Skip to content
Fencer Vulns

All · PostgreSQL

Newest first. Every view here is also a feed.

  1. 8.8
    CVE-2015-0243 Multiple buffer overflows in contrib/pgcrypto in PostgreSQL before 9.0.19, 9.1.x before 9.1.15, 9.2.x before 9.2.10, 9.3.x before 9.3.6, an…
    PostgreSQL
    EPSS 5.1% chance of exploitation in 30 days, percentile 92%
  2. 9.8
    CVE-2015-0244 PostgreSQL before 9.0.19, 9.1.x before 9.1.15, 9.2.x before 9.2.10, 9.3.x before 9.3.6, and 9.4.x before 9.4.1 does not properly handle err…
    PostgreSQL
    EPSS 4.4% chance of exploitation in 30 days, percentile 91%
  3. 4.3
    CVE-2014-8161 PostgreSQL before 9.0.19, 9.1.x before 9.1.15, 9.2.x before 9.2.10, 9.3.x before 9.3.6, and 9.4.x before 9.4.1 allows remote authenticated…
    PostgreSQL
    EPSS 2.5% chance of exploitation in 30 days, percentile 84%
  4. 9.8
    CVE-2015-3166 The snprintf implementation in PostgreSQL before 9.0.20, 9.1.x before 9.1.16, 9.2.x before 9.2.11, 9.3.x before 9.3.7, and 9.4.x before 9.4…
    PostgreSQL
    EPSS 4.6% chance of exploitation in 30 days, percentile 91%
  5. 7.5
    CVE-2015-3167 contrib/pgcrypto in PostgreSQL before 9.0.20, 9.1.x before 9.1.16, 9.2.x before 9.2.11, 9.3.x before 9.3.7, and 9.4.x before 9.4.2 uses dif…
    PostgreSQL
    EPSS 4.1% chance of exploitation in 30 days, percentile 90%
  6. 7.8
    CVE-2019-10211 Postgresql Windows installer before versions 11.5, 10.10, 9.6.15, 9.5.19, 9.4.24 is vulnerable via bundled OpenSSL executing code from unpr…
    PostgreSQL
    EPSS 1.8% chance of exploitation in 30 days, percentile 78%
  7. 7.5
    CVE-2019-10208 A flaw was discovered in postgresql versions 9.4.x before 9.4.24, 9.5.x before 9.5.19, 9.6.x before 9.6.15, 10.x before 10.10 and 11.x befo…
    PostgreSQL
    EPSS 2.2% chance of exploitation in 30 days, percentile 82%
  8. 3.1
    CVE-2019-10209 Postgresql, versions 11.x before 11.5, is vulnerable to a memory disclosure in cross-type comparison for hashed subplan.
    PostgreSQL
    EPSS 1.1% chance of exploitation in 30 days, percentile 65%
  9. 6.7
    CVE-2019-10210 Postgresql Windows installer before versions 11.5, 10.10, 9.6.15, 9.5.19, 9.4.24 is vulnerable via superuser writing password to unprotecte…
    PostgreSQL
  10. 3.1
    CVE-2019-10130 A vulnerability was found in PostgreSQL versions 11.x up to excluding 11.3, 10.x up to excluding 10.8, 9.6.x up to, excluding 9.6.13, 9.5.x…
    PostgreSQL
    EPSS 1.1% chance of exploitation in 30 days, percentile 65%
  11. 6.5
    CVE-2019-10129 A vulnerability was found in postgresql versions 11.x prior to 11.3.
    PostgreSQL
    EPSS 1.6% chance of exploitation in 30 days, percentile 76%
  12. 7.5
    CVE-2019-10164 PostgreSQL versions 10.x before 10.9 and versions 11.x before 11.4 are vulnerable to a stack-based buffer overflow.
    PostgreSQL
    EPSS 3.6% chance of exploitation in 30 days, percentile 89%
  13. 7.2
    CVE-2019-9193 In PostgreSQL 9.3 through 11.2, the "COPY TO/FROM PROGRAM" function allows superusers and users in the 'pg_execute_server_program' group to…
    PostgreSQL
    4 public exploits EPSS 91.7% chance of exploitation in 30 days, percentile 99.8%
  14. 8.0
    CVE-2018-16850 postgresql before versions 11.1, 10.6 is vulnerable to a to SQL injection in pg_upgrade and pg_dump via CREATE TRIGGER ... REFERENCING.
    PostgreSQL
    EPSS 5.1% chance of exploitation in 30 days, percentile 92%
  15. 8.1
