Skip to contentPostgresql vulnerabilities
Newest
- postgresql, red hat ansible automation platform 2.2, enterprise linux 10 +16 more +18 morePostgreSQL server undersizes allocations, via integer wraparoundCVE-2026-6473Fix available8.8 High
- postgresqlPostgreSQL CREATE TYPE does not check multirange schema CREATE privilegeCVE-2026-6472Fix available5.4 Medium
- pgjdbc, postgresql jdbc driver, red hat amq broker 7.13.6 +17 more +19 morepgjdbc: Unbounded PBKDF2 iterations in SCRAM authentication allows CPU exhaustion DoSCVE-2026-42198Fix available7.5 High
- postgresql, red hat enterprise linux 10, enterprise linux 9 +1 more +3 morePostgreSQL pg_trgm heap buffer overflow writes pattern onto server memoryCVE-2026-2007Fix available8.2 High
- postgresql, red hat enterprise linux 10, enterprise linux 10.0 extended update support +18 more +20 morePostgreSQL missing validation of multibyte character length executes arbitrary codeCVE-2026-2006Fix available8.8 High
- postgresql, red hat enterprise linux 10, enterprise linux 10.0 extended update support +18 more +20 morePostgreSQL pgcrypto heap buffer overflow executes arbitrary codeCVE-2026-2005Public exploitFix available8.8 High
- postgresql, red hat enterprise linux 10, enterprise linux 10.0 extended update support +18 more +20 morePostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary codeCVE-2026-2004Fix available8.8 High
- postgresqlPostgreSQL oidvector discloses a few bytes of memoryCVE-2026-2003Fix available4.3 Medium
- pgjdbc, postgresql jdbc driver +1 morepgjdbc Client Allows Fallback to Insecure Authentication Despite channelBinding=require ConfigurationCVE-2025-49146Fix available8.2 High
- postgresqlPostgreSQL PL/Perl environment variable changes execute arbitrary codeCVE-2024-10979Fix available8.8 High
- postgresql, debian linux +1 morePostgreSQL SET ROLE, SET SESSION AUTHORIZATION reset to wrong user IDCVE-2024-10978Fix available4.2 Medium
- postgresqlPostgreSQL libpq retains an error message from man-in-the-middleCVE-2024-10977Fix available3.1 Low
- postgresqlPostgreSQL row security below e.g. subqueries disregards user ID changesCVE-2024-10976Fix available4.2 Medium
- pgadmin 4, pgadmin.org pgadmin 4 +1 moreOAuth2 client id and secret exposed through the web browser in pgAdmin 4CVE-2024-9014Public exploitFix available9.9 Critical
- postgresqlPostgreSQL relation replacement during pg_dump executes arbitrary SQLCVE-2024-7348Fix available8.8 High
- postgresqlPostgreSQL pg_stats_ext and pg_stats_ext_exprs lack authorization checksCVE-2024-4317Fix available3.1 Low
- pgadmin 4, pgadmin.org pgadmin 4, postgresql pgadmin +1 more +3 moreXSS vulnerability in /settings/store API response json payload in pgAdmin 4CVE-2024-4216Fix available7.4 High
- pgadmin 4, pgadmin.org pgadmin 4, postgresql pgadmin +1 more +3 moreThe Multi Factor Authentication bypass vulnerability in pgAdmin 4CVE-2024-4215Fix available7.4 High
- pgadmin 4, pgadmin.org pgadmin 4, fedoraproject fedora +2 moreRemote Code Execution Vulnerability through the validate binary path API in pgAdmin 4CVE-2024-3116Public exploitFix availableEPSS 65.8%7.4 High
- pgadmin 4, pgadmin.org pgadmin 4, fedoraproject fedora +2 moreUnsafe Deserialisation and Remote Code Execution by an Authenticated user in pgAdmin 4CVE-2024-2044Public exploitFix availableEPSS 79.5%9.9 Critical
- pgjdbc, postgresql jdbc driver, fedoraproject fedora +2 morepgjdbc SQL Injection via line comment generationCVE-2024-1597Fix available10.0 Critical
- postgresqlPostgreSQL non-owner REFRESH MATERIALIZED VIEW CONCURRENTLY executes arbitrary SQLCVE-2024-0985Fix available8.0 High
- postgresql, supabase postgres +1 moreSupabase PostgreSQL v15.1 was discovered to contain a SQL injection vulnerability via the...CVE-2024-24213Disputed9.8 Critical
- postgresql, red hat advanced cluster security 4.2, enterprise linux 6 +31 more +33 morePostgresql: role pg_signal_backend can signal certain superuser processes.CVE-2023-5870Fix available2.2 Low
- postgresql, red hat advanced cluster security 4.2, enterprise linux 6 +37 more +39 morePostgresql: buffer overrun from integer overflow in array modificationCVE-2023-5869Fix available8.8 High
- postgresql, red hat advanced cluster security 4.2, enterprise linux 6 +31 more +33 morePostgresql: memory disclosure in aggregate function callsCVE-2023-5868Fix available4.3 Medium
