Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

postgresql postgresql 8.4.1 vulnerabilities and exploits

(subscribe to this query)
3.5
CVSSv2
CVE-2010-0733
Integer overflow in src/backend/executor/nodeHash.c in PostgreSQL 8.4.1 and previous versions, and 8.5 up to and including 8.5alpha2, allows remote authenticated users to cause a denial of service (daemon crash) via a SELECT statement with many LEFT JOIN clauses, related to certa...
Postgresql Postgresql 8.1.10Postgresql Postgresql 8.1.6Postgresql Postgresql 8.2.9Postgresql Postgresql 8.0.7Postgresql Postgresql 8.0.2Postgresql Postgresql 8.1.15Postgresql Postgresql 8.1.7Postgresql Postgresql 8.3.6Postgresql Postgresql 8.2.10Postgresql Postgresql 8.0.22Postgresql Postgresql 8.2.15Postgresql Postgresql 8.2.4Postgresql Postgresql 8.0.17Postgresql Postgresql 8.0.10Postgresql Postgresql 8.1.20Postgresql Postgresql 8.1Postgresql Postgresql 8.1.19Postgresql Postgresql 8.2.11Postgresql Postgresql 8.1.13Postgresql Postgresql 8.0.12Postgresql Postgresql 8.2.12Postgresql Postgresql 8.0.9
6.5
CVSSv2
CVE-2012-0866
CREATE TRIGGER in PostgreSQL 8.3.x prior to 8.3.18, 8.4.x prior to 8.4.11, 9.0.x prior to 9.0.7, and 9.1.x prior to 9.1.3 does not properly check the execute permission for trigger functions marked SECURITY DEFINER, which allows remote authenticated users to execute otherwise res...
Postgresql Postgresql 8.3.7Postgresql Postgresql 8.3.5Postgresql Postgresql 8.3.16Postgresql Postgresql 8.3.15Postgresql Postgresql 8.3.13Postgresql Postgresql 8.3.6Postgresql Postgresql 8.3.3Postgresql Postgresql 8.3Postgresql Postgresql 8.3.11Postgresql Postgresql 8.3.8Postgresql Postgresql 8.3.2Postgresql Postgresql 8.3.1Postgresql Postgresql 8.3.4Postgresql Postgresql 8.3.14Postgresql Postgresql 8.3.10Postgresql Postgresql 8.3.9Postgresql Postgresql 8.3.12Postgresql Postgresql 8.3.17Postgresql Postgresql 8.4.2Postgresql Postgresql 8.4.3Postgresql Postgresql 8.4.5Postgresql Postgresql 8.4.1
6.8
CVSSv2
CVE-2012-0868
CRLF injection vulnerability in pg_dump in PostgreSQL 8.3.x prior to 8.3.18, 8.4.x prior to 8.4.11, 9.0.x prior to 9.0.7, and 9.1.x prior to 9.1.3 allows user-assisted remote malicious users to execute arbitrary SQL commands via a crafted file containing object names with newline...
Postgresql Postgresql 8.3.6Postgresql Postgresql 8.3.10Postgresql Postgresql 8.3.3Postgresql Postgresql 8.3Postgresql Postgresql 8.3.8Postgresql Postgresql 8.3.13Postgresql Postgresql 8.3.1Postgresql Postgresql 8.3.4Postgresql Postgresql 8.3.11Postgresql Postgresql 8.3.5Postgresql Postgresql 8.3.2Postgresql Postgresql 8.3.15Postgresql Postgresql 8.3.14Postgresql Postgresql 8.3.9Postgresql Postgresql 8.3.7Postgresql Postgresql 8.3.12Postgresql Postgresql 8.3.17Postgresql Postgresql 8.3.16Postgresql Postgresql 8.4.1Postgresql Postgresql 8.4.6Postgresql Postgresql 8.4.9Postgresql Postgresql 8.4.10
6.5
CVSSv2
CVE-2010-4015
Buffer overflow in the gettoken function in contrib/intarray/_int_bool.c in the intarray array module in PostgreSQL 9.0.x prior to 9.0.3, 8.4.x prior to 8.4.7, 8.3.x prior to 8.3.14, and 8.2.x prior to 8.2.20 allows remote authenticated users to cause a denial of service (crash) ...