    CVE-2016-7048 The interactive installer in PostgreSQL before 9.3.15, 9.4.x before 9.4.10, and 9.5.x before 9.5.5 might allow remote attackers to execute…
    PostgreSQL
    EPSS 4.9% chance of exploitation in 30 days, percentile 92%
  16. 7.1
    CVE-2018-10925 It was discovered that PostgreSQL versions before 10.5, 9.6.10, 9.5.14, 9.4.19, and 9.3.24 failed to properly check authorization on certai…
    PostgreSQL
    EPSS 2.2% chance of exploitation in 30 days, percentile 82%
  17. 8.5
    CVE-2018-10915 A vulnerability was found in libpq, the default PostgreSQL client library where libpq failed to properly reset its internal state between c…
    PostgreSQL
    EPSS 5.1% chance of exploitation in 30 days, percentile 92%
  18. 4.2
    CVE-2018-1115 postgresql before versions 10.4, 9.6.9 is vulnerable in the adminpack extension, the pg_catalog.pg_logfile_rotate() function doesn't follow…
    PostgreSQL
    EPSS 3.8% chance of exploitation in 30 days, percentile 90%
  19. 8.8
    CVE-2018-1058 A flaw was found in the way Postgresql allowed a user to modify the behavior of a query for other users.
    PostgreSQL
    EPSS 13.1% chance of exploitation in 30 days, percentile 96%
  20. 7.3
    CVE-2017-14798 local privilege escalation in SUSE postgresql init script
    PostgreSQL
    1 public exploit
  21. 7.0
    CVE-2018-1053 In postgresql 9.3.x before 9.3.21, 9.4.x before 9.4.16, 9.5.x before 9.5.11, 9.6.x before 9.6.7 and 10.x before 10.2, pg_upgrade creates fi…
    PostgreSQL
  22. 6.5
    CVE-2018-1052 Memory disclosure vulnerability in table partitioning was found in postgresql 10.x before 10.2, allowing an authenticated attacker to read…
    PostgreSQL
    EPSS 1.8% chance of exploitation in 30 days, percentile 78%
  23. 6.7
    CVE-2017-12172 PostgreSQL 10.x before 10.1, 9.6.x before 9.6.6, 9.5.x before 9.5.10, 9.4.x before 9.4.15, 9.3.x before 9.3.20, and 9.2.x before 9.2.24 run…
    PostgreSQL
  24. 6.5
    CVE-2017-15099 INSERT ... ON CONFLICT DO UPDATE commands in PostgreSQL 10.x before 10.1, 9.6.x before 9.6.6, and 9.5.x before 9.5.10 disclose table conten…
    PostgreSQL
    EPSS 6.3% chance of exploitation in 30 days, percentile 93%
  25. 8.1
    CVE-2017-15098 Invalid json_populate_recordset or jsonb_populate_recordset function calls in PostgreSQL 10.x before 10.1, 9.6.x before 9.6.6, 9.5.x before…
    PostgreSQL
    EPSS 3.7% chance of exploitation in 30 days, percentile 89%
  26. 5.5
    CVE-2017-8806 The Debian pg_ctlcluster, pg_createcluster, and pg_upgradecluster scripts, as distributed in the Debian postgresql-common package before 18…
    PostgreSQL
  27. 7.5
    CVE-2017-7548 PostgreSQL versions before 9.4.13, 9.5.8 and 9.6.4 are vulnerable to authorization flaw allowing remote authenticated attackers with no pri…
    PostgreSQL
    EPSS 3.5% chance of exploitation in 30 days, percentile 89%
  28. 8.8
    CVE-2017-7547 PostgreSQL versions before 9.2.22, 9.3.18, 9.4.13, 9.5.8 and 9.6.4 are vulnerable to authorization flaw allowing remote authenticated attac…
    PostgreSQL
    EPSS 5.6% chance of exploitation in 30 days, percentile 92%
  29. 9.8
    CVE-2017-7546 PostgreSQL versions before 9.2.22, 9.3.18, 9.4.13, 9.5.8 and 9.6.4 are vulnerable to incorrect authentication flaw allowing remote attacker…
    PostgreSQL
    EPSS 61.6% chance of exploitation in 30 days, percentile 99.1%
  30. 7.5
    CVE-2016-0768 PostgreSQL PL/Java after 9.0 does not honor access controls on large objects.
    PostgreSQL
    EPSS 1.4% chance of exploitation in 30 days, percentile 71%