Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

postgresql postgresql 8.4.2 vulnerabilities and exploits

(subscribe to this query)
6.8
CVSSv2
CVE-2012-0868
CRLF injection vulnerability in pg_dump in PostgreSQL 8.3.x prior to 8.3.18, 8.4.x prior to 8.4.11, 9.0.x prior to 9.0.7, and 9.1.x prior to 9.1.3 allows user-assisted remote malicious users to execute arbitrary SQL commands via a crafted file containing object names with newline...
Postgresql Postgresql 8.3.6Postgresql Postgresql 8.3.10Postgresql Postgresql 8.3.3Postgresql Postgresql 8.3Postgresql Postgresql 8.3.8Postgresql Postgresql 8.3.13Postgresql Postgresql 8.3.1Postgresql Postgresql 8.3.4Postgresql Postgresql 8.3.11Postgresql Postgresql 8.3.5Postgresql Postgresql 8.3.2Postgresql Postgresql 8.3.15Postgresql Postgresql 8.3.14Postgresql Postgresql 8.3.9Postgresql Postgresql 8.3.7Postgresql Postgresql 8.3.12Postgresql Postgresql 8.3.17Postgresql Postgresql 8.3.16Postgresql Postgresql 8.4.1Postgresql Postgresql 8.4.6Postgresql Postgresql 8.4.9Postgresql Postgresql 8.4.10
6.5
CVSSv2
CVE-2012-0866
CREATE TRIGGER in PostgreSQL 8.3.x prior to 8.3.18, 8.4.x prior to 8.4.11, 9.0.x prior to 9.0.7, and 9.1.x prior to 9.1.3 does not properly check the execute permission for trigger functions marked SECURITY DEFINER, which allows remote authenticated users to execute otherwise res...
Postgresql Postgresql 8.3.7Postgresql Postgresql 8.3.5Postgresql Postgresql 8.3.16Postgresql Postgresql 8.3.15Postgresql Postgresql 8.3.13Postgresql Postgresql 8.3.6Postgresql Postgresql 8.3.3Postgresql Postgresql 8.3Postgresql Postgresql 8.3.11Postgresql Postgresql 8.3.8Postgresql Postgresql 8.3.2Postgresql Postgresql 8.3.1Postgresql Postgresql 8.3.4Postgresql Postgresql 8.3.14Postgresql Postgresql 8.3.10Postgresql Postgresql 8.3.9Postgresql Postgresql 8.3.12Postgresql Postgresql 8.3.17Postgresql Postgresql 8.4.2Postgresql Postgresql 8.4.3Postgresql Postgresql 8.4.5Postgresql Postgresql 8.4.1
6.5
CVSSv2
CVE-2010-4015
Buffer overflow in the gettoken function in contrib/intarray/_int_bool.c in the intarray array module in PostgreSQL 9.0.x prior to 9.0.3, 8.4.x prior to 8.4.7, 8.3.x prior to 8.3.14, and 8.2.x prior to 8.2.20 allows remote authenticated users to cause a denial of service (crash) ...
Postgresql Postgresql 8.3.6Postgresql Postgresql 8.3.3Postgresql Postgresql 8.3.2Postgresql Postgresql 8.3.12Postgresql Postgresql 8.3.1Postgresql Postgresql 8.3.5Postgresql Postgresql 8.3.8Postgresql Postgresql 8.3.7Postgresql Postgresql 8.3.10Postgresql Postgresql 8.3Postgresql Postgresql 8.3.4Postgresql Postgresql 8.3.11Postgresql Postgresql 8.3.9Postgresql Postgresql 8.3.13Postgresql Postgresql 9.0.1Postgresql Postgresql 9.0Postgresql Postgresql 9.0.2Postgresql Postgresql 8.4.4Postgresql Postgresql 8.4.1Postgresql Postgresql 8.4.3Postgresql Postgresql 8.4.6Postgresql Postgresql 8.4
4
CVSSv2
CVE-2012-2655
PostgreSQL 8.3.x prior to 8.3.19, 8.4.x prior to 8.4.12, 9.0.x prior to 9.0.8, and 9.1.x prior to 9.1.4 allows remote authenticated users to cause a denial of service (server crash) by adding the (1) SECURITY DEFINER or (2) SET attributes to a procedural language's call hand...