Postgresql Postgresql 8.3.6Postgresql Postgresql 8.3.3Postgresql Postgresql 8.3.2Postgresql Postgresql 8.3.12Postgresql Postgresql 8.3.1Postgresql Postgresql 8.3.5Postgresql Postgresql 8.3.8Postgresql Postgresql 8.3.7Postgresql Postgresql 8.3.10Postgresql Postgresql 8.3Postgresql Postgresql 8.3.4Postgresql Postgresql 8.3.11Postgresql Postgresql 8.3.9Postgresql Postgresql 8.3.13Postgresql Postgresql 9.0.1Postgresql Postgresql 9.0Postgresql Postgresql 9.0.2Postgresql Postgresql 8.4.4Postgresql Postgresql 8.4.1Postgresql Postgresql 8.4.3Postgresql Postgresql 8.4.6Postgresql Postgresql 8.4
4
CVSSv2
CVE-2012-2655
PostgreSQL 8.3.x prior to 8.3.19, 8.4.x prior to 8.4.12, 9.0.x prior to 9.0.8, and 9.1.x prior to 9.1.4 allows remote authenticated users to cause a denial of service (server crash) by adding the (1) SECURITY DEFINER or (2) SET attributes to a procedural language's call hand...
Postgresql Postgresql 8.3.13Postgresql Postgresql 8.3.6Postgresql Postgresql 8.3.4Postgresql Postgresql 8.3.11Postgresql Postgresql 8.3.8Postgresql Postgresql 8.3.2Postgresql Postgresql 8.3.1Postgresql Postgresql 8.3.14Postgresql Postgresql 8.3.17Postgresql Postgresql 8.3.7Postgresql Postgresql 8.3.5Postgresql Postgresql 8.3.16Postgresql Postgresql 8.3.15Postgresql Postgresql 8.3.10Postgresql Postgresql 8.3.9Postgresql Postgresql 8.3Postgresql Postgresql 8.3.12Postgresql Postgresql 8.3.3Postgresql Postgresql 8.3.18Postgresql Postgresql 8.4.3Postgresql Postgresql 8.4.4Postgresql Postgresql 8.4
4.9
CVSSv2
CVE-2012-3488
The libxslt support in contrib/xml2 in PostgreSQL 8.3 prior to 8.3.20, 8.4 prior to 8.4.13, 9.0 prior to 9.0.9, and 9.1 prior to 9.1.5 does not properly restrict access to files and URLs, which allows remote authenticated users to modify data, obtain sensitive information, or tri...
Postgresql Postgresql 9.1.2Postgresql Postgresql 9.1.3Postgresql Postgresql 9.1.4Postgresql Postgresql 9.1Postgresql Postgresql 9.1.1Postgresql Postgresql 8.4.12Postgresql Postgresql 8.4.6Postgresql Postgresql 8.4.10Postgresql Postgresql 8.4.3Postgresql Postgresql 8.4.4Postgresql Postgresql 8.4.7Postgresql Postgresql 8.4.5Postgresql Postgresql 8.4.1Postgresql Postgresql 8.4.11Postgresql Postgresql 8.4Postgresql Postgresql 8.4.2Postgresql Postgresql 8.4.8Postgresql Postgresql 8.4.9Postgresql Postgresql 8.3.18Postgresql Postgresql 8.3.13Postgresql Postgresql 8.3.2Postgresql Postgresql 8.3.1
6.8
CVSSv2
CVE-2013-0255
PostgreSQL 9.2.x prior to 9.2.3, 9.1.x prior to 9.1.8, 9.0.x prior to 9.0.12, 8.4.x prior to 8.4.16, and 8.3.x prior to 8.3.23 does not properly declare the enum_recv function in backend/utils/adt/enum.c, which causes it to be invoked with incorrect arguments and allows remote au...
