Vulnerabilities of n/a postgresql
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-14666 | Incomplete tracking in PostgreSQL of changes to role membership, role attributes, and database ownership allows a… | 4.2 Medium | Aug 13, 2026 |
| CVE-2026-14663 | Cleartext storage in PostgreSQL pgcrypto disabled ciphers allows a user to recover cleartext, via direct observation… | 6.5 Medium | Aug 13, 2026 |
| CVE-2026-14662 | Integer wraparound in PostgreSQL tsvector and tsquery data type functions allows an unprivileged database user to… | 8.8 High | Aug 13, 2026 |
| CVE-2026-6637 | Stack buffer overflow in PostgreSQL module "refint" allows an unprivileged database user to execute arbitrary code as… | 8.8 High | May 14, 2026 |
| CVE-2026-6638 | SQL injection in PostgreSQL logical replication ALTER SUBSCRIPTION | 3.7 Low | May 14, 2026 |
| CVE-2026-6575 | Buffer over-read in PostgreSQL function pg_restore_attribute_stats() accepts array values of unmatched length, which… | 4.3 Medium | May 14, 2026 |
| CVE-2026-6478 | Covert timing channel in comparison of MD5-hashed password in PostgreSQL authentication allows an attacker to recover… | 6.5 Medium | May 14, 2026 |
| CVE-2026-6479 | Uncontrolled recursion in PostgreSQL SSL and GSS negotiation allows an attacker able to connect to a PostgreSQL… | 7.5 High | May 14, 2026 |
| CVE-2026-6477 | Use of inherently dangerous function PQfn(..., result_is_int=0, ...) in PostgreSQL libpq lo_export(), lo_read(),… | 8.8 High | May 14, 2026 |
| CVE-2026-6475 | Symlink following in PostgreSQL pg_basebackup plain format and in pg_rewind allows an origin superuser to overwrite… | 8.8 High | May 14, 2026 |
| CVE-2026-6476 | SQL injection in PostgreSQL pg_createsubscriber allows an attacker with pg_create_subscription rights to execute… | 7.2 High | May 14, 2026 |
| CVE-2026-6474 | Externally-controlled format string in PostgreSQL timeofday() function allows an attacker to retrieve portions of server… | 4.3 Medium | May 14, 2026 |
| CVE-2026-6473 | Integer wraparound in multiple PostgreSQL server features allows an unprivileged database user to cause the server to… | 8.8 High | May 14, 2026 |
| CVE-2026-6472 | Missing authorization in PostgreSQL CREATE TYPE allows an object creator to hijack other queries that use search_path to… | 5.4 Medium | May 14, 2026 |
| CVE-2026-2007 | Heap buffer overflow in PostgreSQL pg_trgm allows a database user to achieve unknown impacts via a crafted input string | 8.2 High | Feb 12, 2026 |
| CVE-2026-2006 | Missing validation of multibyte character length in PostgreSQL text manipulation allows a database user to issue crafted… | 8.8 High | Feb 12, 2026 |
| CVE-2026-2005 | Heap buffer overflow in PostgreSQL pgcrypto allows a ciphertext provider to execute arbitrary code as the operating… | 8.8 High | Feb 12, 2026 |
| CVE-2026-2004 | Missing validation of type of input in PostgreSQL intarray extension selectivity estimator function allows an object… | 8.8 High | Feb 12, 2026 |
| CVE-2026-2003 | Improper validation of type "oidvector" in PostgreSQL allows a database user to disclose a few bytes of server memory | 4.3 Medium | Feb 12, 2026 |
| CVE-2025-12818 | Integer wraparound in multiple PostgreSQL libpq client library functions allows an application input provider or network… | 5.9 Medium | Nov 13, 2025 |
| CVE-2025-12817 | Missing authorization in PostgreSQL CREATE STATISTICS command allows a table owner to achieve denial of service… | 3.1 Low | Nov 13, 2025 |
| CVE-2025-8715 | Improper neutralization of newlines in pg_dump in PostgreSQL allows a user of the origin server to inject arbitrary code… | 8.8 High | Aug 14, 2025 |
| CVE-2025-8714 | Untrusted data inclusion in pg_dump in PostgreSQL allows a malicious superuser of the origin server to inject… | 8.8 High | Aug 14, 2025 |
| CVE-2025-8713 | PostgreSQL optimizer statistics allow a user to read sampled data within a view that the user cannot access | 3.1 Low | Aug 14, 2025 |
| CVE-2025-4207 | Buffer over-read in PostgreSQL GB18030 encoding validation allows a database input provider to achieve temporary… | 5.9 Medium | May 8, 2025 |
Other n/a products
n/a 144660
Android 2441
kernel 279
Open5GS 125
Intel(R) Processors 119
BIG-IP 110
Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions 106
HPE Intelligent Management Center (IMC) PLAT 105
Moodle 89
Aruba ClearPass Policy Manager 83
GPAC 80
ImageMagick 69