Aller au contenu

Vulnérabilités de n/a postgresql

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2026-14666 Incomplete tracking in PostgreSQL of changes to role membership, role attributes, and database ownership allows a… 4.2 Moyenne 13 août 2026
CVE-2026-14663 Cleartext storage in PostgreSQL pgcrypto disabled ciphers allows a user to recover cleartext, via direct observation… 6.5 Moyenne 13 août 2026
CVE-2026-14662 Integer wraparound in PostgreSQL tsvector and tsquery data type functions allows an unprivileged database user to… 8.8 Élevée 13 août 2026
CVE-2026-6637 Stack buffer overflow in PostgreSQL module "refint" allows an unprivileged database user to execute arbitrary code as… 8.8 Élevée 14 mai 2026
CVE-2026-6638 SQL injection in PostgreSQL logical replication ALTER SUBSCRIPTION 3.7 Faible 14 mai 2026
CVE-2026-6575 Buffer over-read in PostgreSQL function pg_restore_attribute_stats() accepts array values of unmatched length, which… 4.3 Moyenne 14 mai 2026
CVE-2026-6478 Covert timing channel in comparison of MD5-hashed password in PostgreSQL authentication allows an attacker to recover… 6.5 Moyenne 14 mai 2026
CVE-2026-6479 Uncontrolled recursion in PostgreSQL SSL and GSS negotiation allows an attacker able to connect to a PostgreSQL… 7.5 Élevée 14 mai 2026
CVE-2026-6477 Use of inherently dangerous function PQfn(..., result_is_int=0, ...) in PostgreSQL libpq lo_export(), lo_read(),… 8.8 Élevée 14 mai 2026
CVE-2026-6475 Symlink following in PostgreSQL pg_basebackup plain format and in pg_rewind allows an origin superuser to overwrite… 8.8 Élevée 14 mai 2026
CVE-2026-6476 SQL injection in PostgreSQL pg_createsubscriber allows an attacker with pg_create_subscription rights to execute… 7.2 Élevée 14 mai 2026
CVE-2026-6474 Externally-controlled format string in PostgreSQL timeofday() function allows an attacker to retrieve portions of server… 4.3 Moyenne 14 mai 2026
CVE-2026-6473 Integer wraparound in multiple PostgreSQL server features allows an unprivileged database user to cause the server to… 8.8 Élevée 14 mai 2026
CVE-2026-6472 Missing authorization in PostgreSQL CREATE TYPE allows an object creator to hijack other queries that use search_path to… 5.4 Moyenne 14 mai 2026
CVE-2026-2007 Heap buffer overflow in PostgreSQL pg_trgm allows a database user to achieve unknown impacts via a crafted input string 8.2 Élevée 12 févr. 2026
CVE-2026-2006 Missing validation of multibyte character length in PostgreSQL text manipulation allows a database user to issue crafted… 8.8 Élevée 12 févr. 2026
CVE-2026-2005 Heap buffer overflow in PostgreSQL pgcrypto allows a ciphertext provider to execute arbitrary code as the operating… 8.8 Élevée 12 févr. 2026
CVE-2026-2004 Missing validation of type of input in PostgreSQL intarray extension selectivity estimator function allows an object… 8.8 Élevée 12 févr. 2026
CVE-2026-2003 Improper validation of type "oidvector" in PostgreSQL allows a database user to disclose a few bytes of server memory 4.3 Moyenne 12 févr. 2026
CVE-2025-12818 Integer wraparound in multiple PostgreSQL libpq client library functions allows an application input provider or network… 5.9 Moyenne 13 nov. 2025
CVE-2025-12817 Missing authorization in PostgreSQL CREATE STATISTICS command allows a table owner to achieve denial of service… 3.1 Faible 13 nov. 2025
CVE-2025-8715 Improper neutralization of newlines in pg_dump in PostgreSQL allows a user of the origin server to inject arbitrary code… 8.8 Élevée 14 août 2025
CVE-2025-8714 Untrusted data inclusion in pg_dump in PostgreSQL allows a malicious superuser of the origin server to inject… 8.8 Élevée 14 août 2025
CVE-2025-8713 PostgreSQL optimizer statistics allow a user to read sampled data within a view that the user cannot access 3.1 Faible 14 août 2025
CVE-2025-4207 Buffer over-read in PostgreSQL GB18030 encoding validation allows a database input provider to achieve temporary… 5.9 Moyenne 8 mai 2025

Autres produits n/a