Aller au contenu

Vulnérabilités de n/a postgresql

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2025-1094 PostgreSQL quoting APIs miss neutralizing quoting syntax in text that fails encoding validation 8.1 Élevée 13 févr. 2025
CVE-2024-10979 Incorrect control of environment variables in PostgreSQL PL/Perl allows an unprivileged database user to change… 8.8 Élevée 14 nov. 2024
CVE-2024-10978 Incorrect privilege assignment in PostgreSQL allows a less-privileged application user to view or change different… 4.2 Moyenne 14 nov. 2024
CVE-2024-10977 Client use of server error message in PostgreSQL allows a server not trusted under current SSL or GSS settings to… 3.1 Faible 14 nov. 2024
CVE-2024-10976 Incomplete tracking in PostgreSQL of tables with row security allows a reused query to view or change different rows… 4.2 Moyenne 14 nov. 2024
CVE-2024-7348 Time-of-check Time-of-use (TOCTOU) race condition in pg_dump in PostgreSQL allows an object creator to execute arbitrary… 8.8 Élevée 8 août 2024
CVE-2024-4317 Missing authorization in PostgreSQL built-in views pg_stats_ext and pg_stats_ext_exprs allows an unprivileged database… 3.1 Faible 9 mai 2024
CVE-2024-0985 Late privilege drop in REFRESH MATERIALIZED VIEW CONCURRENTLY in PostgreSQL allows an object creator to execute… 8.0 Élevée 8 févr. 2024
CVE-2023-2455 Row security policies disregard user ID changes after inlining; PostgreSQL could permit incorrect policies to be applied… 5.4 Moyenne 9 juin 2023
CVE-2023-2454 schema_element defeats protective search_path changes; It was found that certain database calls in PostgreSQL could… 7.2 Élevée 9 juin 2023
CVE-2022-41862 In PostgreSQL, a modified, unauthenticated server can send an unterminated string during the establishment of Kerberos… 3.7 Faible 3 mars 2023
CVE-2022-1552 A flaw was found in PostgreSQL Non notée 31 août 2022
CVE-2022-2625 A vulnerability was found in PostgreSQL Non notée 18 août 2022
CVE-2021-23214 When the server is configured to use trust authentication with a clientcert requirement or to use cert authentication, a… Non notée 4 mars 2022
CVE-2021-3677 A flaw was found in postgresql Non notée 2 mars 2022
CVE-2021-23222 A man-in-the-middle attacker can inject false responses to the client's first few queries, despite the use of SSL… Non notée 2 mars 2022
CVE-2021-32028 A flaw was found in postgresql Non notée 11 oct. 2021
CVE-2021-32029 A flaw was found in postgresql Non notée 8 oct. 2021
CVE-2021-32027 A flaw was found in postgresql in versions before 13.3, before 12.7, before 11.12, before 10.17 and before 9.6.22 Non notée 1 juin 2021
CVE-2021-3393 An information leak was discovered in postgresql in versions before 13.2, before 12.6 and before 11.11 Non notée 1 avr. 2021
CVE-2019-10128 A vulnerability was found in postgresql versions 11.x prior to 11.3 Non notée 19 mars 2021
CVE-2019-10127 A vulnerability was found in postgresql versions 11.x prior to 11.3 Non notée 19 mars 2021
CVE-2021-20229 A flaw was found in PostgreSQL in versions before 13.2 Non notée 23 févr. 2021
CVE-2020-25696 A flaw was found in the psql interactive terminal of PostgreSQL in versions before 13.1, before 12.5, before 11.10,… Non notée 23 nov. 2020
CVE-2020-25695 A flaw was found in PostgreSQL versions before 13.1, before 12.5, before 11.10, before 10.15, before 9.6.20 and before… Non notée 16 nov. 2020

Autres produits n/a