10915Fix available8.5 High
- postgresql, opensuse leap +1 morepostgresql before versions 10.4, 9.6.9 is vulnerable in the adminpack extension, the pg_catalog...CVE-2018-1115Fix available4.2 Medium
- postgresql, canonical ubuntu linux, redhat cloudforms +2 moreA flaw was found in the way Postgresql allowed a user to modify the behavior of a query for other...CVE-2018-1058Public exploitFix availableEPSS 13.1%8.8 High
- postgresqlMemory disclosure vulnerability in table partitioning was found in postgresql 10.x before 10.2,...CVE-2018-1052Fix available6.5 Medium
- postgresql, canonical ubuntu linux, debian linux +1 more +3 moreIn postgresql 9.3.x before 9.3.21, 9.4.x before 9.4.16, 9.5.x before 9.5.11, 9.6.x before 9.6.7...CVE-2018-1053Fix available7.0 High
- postgresql, suse postgresql-init, linux enterprise server +2 morelocal privilege escalation in SUSE postgresql init scriptCVE-2017-14798Public exploitFix available7.3 High
- postgresqlPostgreSQL 10.x before 10.1, 9.6.x before 9.6.6, 9.5.x before 9.5.10, 9.4.x before 9.4.15, 9.3.x...CVE-2017-121726.7 Medium
- postgresqlThe Debian pg_ctlcluster, pg_createcluster, and pg_upgradecluster scripts, as distributed in the...CVE-2017-8806Fix available5.5 Medium
- postgresql, debian linux +1 moreINSERT ... ON CONFLICT DO UPDATE commands in PostgreSQL 10.x before 10.1, 9.6.x before 9.6.6, and...CVE-2017-15099Fix available6.5 Medium
- postgresql, debian linux +1 moreInvalid json_populate_recordset or jsonb_populate_recordset function calls in PostgreSQL 10.x...CVE-2017-15098Fix available8.1 High
- postgresql, debian linux +1 morePostgreSQL versions before 9.4.13, 9.5.8 and 9.6.4 are vulnerable to authorization flaw allowing...CVE-2017-7548Fix available7.5 High
- postgresqlPostgreSQL versions before 9.2.22, 9.3.18, 9.4.13, 9.5.8 and 9.6.4 are vulnerable to...CVE-2017-7547Fix available8.8 High
- postgresql, debian linux +1 morePostgreSQL versions before 9.2.22, 9.3.18, 9.4.13, 9.5.8 and 9.6.4 are vulnerable to incorrect...CVE-2017-7546Fix availableEPSS 61.6%9.8 Critical
- postgresqlPostgreSQL PL/Java after 9.0 does not honor access controls on large objects.CVE-2016-07687.5 High
- postgresqlPostgreSQL versions 8.4 - 9.6 are vulnerable to information leak in pg_user_mappings view which...CVE-2017-7486Fix available7.5 High
- postgresqlIn PostgreSQL 9.3.x before 9.3.17, 9.4.x before 9.4.12, 9.5.x before 9.5.7, and 9.6.x before 9.6...CVE-2017-7485Fix available5.9 Medium
- postgresqlIt was found that some selectivity estimation functions in PostgreSQL before 9.2.21, 9.3.x before...CVE-2017-7484Fix available7.5 High
- postgresql, debian linux +1 morePostgreSQL before 9.1.23, 9.2.x before 9.2.18, 9.3.x before 9.3.14, 9.4.x before 9.4.9, and 9.5.x...CVE-2016-5424Fix available7.1 High
- postgresql, debian linux +1 morePostgreSQL before 9.1.23, 9.2.x before 9.2.18, 9.3.x before 9.3.14, 9.4.x before 9.4.9, and 9.5.x...CVE-2016-5423Fix available8.3 High
- postgresqlThe (1) brin_page_type and (2) brin_metapage_info functions in the pageinspect extension in...CVE-2016-30659.1 Critical
- postgresqlPostgreSQL before 9.5.x before 9.5.2 does not properly maintain row-security status in cached...CVE-2016-21937.5 High
- postgresql, canonical ubuntu linux, debian linux +2 morePostgreSQL before 9.1.20, 9.2.x before 9.2.15, 9.3.x before 9.3.11, 9.4.x before 9.4.6, and 9.5.x...CVE-2016-0773Fix available7.5 High
- postgresql, canonical ubuntu linux, debian linux +2 morePostgreSQL before 9.1.20, 9.2.x before 9.2.15, 9.3.x before 9.3.11, 9.4.x before 9.4.6, and 9.5.x...CVE-2016-0766Fix available8.8 High
- postgresql, canonical ubuntu linux, debian linux +2 moreMultiple stack-based buffer overflows in json parsing in PostgreSQL before 9.3.x before 9.3.10...CVE-2015-5289Fix available6.4 Medium
- postgresqlThe crypt function in contrib/pgcrypto in PostgreSQL before 9.0.23, 9.1.x before 9.1.19, 9.2.x...CVE-2015-5288Fix available6.4 Medium
- postgresql, canonical ubuntu linux, debian linux +2 morecontrib/pgcrypto in PostgreSQL before 9.0.20, 9.1.x before 9.1.16, 9.2.x before 9.2.11, 9.3.x...CVE-2015-3167Fix available7.5 High
- postgresql, canonical ubuntu linux, debian linux +2 moreThe snprintf implementation in PostgreSQL before 9.0.20, 9.1.x before 9.1.16, 9.2.x before 9.2.11...CVE-2015-3166Fix available9.8 Critical
- postgresql, apple mac os x server, canonical ubuntu linux +1 more +3 moreDouble free vulnerability in PostgreSQL before 9.0.20, 9.1.x before 9.1.16, 9.2.x before 9.2.11,...CVE-2015-3165Fix available4.3 Medium
- postgresql, debian linux +1 moreStack-based buffer overflow in the *printf function implementations in PostgreSQL before 9.0.19,...CVE-2015-02428.8 High
- postgresql, debian linux +1 morePostgreSQL before 9.0.19, 9.1.x before 9.1.15, 9.2.x before 9.2.10, 9.3.x before 9.3.6, and 9.4.x...CVE-2015-0244Fix available9.8 Critical
- Show moreLoading…