Postgresql Postgresql 8.3.13Postgresql Postgresql 8.3.6Postgresql Postgresql 8.3.4Postgresql Postgresql 8.3.11Postgresql Postgresql 8.3.8Postgresql Postgresql 8.3.2Postgresql Postgresql 8.3.1Postgresql Postgresql 8.3.14Postgresql Postgresql 8.3.17Postgresql Postgresql 8.3.7Postgresql Postgresql 8.3.5Postgresql Postgresql 8.3.16Postgresql Postgresql 8.3.15Postgresql Postgresql 8.3.10Postgresql Postgresql 8.3.9Postgresql Postgresql 8.3Postgresql Postgresql 8.3.12Postgresql Postgresql 8.3.3Postgresql Postgresql 8.3.18Postgresql Postgresql 8.4.3Postgresql Postgresql 8.4.4Postgresql Postgresql 8.4
4.9
CVSSv2
CVE-2012-3488
The libxslt support in contrib/xml2 in PostgreSQL 8.3 prior to 8.3.20, 8.4 prior to 8.4.13, 9.0 prior to 9.0.9, and 9.1 prior to 9.1.5 does not properly restrict access to files and URLs, which allows remote authenticated users to modify data, obtain sensitive information, or tri...
Postgresql Postgresql 9.1.2Postgresql Postgresql 9.1.3Postgresql Postgresql 9.1.4Postgresql Postgresql 9.1Postgresql Postgresql 9.1.1Postgresql Postgresql 8.4.12Postgresql Postgresql 8.4.6Postgresql Postgresql 8.4.10Postgresql Postgresql 8.4.3Postgresql Postgresql 8.4.4Postgresql Postgresql 8.4.7Postgresql Postgresql 8.4.5Postgresql Postgresql 8.4.1Postgresql Postgresql 8.4.11Postgresql Postgresql 8.4Postgresql Postgresql 8.4.2Postgresql Postgresql 8.4.8Postgresql Postgresql 8.4.9Postgresql Postgresql 8.3.18Postgresql Postgresql 8.3.13Postgresql Postgresql 8.3.2Postgresql Postgresql 8.3.1
6.8
CVSSv2
CVE-2013-0255
PostgreSQL 9.2.x prior to 9.2.3, 9.1.x prior to 9.1.8, 9.0.x prior to 9.0.12, 8.4.x prior to 8.4.16, and 8.3.x prior to 8.3.23 does not properly declare the enum_recv function in backend/utils/adt/enum.c, which causes it to be invoked with incorrect arguments and allows remote au...
Postgresql Postgresql 8.3.16Postgresql Postgresql 8.3.17Postgresql Postgresql 8.3.20Postgresql Postgresql 8.3.8Postgresql Postgresql 8.3.21Postgresql Postgresql 8.3.22Postgresql Postgresql 8.3.2Postgresql Postgresql 8.3.1Postgresql Postgresql 8.3.19Postgresql Postgresql 8.3.18Postgresql Postgresql 8.3.6Postgresql Postgresql 8.3.5Postgresql Postgresql 8.3.12Postgresql Postgresql 8.3.9Postgresql Postgresql 8.3.11Postgresql Postgresql 8.3.14Postgresql Postgresql 8.3.7Postgresql Postgresql 8.3.15Postgresql Postgresql 8.3.4Postgresql Postgresql 8.3.3Postgresql Postgresql 8.3.10Postgresql Postgresql 8.3.13
4.6
CVSSv2
CVE-2014-0067
The "make check" command for the test suites in PostgreSQL 9.3.3 and previous versions does not properly invoke initdb to specify the authentication requirements for a database cluster to be used for the tests, which allows local users to gain privileges by leveraging a...