- postgresqlAn issue was discovered in PostgreSQL 12.2 allows attackers to cause a denial of service via...CVE-2020-21469Fix availableDisputed4.4 Medium
- postgresql, debian linux, red hat enterprise linux 6 +7 more +9 morePostgresql: merge fails to enforce update or select row security policiesCVE-2023-39418Fix available3.1 Low
- postgresql, debian linux, red hat advanced cluster security 4.2 +19 more +21 morePostgresql: extension script @substitutions@ within quoting allow sql injectionCVE-2023-39417Fix available7.5 High
- postgresql, fedoraproject fedora, redhat enterprise linux +1 more +3 moreRow security policies disregard user ID changes after inlining; PostgreSQL could permit incorrect...CVE-2023-2455Fix available5.4 Medium
- postgresql, fedoraproject fedora, redhat enterprise linux +1 more +3 moreschema_element defeats protective search_path changes; It was found that certain database calls...CVE-2023-2454Fix available7.2 High
- postgresql, fedoraproject fedora, redhat enterprise linux +3 more +5 moreIn PostgreSQL, a modified, unauthenticated server can send an unterminated string during the...CVE-2022-41862Fix available3.7 Low
- pgjdbc, postgresql jdbc driver, debian linux +2 moreTemporaryFolder on unix-like systems does not limit access to created files in pgjdbcCVE-2022-41946Fix available4.7 Medium
- postgresqlOdyssey passes to client unencrypted bytes from man-in-the-middle When Odyssey storage is...CVE-2021-43767Fix available5.9 Medium
- postgresql, fedoraproject fedora, redhat enterprise linux +2 moreA vulnerability found in postgresql. On this security issue an attack requires permission to...CVE-2022-2625Fix available8.0 High
- pgjdbc, postgresql jdbc driver, debian linux +1 more +3 moreSQL Injection in ResultSet.refreshRow() with malicious column names in pgjdbcCVE-2022-31197Fix available7.1 High
- postgresqlA flaw was found in PostgreSQL. There is an issue with incomplete efforts to operate safely when...CVE-2022-1552Fix availableEPSS 17.0%8.8 High
- postgresql jdbc driver, debian linux +1 morepgjdbc Arbitrary File Write VulnerabilityCVE-2022-26520Fix availableDisputed9.8 Critical
- postgresql jdbc driver, debian linux, fedoraproject fedora +1 more +3 moreUnchecked Class Instantiation when providing Plugin ClassesCVE-2022-21724Fix available7.0 High
- postgresqlA man-in-the-middle attacker can inject false responses to the client's first few queries,...CVE-2021-23222Fix available5.9 Medium
- fedoraproject fedora, postgresql, redhat enterprise linux +3 more +5 moreWhen the server is configured to use trust authentication with a clientcert requirement or to use...CVE-2021-23214Fix available8.1 High
- postgresql, fedoraproject fedora, redhat enterprise linux +4 more +6 moreA flaw was found in postgresql. A purpose-crafted query can read arbitrary bytes of server memory...CVE-2021-3677Fix available6.5 Medium
- postgresql, redhat jboss enterprise application platform +1 moreA flaw was found in postgresql. Using an UPDATE ... RETURNING command on a purpose-crafted table,...CVE-2021-32029Fix available6.5 Medium
- postgresqlA flaw was found in postgresql. Using an INSERT ... ON CONFLICT ... DO UPDATE command on a...CVE-2021-32028Fix available6.5 Medium
- postgresql, redhat enterprise linux, jboss enterprise application platform +1 more +3 moreA flaw was found in postgresql in versions before 13.3, before 12.7, before 11.12, before 10.17...CVE-2021-32027Fix available8.8 High
- postgresqlA vulnerability was found in postgresql versions 11.x prior to 11.3. The Windows installer for...CVE-2019-101287.8 High
- postgresqlA vulnerability was found in postgresql versions 11.x prior to 11.3. The Windows installer for...CVE-2019-101278.8 High
- postgresql, fedoraproject fedora, redhat enterprise linux +1 more +3 moreIncorrect Authorization in PostgreSQLCVE-2021-20229Fix available4.3 Medium
- postgresql, redhat enterprise linux, software collections +2 moreGeneration of Error Message Containing Sensitive Information in postgresqlCVE-2021-3393Fix available4.3 Medium
- postgresql, debian linux +1 moreIncorrect Comparison, Permissive List of Allowed Inputs, and Privilege Context Switching Error in PostgreSQLCVE-2020-25696Fix available7.5 High
- Show moreLoading…