Skip to content
Fencer Vulns

All · PostgreSQL

Newest first. Every view here is also a feed.

  1. 4.3
    CVE-2023-5868 Postgresql: memory disclosure in aggregate function calls
    PostgreSQLbitnamijulia
    EPSS 2.8% chance of exploitation in 30 days, percentile 86%
  2. 8.8
    CVE-2023-5869 Postgresql: buffer overrun from integer overflow in array modification
    PostgreSQLbitnamijulia
    EPSS 4.3% chance of exploitation in 30 days, percentile 91%
  3. 4.4
    CVE-2020-21469 An issue was discovered in PostgreSQL 12.2 allows attackers to cause a denial of service via repeatedly sending SIGHUP signals.
    PostgreSQLbitnami
  4. 3.1
    CVE-2023-39418 Postgresql: merge fails to enforce update or select row security policies
    PostgreSQLbitnami
    EPSS 1.1% chance of exploitation in 30 days, percentile 65%
  5. 7.5
    CVE-2023-39417 Postgresql: extension script @substitutions@ within quoting allow sql injection
    PostgreSQLbitnamijulia
    EPSS 1.7% chance of exploitation in 30 days, percentile 77%
  6. 5.4
    CVE-2023-2455 Row security policies disregard user ID changes after inlining; PostgreSQL could permit incorrect policies to be applied in certain cases w…
    PostgreSQLbitnamijulia
  7. 7.2
    CVE-2023-2454 schema_element defeats protective search_path changes; It was found that certain database calls in PostgreSQL could permit an authed attack…
    PostgreSQLbitnamijulia
    EPSS 1.2% chance of exploitation in 30 days, percentile 68%
  8. 3.7
    CVE-2022-41862 In PostgreSQL, a modified, unauthenticated server can send an unterminated string during the establishment of Kerberos transport encryption.
    PostgreSQLbitnamijulia
  9. 8.8
    CVE-2022-1552 A flaw was found in PostgreSQL.
    PostgreSQLbitnamijulia
    EPSS 17.0% chance of exploitation in 30 days, percentile 97%
  10. 5.9
    CVE-2021-43767 Odyssey passes to client unencrypted bytes from man-in-the-middle When Odyssey storage is configured to use the PostgreSQL server using 'tr…
    PostgreSQLbitnamijulia
  11. 8.0
    CVE-2022-2625 A vulnerability was found in PostgreSQL.
    PostgreSQLbitnamijulia
    EPSS 2.2% chance of exploitation in 30 days, percentile 82%
  12. 8.1
    CVE-2021-23214 When the server is configured to use trust authentication with a clientcert requirement or to use cert authentication, a man-in-the-middle…
    PostgreSQLbitnamijulia
    EPSS 1.9% chance of exploitation in 30 days, percentile 79%
  13. 6.5
    CVE-2021-3677 A flaw was found in postgresql.
    PostgreSQLbitnamijulia
    EPSS 1.4% chance of exploitation in 30 days, percentile 73%
  14. 5.9
    CVE-2021-23222 A man-in-the-middle attacker can inject false responses to the client's first few queries, despite the use of SSL certificate verification…
    PostgreSQLbitnamijulia
    EPSS 1.5% chance of exploitation in 30 days, percentile 74%
  15. 6.5
    CVE-2021-32028 A flaw was found in postgresql.
    PostgreSQLbitnamijulia
    EPSS 1.6% chance of exploitation in 30 days, percentile 75%
  16. 6.5
    CVE-2021-32029 A flaw was found in postgresql.
    PostgreSQLbitnamijulia
    EPSS 1.5% chance of exploitation in 30 days, percentile 74%
  17. 8.8
    CVE-2021-32027 A flaw was found in postgresql in versions before 13.3, before 12.7, before 11.12, before 10.17 and before 9.6.22.
    PostgreSQLbitnamijulia
    EPSS 2.0% chance of exploitation in 30 days, percentile 80%
  18. 4.3
    CVE-2021-3393 An information leak was discovered in postgresql in versions before 13.2, before 12.6 and before 11.11.
    PostgreSQLbitnamijulia
    EPSS 1.2% chance of exploitation in 30 days, percentile 68%
  19. 7.8
    CVE-2019-10128 A vulnerability was found in postgresql versions 11.x prior to 11.3.
    PostgreSQL
  20. 8.8
    CVE-2019-10127 A vulnerability was found in postgresql versions 11.x prior to 11.3.
    PostgreSQL
  21. 4.3
    CVE-2021-20229 A flaw was found in PostgreSQL in versions before 13.2.
    PostgreSQLbitnami
    EPSS 1.5% chance of exploitation in 30 days, percentile 73%
  22. 7.5
    CVE-2020-25696 A flaw was found in the psql interactive terminal of PostgreSQL in versions before 13.1, before 12.5, before 11.10, before 10.15, before 9.…
    PostgreSQLbitnamijulia
    EPSS 2.7% chance of exploitation in 30 days, percentile 86%
  23. 8.8
    CVE-2020-25695 A flaw was found in PostgreSQL versions before 13.1, before 12.5, before 11.10, before 10.15, before 9.6.20 and before 9.5.24.
    PostgreSQLbitnamijulia
    EPSS 46.4% chance of exploitation in 30 days, percentile 98%
  24. 8.1
    CVE-2020-25694 A flaw was found in PostgreSQL versions before 13.1, before 12.5, before 11.10, before 10.15, before 9.6.20 and before 9.5.24.
    PostgreSQLbitnamijulia
    EPSS 1.6% chance of exploitation in 30 days, percentile 75%
  25. 7.3
    CVE-2020-10733 The Windows installer for PostgreSQL 9.5 - 12 invokes system-provided executables that do not have fully-qualified paths.
    PostgreSQLbitnami
  26. 7.3
    CVE-2020-14350 It was found that some PostgreSQL extensions did not use search_path safely in their installation script.
    PostgreSQLbitnamijulia
  27. 7.1
    CVE-2020-14349 It was found that PostgreSQL versions before 12.4, before 11.9 and before 10.14 did not properly sanitize the search_path during logical re…
    PostgreSQLbitnamijulia
    EPSS 2.2% chance of exploitation in 30 days, percentile 82%
  28. 3.1
    CVE-2020-1720 A flaw was found in PostgreSQL's "ALTER ... DEPENDS ON EXTENSION", where sub-commands did not perform authorization checks.
    PostgreSQLbitnami
    EPSS 1.2% chance of exploitation in 30 days, percentile 67%
  29. 8.8
    CVE-2015-0241 The to_char function in PostgreSQL before 9.0.19, 9.1.x before 9.1.15, 9.2.x before 9.2.10, 9.3.x before 9.3.6, and 9.4.x before 9.4.1 allo…
    PostgreSQL
    EPSS 5.5% chance of exploitation in 30 days, percentile 92%
  30. 8.8
    CVE-2015-0242 Stack-based buffer overflow in the *printf function implementations in PostgreSQL before 9.0.19, 9.1.x before 9.1.15, 9.2.x before 9.2.10,…
    PostgreSQL
    EPSS 5.1% chance of exploitation in 30 days, percentile 92%