Apple Mac Os X 10.10.4Apple Mac Os X Server 5.0.3Postgresql Postgresql 9.1.7Postgresql Postgresql 9.1.6Postgresql Postgresql 9.0.8Postgresql Postgresql 9.1.5Postgresql Postgresql 9.1.2Postgresql Postgresql 9.1.3Postgresql Postgresql 9.0.6Postgresql Postgresql 9.0.5Postgresql Postgresql 9.0.10Postgresql Postgresql 9.0Postgresql Postgresql 8.4.3Postgresql Postgresql 8.4.2Postgresql Postgresql 8.4.16Postgresql Postgresql 8.4.1Postgresql Postgresql 9.3.2Postgresql Postgresql 9.1.11Postgresql Postgresql 9.1.10Postgresql Postgresql 9.2Postgresql Postgresql 9.1.8Postgresql Postgresql 9.1.1
10
CVSSv2
CVE-2013-1902
PostgreSQL, 9.2.x prior to 9.2.4, 9.1.x prior to 9.1.9, 9.0.x prior to 9.0.13, 8.4.x prior to 8.4.17, and 8.3.x prior to 8.3.23 generates insecure temporary files with predictable filenames, which has unspecified impact and attack vectors related to "graphical installers for...
Postgresql Postgresql 9.2.3Postgresql Postgresql 9.2.2Postgresql Postgresql 9.2.1Postgresql Postgresql 9.2Postgresql Postgresql 9.1.1Postgresql Postgresql 9.1.5Postgresql Postgresql 9.1Postgresql Postgresql 9.1.8Postgresql Postgresql 9.1.2Postgresql Postgresql 9.1.3Postgresql Postgresql 9.1.6Postgresql Postgresql 9.1.7Postgresql Postgresql 9.1.4Postgresql Postgresql 9.0.1Postgresql Postgresql 9.0.2Postgresql Postgresql 9.0.10Postgresql Postgresql 9.0.8Postgresql Postgresql 9.0.7Postgresql Postgresql 9.0.9Postgresql Postgresql 9.0.11Postgresql Postgresql 9.0.12Postgresql Postgresql 9.0
10
CVSSv2
CVE-2013-1903
PostgreSQL, possibly 9.2.x prior to 9.2.4, 9.1.x prior to 9.1.9, 9.0.x prior to 9.0.13, 8.4.x prior to 8.4.17, and 8.3.x prior to 8.3.23 incorrectly provides the superuser password to scripts related to "graphical installers for Linux and Mac OS X," which has unspecifie...
Postgresql Postgresql 9.2.3Postgresql Postgresql 9.2.2Postgresql Postgresql 9.2.1Postgresql Postgresql 9.2Postgresql Postgresql 9.1.3Postgresql Postgresql 9.1.6Postgresql Postgresql 9.1.7Postgresql Postgresql 9.1.4Postgresql Postgresql 9.1.1Postgresql Postgresql 9.1.5Postgresql Postgresql 9.1Postgresql Postgresql 9.1.8Postgresql Postgresql 9.1.2Postgresql Postgresql 9.0.12Postgresql Postgresql 9.0Postgresql Postgresql 9.0.5Postgresql Postgresql 9.0.3Postgresql Postgresql 9.0.6Postgresql Postgresql 9.0.4Postgresql Postgresql 9.0.1Postgresql Postgresql 9.0.2Postgresql Postgresql 9.0.10
4.3
CVSSv2
CVE-2012-0867
PostgreSQL 8.4.x prior to 8.4.11, 9.0.x prior to 9.0.7, and 9.1.x prior to 9.1.3 truncates the common name to only 32 characters when verifying SSL certificates, which allows remote malicious users to spoof connections when the host name is exactly 32 characters.
Opensuse Project Opensuse 12.2Postgresql Postgresql 8.4Postgresql Postgresql 8.4.10Postgresql Postgresql 8.4.8Postgresql Postgresql 8.4.9Postgresql Postgresql 8.4.2Postgresql Postgresql 8.4.1Postgresql Postgresql 8.4.3Postgresql Postgresql 8.4.4Postgresql Postgresql 8.4.5Postgresql Postgresql 8.4.6Postgresql Postgresql 8.4.7Postgresql Postgresql 9.0Postgresql Postgresql 9.0.1Postgresql Postgresql 9.0.2Postgresql Postgresql 9.0.3Postgresql Postgresql 9.0.5Postgresql Postgresql 9.0.4Postgresql Postgresql 9.0.6Debian Debian Linux 6.0Redhat Enterprise Linux Workstation 6.0Redhat Desktop Workstation 5
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2006-4304CVE-2024-4240arbitrary CVE-2024-31601XSSCVE-2023-20198CVE-2024-4256CVE-2024-3342encryption
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook