Vulnerability fixed in PostgreSQL

🗓️ 04 Apr 2019 00:00:00Reported by NCSCType

PostgreSQL vulnerability lets a DB admin gain server rights; exploit code exists; no patch yet; disable copy to/from program.

Reporter	Title	Published	Views	Family All 38
0day.today	PostgreSQL COPY FROM PROGRAM Command Execution Exploit	7 May 201900:00	–	zdt
0day.today	PostgreSQL 9.3-11.7 - Remote Code Execution (Authenticated) Exploit	30 Mar 202200:00	–	zdt
0day.today	PostgreSQL 9.6.1 - Remote Code Execution (Authenticated) Exploit	5 Apr 202300:00	–	zdt
GithubExploit	Exploit for OS Command Injection in Postgresql	29 Mar 202221:02	–	githubexploit
GithubExploit	Exploit for OS Command Injection in Postgresql	6 Oct 202417:16	–	githubexploit
GithubExploit	Exploit for OS Command Injection in Postgresql	21 Jan 202602:08	–	githubexploit
GithubExploit	Exploit for OS Command Injection in Postgresql	1 Dec 202502:49	–	githubexploit
GithubExploit	Exploit for OS Command Injection in Postgresql	6 Oct 202417:16	–	githubexploit
GithubExploit	SQLi	21 Apr 202609:36	–	githubexploit
IBM Security Bulletins	Security Bulletin: IBM has announced a release for IBM Security Identity Governance and Intelligence in response to security vulnerabilities (CVE-2018-1058, CVE-2018-10936, CVE-2019-9193)	27 May 202008:42	–	ibm

04 Apr 2019 00:00Current

7High risk

Vulners AI Score7

CVSS 37.2

CVSS 29

EPSS0.93645

SSVC