Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
postgresql vulnerabilities and exploits
(subscribe to this query)
4.3
CVSSv2
CVE-2019-10127
A vulnerability was found in postgresql versions 11.x before 11.3. The Windows installer for BigSQL-supplied PostgreSQL does not lock down the ACL of the binary installation directory or the ACL of the data directory; it keeps the inherited ACL. In the default configuration, an a...
Postgresql Postgresql
4
CVSSv2
CVE-2019-10129
A vulnerability was found in postgresql versions 11.x before 11.3. Using a purpose-crafted insert to a partitioned table, an attacker can read arbitrary bytes of server memory. In the default configuration, any user can create a partitioned table suitable for this attack. (Exploi...
Postgresql Postgresql
4.3
CVSSv2
CVE-2005-0227
PostgreSQL (pgsql) 7.4.x, 7.2.x, and other versions allows local users to load arbitrary shared libraries and execute code via the LOAD extension.
Postgresql Postgresql
5
CVSSv2
CVE-2005-0246
The intagg contrib module for PostgreSQL 8.0.0 and previous versions allows malicious users to cause a denial of service (crash) via crafted arrays.
Postgresql Postgresql
5
CVSSv2
CVE-2016-0768
PostgreSQL PL/Java after 9.0 does not honor access controls on large objects.
Postgresql Postgresql
8.5
CVSSv2
CVE-2007-0555
PostgreSQL 7.3 prior to 7.3.13, 7.4 prior to 7.4.16, 8.0 prior to 8.0.11, 8.1 prior to 8.1.7, and 8.2 prior to 8.2.2 allows malicious users to disable certain checks for the data types of SQL function arguments, which allows remote authenticated users to cause a denial of service...
Postgresql Postgresql
4.1
CVSSv2
CVE-2019-10128
A vulnerability was found in postgresql versions 11.x before 11.3. The Windows installer for EnterpriseDB-supplied PostgreSQL does not lock down the ACL of the binary installation directory or the ACL of the data directory; it keeps the inherited ACL. In the default configuration...
Postgresql Postgresql
1.9
CVSSv2
CVE-2019-10210
Postgresql Windows installer prior to 11.5, 10.10, 9.6.15, 9.5.19, 9.4.24 is vulnerable via superuser writing password to unprotected temporary file.
Postgresql Postgresql
7.5
CVSSv2
CVE-2019-10211
Postgresql Windows installer prior to 11.5, 10.10, 9.6.15, 9.5.19, 9.4.24 is vulnerable via bundled OpenSSL executing code from unprotected directory.
Postgresql Postgresql
10
CVSSv2
CVE-2007-3279
PostgreSQL 8.1 and probably later versions, when the PL/pgSQL (plpgsql) language has been created, grants certain plpgsql privileges to the PUBLIC domain, which allows remote malicious users to create and execute functions, as demonstrated by functions that perform local brute-fo...
Postgresql Postgresql 8.1
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
validation
CVE-2012-1823
malicious code
CVE-2024-5770
CVE-2023-45866
CVE-2024-35687
local users
CVE-2024-31246
CVE-2024-35730
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
3
4
5
6
7
8
9
10
NEXT »