Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High8.6Payload: SQL injection in SQLite/PostgresEPSS 0.3%Oct 6, 2026
- Medium5.3Mathesar is a web application that makes working with PostgreSQL databases both simple and powerful.May 15, 2026
- Medium5.3Mathesar is a web application that makes working with PostgreSQL databases both simple and powerful.May 15, 2026
- High8.8SQL injection in PostgreSQL logical replication ALTER SUBSCRIPTION ...May 14, 2026
- High8.8Stack buffer overflow in PostgreSQL module "refint" allows an unprivileged database user to execute arbitrary code as the operating system user running the database.May 14, 2026
- Medium4.3Buffer over-read in PostgreSQL function pg_restore_attribute_stats() accepts array values of unmatched length, which causes query planning to read past end of one array.May 14, 2026
- High7.5Uncontrolled recursion in PostgreSQL SSL and GSS negotiation allows an attacker able to connect to a PostgreSQL AF_UNIX socket to achieve sustained denial of service.May 14, 2026
- Medium6.5Covert timing channel in comparison of MD5-hashed password in PostgreSQL authentication allows an attacker to recover user credentials sufficient to authenticate.May 14, 2026
- High8.8Use of inherently dangerous function PQfn(..., result_is_int=0, ...) in PostgreSQL libpq lo_export(), lo_read(), lo_lseek64(), and lo_tell64() functions allows the ser…May 14, 2026
- High7.2SQL injection in PostgreSQL pg_createsubscriber allows an attacker with pg_create_subscription rights to execute arbitrary SQL as a superuser.May 14, 2026
- High8.8Symlink following in PostgreSQL pg_basebackup plain format and in pg_rewind allows an origin superuser to overwrite local files, e.g.May 14, 2026
- Medium4.3Externally-controlled format string in PostgreSQL timeofday() function allows an attacker to retrieve portions of server memory, via crafted timezone zones.May 14, 2026
- High8.8Integer wraparound in multiple PostgreSQL server features allows an unprivileged database user to cause the server to undersize an allocation and write out-of-bounds.May 14, 2026
- Medium5.4Missing authorization in PostgreSQL CREATE TYPE allows an object creator to hijack other queries that use search_path to find user-defined types, including extension-defined types.May 14, 2026
- High7.1SOGo before 5.12.7, when PostgreSQL or MariaDB is used, and cleartext passwords are stored, allows SQL injection.May 14, 2026
- High7.1SOGo before 5.12.7, when PostgreSQL is used, allows SQL injection.May 14, 2026
- Low2.3pgx is a PostgreSQL driver and toolkit for Go.May 8, 2026
- Critical9.0### Summary A SQL injection vulnerability exists in Rucio versions 1.30.0 and later before 35.8.5, 38.5.5, 39.4.2, and 40.1.1, in .May 6, 2026
- High7.5pgjdbc is an open source postgresql JDBC Driver.Apr 29, 2026
- High8.8Electric is a Postgres sync engine.Apr 21, 2026
- High7.5The SkyWalking OAP /debugging/config/dump endpoint may leak sensitive configuration information of MySQL/PostgreSQL.Apr 15, 2026
- High7.4SQL Injection vulnerability in SchemaHero 0.23.0 via the column parameter to the columnAsInsert function in file plugins/postgres/lib/column.go.Mar 30, 2026
- Medium5.5A flaw has been found in JawherKl node-api-postgres up to 2.5.Mar 16, 2026
- Medium5.5A vulnerability was detected in JawherKl node-api-postgres up to 2.5.Mar 16, 2026
- Critical9.9A vulnerability allowing a Backup Viewer to perform remote code execution (RCE) as the postgres user.EPSS 1.1%Mar 12, 2026
28 records · page 1 of 2
PreviousNext