Postgresql Postgresql 8.3.16Postgresql Postgresql 8.3.17Postgresql Postgresql 8.3.20Postgresql Postgresql 8.3.8Postgresql Postgresql 8.3.21Postgresql Postgresql 8.3.22Postgresql Postgresql 8.3.2Postgresql Postgresql 8.3.1Postgresql Postgresql 8.3.19Postgresql Postgresql 8.3.18Postgresql Postgresql 8.3.6Postgresql Postgresql 8.3.5Postgresql Postgresql 8.3.12Postgresql Postgresql 8.3.9Postgresql Postgresql 8.3.11Postgresql Postgresql 8.3.14Postgresql Postgresql 8.3.7Postgresql Postgresql 8.3.15Postgresql Postgresql 8.3.4Postgresql Postgresql 8.3.3Postgresql Postgresql 8.3.10Postgresql Postgresql 8.3.13
4.6
CVSSv2
CVE-2014-0067
The "make check" command for the test suites in PostgreSQL 9.3.3 and previous versions does not properly invoke initdb to specify the authentication requirements for a database cluster to be used for the tests, which allows local users to gain privileges by leveraging a...
Apple Mac Os X 10.10.4Apple Mac Os X Server 5.0.3Postgresql Postgresql 9.1.7Postgresql Postgresql 9.1.6Postgresql Postgresql 9.0.8Postgresql Postgresql 9.1.5Postgresql Postgresql 9.1.2Postgresql Postgresql 9.1.3Postgresql Postgresql 9.0.6Postgresql Postgresql 9.0.5Postgresql Postgresql 9.0.10Postgresql Postgresql 9.0Postgresql Postgresql 8.4.3Postgresql Postgresql 8.4.2Postgresql Postgresql 8.4.16Postgresql Postgresql 8.4.1Postgresql Postgresql 9.3.2Postgresql Postgresql 9.1.11Postgresql Postgresql 9.1.10Postgresql Postgresql 9.2Postgresql Postgresql 9.1.8Postgresql Postgresql 9.1.1
10
CVSSv2
CVE-2013-1902
PostgreSQL, 9.2.x prior to 9.2.4, 9.1.x prior to 9.1.9, 9.0.x prior to 9.0.13, 8.4.x prior to 8.4.17, and 8.3.x prior to 8.3.23 generates insecure temporary files with predictable filenames, which has unspecified impact and attack vectors related to "graphical installers for...
Postgresql Postgresql 9.2.3Postgresql Postgresql 9.2.2Postgresql Postgresql 9.2.1Postgresql Postgresql 9.2Postgresql Postgresql 9.1.1Postgresql Postgresql 9.1.5Postgresql Postgresql 9.1Postgresql Postgresql 9.1.8Postgresql Postgresql 9.1.2Postgresql Postgresql 9.1.3Postgresql Postgresql 9.1.6Postgresql Postgresql 9.1.7Postgresql Postgresql 9.1.4Postgresql Postgresql 9.0.1Postgresql Postgresql 9.0.2Postgresql Postgresql 9.0.10Postgresql Postgresql 9.0.8Postgresql Postgresql 9.0.7Postgresql Postgresql 9.0.9Postgresql Postgresql 9.0.11Postgresql Postgresql 9.0.12Postgresql Postgresql 9.0
10
CVSSv2
CVE-2013-1903
PostgreSQL, possibly 9.2.x prior to 9.2.4, 9.1.x prior to 9.1.9, 9.0.x prior to 9.0.13, 8.4.x prior to 8.4.17, and 8.3.x prior to 8.3.23 incorrectly provides the superuser password to scripts related to "graphical installers for Linux and Mac OS X," which has unspecifie...
Postgresql Postgresql 9.2.3Postgresql Postgresql 9.2.2Postgresql Postgresql 9.2.1Postgresql Postgresql 9.2Postgresql Postgresql 9.1.3Postgresql Postgresql 9.1.6Postgresql Postgresql 9.1.7Postgresql Postgresql 9.1.4Postgresql Postgresql 9.1.1Postgresql Postgresql 9.1.5Postgresql Postgresql 9.1Postgresql Postgresql 9.1.8Postgresql Postgresql 9.1.2Postgresql Postgresql 9.0.12Postgresql Postgresql 9.0Postgresql Postgresql 9.0.5Postgresql Postgresql 9.0.3Postgresql Postgresql 9.0.6Postgresql Postgresql 9.0.4Postgresql Postgresql 9.0.1Postgresql Postgresql 9.0.2Postgresql Postgresql 9.0.10
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook