Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

postgresql postgresql 9.1.1 vulnerabilities and exploits

(subscribe to this query)
4
CVSSv2
CVE-2013-1901
PostgreSQL 9.2.x prior to 9.2.4 and 9.1.x prior to 9.1.9 does not properly check REPLICATION privileges, which allows remote authenticated users to bypass intended backup restrictions by calling the (1) pg_start_backup or (2) pg_stop_backup functions.
Postgresql Postgresql 9.2.2Postgresql Postgresql 9.2.3Postgresql Postgresql 9.2.1Postgresql Postgresql 9.2Postgresql Postgresql 9.1.3Postgresql Postgresql 9.1.6Postgresql Postgresql 9.1Postgresql Postgresql 9.1.7Postgresql Postgresql 9.1.8Postgresql Postgresql 9.1.5Postgresql Postgresql 9.1.4Postgresql Postgresql 9.1.2Postgresql Postgresql 9.1.1Canonical Ubuntu Linux 12.10Canonical Ubuntu Linux 12.04Canonical Ubuntu Linux 8.04Canonical Ubuntu Linux 11.10Canonical Ubuntu Linux 10.04
6.5
CVSSv2
CVE-2012-0866
CREATE TRIGGER in PostgreSQL 8.3.x prior to 8.3.18, 8.4.x prior to 8.4.11, 9.0.x prior to 9.0.7, and 9.1.x prior to 9.1.3 does not properly check the execute permission for trigger functions marked SECURITY DEFINER, which allows remote authenticated users to execute otherwise res...
Postgresql Postgresql 8.3.7Postgresql Postgresql 8.3.5Postgresql Postgresql 8.3.16Postgresql Postgresql 8.3.15Postgresql Postgresql 8.3.13Postgresql Postgresql 8.3.6Postgresql Postgresql 8.3.3Postgresql Postgresql 8.3Postgresql Postgresql 8.3.11Postgresql Postgresql 8.3.8Postgresql Postgresql 8.3.2Postgresql Postgresql 8.3.1Postgresql Postgresql 8.3.4Postgresql Postgresql 8.3.14Postgresql Postgresql 8.3.10Postgresql Postgresql 8.3.9Postgresql Postgresql 8.3.12Postgresql Postgresql 8.3.17Postgresql Postgresql 8.4.2Postgresql Postgresql 8.4.3Postgresql Postgresql 8.4.5Postgresql Postgresql 8.4.1
6.8
CVSSv2
CVE-2012-0868
CRLF injection vulnerability in pg_dump in PostgreSQL 8.3.x prior to 8.3.18, 8.4.x prior to 8.4.11, 9.0.x prior to 9.0.7, and 9.1.x prior to 9.1.3 allows user-assisted remote malicious users to execute arbitrary SQL commands via a crafted file containing object names with newline...
Postgresql Postgresql 8.3.6Postgresql Postgresql 8.3.10Postgresql Postgresql 8.3.3Postgresql Postgresql 8.3Postgresql Postgresql 8.3.8Postgresql Postgresql 8.3.13Postgresql Postgresql 8.3.1Postgresql Postgresql 8.3.4Postgresql Postgresql 8.3.11Postgresql Postgresql 8.3.5Postgresql Postgresql 8.3.2Postgresql Postgresql 8.3.15Postgresql Postgresql 8.3.14Postgresql Postgresql 8.3.9Postgresql Postgresql 8.3.7Postgresql Postgresql 8.3.12Postgresql Postgresql 8.3.17Postgresql Postgresql 8.3.16Postgresql Postgresql 8.4.1Postgresql Postgresql 8.4.6Postgresql Postgresql 8.4.9Postgresql Postgresql 8.4.10
6.5
CVSSv2
CVE-2013-1899
Argument injection vulnerability in PostgreSQL 9.2.x prior to 9.2.4, 9.1.x prior to 9.1.9, and 9.0.x prior to 9.0.13 allows remote malicious users to cause a denial of service (file corruption), and allows remote authenticated users to modify configuration settings and execute ar...
Postgresql Postgresql 9.2.1Postgresql Postgresql 9.2Postgresql Postgresql 9.2.2Postgresql Postgresql 9.2.3Postgresql Postgresql 9.1Postgresql Postgresql 9.1.2Postgresql Postgresql 9.1.3Postgresql Postgresql 9.1.6Postgresql Postgresql 9.1.7Postgresql Postgresql 9.1.4Postgresql Postgresql 9.1.8Postgresql Postgresql 9.1.1Postgresql Postgresql 9.1.5Postgresql Postgresql 9.0.8Postgresql Postgresql 9.0.7Postgresql Postgresql 9.0.1Postgresql Postgresql 9.0.11Postgresql Postgresql 9.0.10Postgresql Postgresql 9.0Postgresql Postgresql 9.0.3Postgresql Postgresql 9.0.9Postgresql Postgresql 9.0.4
4
CVSSv2
CVE-2012-2655
PostgreSQL 8.3.x prior to 8.3.19, 8.4.x prior to 8.4.12, 9.0.x prior to 9.0.8, and 9.1.x prior to 9.1.4 allows remote authenticated users to cause a denial of service (server crash) by adding the (1) SECURITY DEFINER or (2) SET attributes to a procedural language's call hand...
Postgresql Postgresql 8.3.13Postgresql Postgresql 8.3.6Postgresql Postgresql 8.3.4Postgresql Postgresql 8.3.11Postgresql Postgresql 8.3.8Postgresql Postgresql 8.3.2Postgresql Postgresql 8.3.1Postgresql Postgresql 8.3.14Postgresql Postgresql 8.3.17Postgresql Postgresql 8.3.7Postgresql Postgresql 8.3.5Postgresql Postgresql 8.3.16Postgresql Postgresql 8.3.15Postgresql Postgresql 8.3.10Postgresql Postgresql 8.3.9Postgresql Postgresql 8.3Postgresql Postgresql 8.3.12Postgresql Postgresql 8.3.3Postgresql Postgresql 8.3.18Postgresql Postgresql 8.4.3Postgresql Postgresql 8.4.4Postgresql Postgresql 8.4
4.9
CVSSv2
CVE-2012-3488
The libxslt support in contrib/xml2 in PostgreSQL 8.3 prior to 8.3.20, 8.4 prior to 8.4.13, 9.0 prior to 9.0.9, and 9.1 prior to 9.1.5 does not properly restrict access to files and URLs, which allows remote authenticated users to modify data, obtain sensitive information, or tri...
Postgresql Postgresql 9.1.2Postgresql Postgresql 9.1.3Postgresql Postgresql 9.1.4Postgresql Postgresql 9.1Postgresql Postgresql 9.1.1Postgresql Postgresql 8.4.12Postgresql Postgresql 8.4.6Postgresql Postgresql 8.4.10Postgresql Postgresql 8.4.3Postgresql Postgresql 8.4.4Postgresql Postgresql 8.4.7Postgresql Postgresql 8.4.5Postgresql Postgresql 8.4.1Postgresql Postgresql 8.4.11Postgresql Postgresql 8.4Postgresql Postgresql 8.4.2Postgresql Postgresql 8.4.8Postgresql Postgresql 8.4.9Postgresql Postgresql 8.3.18Postgresql Postgresql 8.3.13Postgresql Postgresql 8.3.2Postgresql Postgresql 8.3.1
6.8
CVSSv2
CVE-2013-0255
PostgreSQL 9.2.x prior to 9.2.3, 9.1.x prior to 9.1.8, 9.0.x prior to 9.0.12, 8.4.x prior to 8.4.16, and 8.3.x prior to 8.3.23 does not properly declare the enum_recv function in backend/utils/adt/enum.c, which causes it to be invoked with incorrect arguments and allows remote au...
