postgresql

7 results · Clear filters · Feed

• High 7.5
  CVE-2023-39417

  Postgresql: extension script @substitutions@ within quoting allow sql injection

  IN THE EXTENSION SCRIPT, a SQL Injection vulnerability was found in PostgreSQL if it uses @extowner@, @extschema@, or @extschema:...@ inside a quoting construct (dollar quoting, '', or ""). If an administrator has installed files of a vulnerable, trusted, non…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Alpine
  Aug 11, 2023
• High 7.2
  CVE-2023-2454

  schema_element defeats protective search_path changes; It was found that certain database calls in PostgreSQL could per…

  postgresql-9.3 postgresql15 postgresql-9.5 postgresql-10 Debian Ubuntu Alpine
  Jun 9, 2023
• High 7.5
  CVE-2019-10208

  A flaw was discovered in postgresql versions 9.4.x before 9.4.24, 9.5.x before 9.5.19, 9.6.x before 9.6.15, 10.x before…

  PostgreSQL postgresql postgresql-9.3 postgresql15 Ubuntu Alpine
  Oct 29, 2019
• High 7.5
  CVE-2019-10164

  PostgreSQL versions 10.x before 10.9 and versions 11.x before 11.4 are vulnerable to a stack-based buffer overflow. Any…

  PostgreSQL postgresql postgresql15 postgresql-10 Ubuntu Alpine
  Jun 26, 2019
• High 8.0
  CVE-2018-16850

  postgresql before versions 11.1, 10.6 is vulnerable to a to SQL injection in pg_upgrade and pg_dump via CREATE TRIGGER …

  The PostgreSQL Project postgresql postgresql15 postgresql-10 Ubuntu Alpine
  Nov 13, 2018
• High 7.1
  CVE-2018-10925

  It was discovered that PostgreSQL versions before 10.5, 9.6.10, 9.5.14, 9.4.19, and 9.3.24 failed to properly check aut…

  PostgreSQL Global Development Group PostgreSQL postgresql15 postgresql-9.5 Ubuntu Alpine
  Aug 9, 2018
• High 8.5
  CVE-2018-10915

  A vulnerability was found in libpq, the default PostgreSQL client library where libpq failed to properly reset its inte…

  PostgreSQL Global Development Group PostgreSQL postgresql-9.3 postgresql15 Ubuntu Alpine
  Aug 9, 2018