Postgresql Postgresql 8.3.16Postgresql Postgresql 8.3.17Postgresql Postgresql 8.3.20Postgresql Postgresql 8.3.8Postgresql Postgresql 8.3.21Postgresql Postgresql 8.3.22Postgresql Postgresql 8.3.2Postgresql Postgresql 8.3.1Postgresql Postgresql 8.3.19Postgresql Postgresql 8.3.18Postgresql Postgresql 8.3.6Postgresql Postgresql 8.3.5Postgresql Postgresql 8.3.12Postgresql Postgresql 8.3.9Postgresql Postgresql 8.3.11Postgresql Postgresql 8.3.14Postgresql Postgresql 8.3.7Postgresql Postgresql 8.3.15Postgresql Postgresql 8.3.4Postgresql Postgresql 8.3.3Postgresql Postgresql 8.3.10Postgresql Postgresql 8.3.13
4.3
CVSSv2
CVE-2015-3165
Double free vulnerability in PostgreSQL prior to 9.0.20, 9.1.x prior to 9.1.16, 9.2.x prior to 9.2.11, 9.3.x prior to 9.3.7, and 9.4.x prior to 9.4.2 allows remote malicious users to cause a denial of service (crash) by closing an SSL session at a time when the authentication tim...
Canonical Ubuntu Linux 15.04Debian Debian Linux 7.0Canonical Ubuntu Linux 14.04Canonical Ubuntu Linux 14.10Debian Debian Linux 8.0Canonical Ubuntu Linux 12.04Apple Mac Os X Server 5.0.2Postgresql Postgresql 9.1.1Postgresql Postgresql 9.1.2Postgresql Postgresql 9.1.3Postgresql Postgresql 9.1.10Postgresql Postgresql 9.1.11Postgresql Postgresql 9.2.2Postgresql Postgresql 9.2.3Postgresql Postgresql 9.2.10Postgresql Postgresql 9.3Postgresql Postgresql 9.3.1Postgresql Postgresql 9.4.1Postgresql PostgresqlPostgresql Postgresql 9.1Postgresql Postgresql 9.1.8Postgresql Postgresql 9.1.9
4.6
CVSSv2
CVE-2014-0067
The "make check" command for the test suites in PostgreSQL 9.3.3 and previous versions does not properly invoke initdb to specify the authentication requirements for a database cluster to be used for the tests, which allows local users to gain privileges by leveraging a...
Apple Mac Os X 10.10.4Apple Mac Os X Server 5.0.3Postgresql Postgresql 9.1.7Postgresql Postgresql 9.1.6Postgresql Postgresql 9.0.8Postgresql Postgresql 9.1.5Postgresql Postgresql 9.1.2Postgresql Postgresql 9.1.3Postgresql Postgresql 9.0.6Postgresql Postgresql 9.0.5Postgresql Postgresql 9.0.10Postgresql Postgresql 9.0Postgresql Postgresql 8.4.3Postgresql Postgresql 8.4.2Postgresql Postgresql 8.4.16Postgresql Postgresql 8.4.1Postgresql Postgresql 9.3.2Postgresql Postgresql 9.1.11Postgresql Postgresql 9.1.10Postgresql Postgresql 9.2Postgresql Postgresql 9.1.8Postgresql Postgresql 9.1.1
10
CVSSv2
CVE-2013-1902
PostgreSQL, 9.2.x prior to 9.2.4, 9.1.x prior to 9.1.9, 9.0.x prior to 9.0.13, 8.4.x prior to 8.4.17, and 8.3.x prior to 8.3.23 generates insecure temporary files with predictable filenames, which has unspecified impact and attack vectors related to "graphical installers for...
Postgresql Postgresql 9.2.3Postgresql Postgresql 9.2.2Postgresql Postgresql 9.2.1Postgresql Postgresql 9.2Postgresql Postgresql 9.1.1Postgresql Postgresql 9.1.5Postgresql Postgresql 9.1Postgresql Postgresql 9.1.8Postgresql Postgresql 9.1.2Postgresql Postgresql 9.1.3Postgresql Postgresql 9.1.6Postgresql Postgresql 9.1.7Postgresql Postgresql 9.1.4Postgresql Postgresql 9.0.1Postgresql Postgresql 9.0.2Postgresql Postgresql 9.0.10Postgresql Postgresql 9.0.8Postgresql Postgresql 9.0.7Postgresql Postgresql 9.0.9Postgresql Postgresql 9.0.11Postgresql Postgresql 9.0.12Postgresql Postgresql 9.0
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook