CVE-2016-10782

cPanel before 60.0.25 allows self stored XSS in postgres API1 listdbs SEC-181...

CVE-2017-18386

cPanel before 68.0.15 allows arbitrary code execution via Maketext injection in PostgresAdmin SEC-313...

CVE-2019-10749

sequelize before version 3.35.1 allows attackers to perform a SQL Injection due to the JSON path keys not being properly sanitized in the Postgres dialect...

CVE-2006-6469

Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 do not block the postgres port 5432/tcp, which has unknown impact and remote attack vectors, probably related to unauthorized connections to a PostgreSQL daemon...

CVE-2025-22248 [pgpool] Unauthenticated access to postgres through pgpool

The bitnami/pgpool Docker image, and the bitnami/postgres-ha k8s chart, under default configurations, comes with an 'repmgr' user that allows unauthenticated access to the database inside the cluster. The PGPOOLSRCHECKUSER is the user that Pgpool itself uses to perform streaming replication check...

CVE-2025-22248: Initialization of a Resource with an Insecure Default

The bitnami/pgpool Docker image, and the bitnami/postgres-ha k8s chart, under default configurations, comes with an 'repmgr' user that allows unauthenticated access to the database inside the cluster. The PGPOOLSRCHECKUSER is the user that Pgpool itself uses to perform streaming replication check...

PT-2025-20841 · Bitnami +2 · Bitnami/Postgres-Ha +3

Name of the Vulnerable Software and Affected Versions: bitnami/pgpool affected versions not specified bitnami/postgres-ha affected versions not specified Description: The bitnami/pgpool Docker image and the bitnami/postgres-ha k8s chart, under default configurations, come with a repmgr user that...

BIT-PGBOUNCER-2025-2291 PgBouncer default auth_query does not take Postgres password expiry into account

Password can be used past expiry in PgBouncer due to authquery not taking into account Postgres its VALID UNTIL value, which allows an attacker to log in with an already expired password...

CVE-2025-2291 PgBouncer default auth_query does not take Postgres password expiry into account

Password can be used past expiry in PgBouncer due to authquery not taking into account Postgres its VALID UNTIL value, which allows an attacker to log in with an already expired password...

BIT-SUPERSET-2024-53947 Apache Superset: Improper SQL authorisation, parse not checking for specific postgres functions

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Apache Superset. Specifically, certain engine-specific functions are not checked, which allows attackers to bypass Apache Superset's SQL authorization. This issue is a follow-up to CVE-2024-39887...

org.apache.pulsar:pulsar-io-debezium-core (2.9.5), org.apache.pulsar:pulsar-io-debezium-mongodb (2.9.5) +5 more potentially affected by CVE-2025-30677 via org.apache.pulsar:pulsar-io-kafka-connect-adaptor (2.9.5)

org.apache.pulsar:pulsar-io-kafka-connect-adaptor MAVEN version 2.9.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.pulsar:pulsar-io-kafka-connect-adaptor and may be impacted: - org.apache.pulsar:pulsar-io-debezium-core 2.9.5 -...

org.apache.pulsar:pulsar-io-debezium-core (2.7.1), org.apache.pulsar:pulsar-io-debezium-mongodb (2.7.1) +2 more potentially affected by CVE-2025-30677 via org.apache.pulsar:pulsar-io-kafka-connect-adaptor (2.7.1)

org.apache.pulsar:pulsar-io-kafka-connect-adaptor MAVEN version 2.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.pulsar:pulsar-io-kafka-connect-adaptor and may be impacted: - org.apache.pulsar:pulsar-io-debezium-core 2.7.1 -...

org.apache.pulsar:pulsar-io-debezium-core (2.8.1), org.apache.pulsar:pulsar-io-debezium-mongodb (2.8.1) +3 more potentially affected by CVE-2025-30677 via org.apache.pulsar:pulsar-io-kafka-connect-adaptor (2.8.1)

org.apache.pulsar:pulsar-io-kafka-connect-adaptor MAVEN version 2.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.pulsar:pulsar-io-kafka-connect-adaptor and may be impacted: - org.apache.pulsar:pulsar-io-debezium-core 2.8.1 -...

org.apache.pulsar:pulsar-io-debezium-core (2.8.2), org.apache.pulsar:pulsar-io-debezium-mongodb (2.8.2) +3 more potentially affected by CVE-2025-30677 via org.apache.pulsar:pulsar-io-kafka-connect-adaptor (2.8.2)

org.apache.pulsar:pulsar-io-kafka-connect-adaptor MAVEN version 2.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.pulsar:pulsar-io-kafka-connect-adaptor and may be impacted: - org.apache.pulsar:pulsar-io-debezium-core 2.8.2 -...

org.apache.pulsar:pulsar-io-debezium-core (2.5.1), org.apache.pulsar:pulsar-io-debezium-mongodb (2.5.1) +2 more potentially affected by CVE-2025-30677 via org.apache.pulsar:pulsar-io-kafka-connect-adaptor (2.5.1)

org.apache.pulsar:pulsar-io-kafka-connect-adaptor MAVEN version 2.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.pulsar:pulsar-io-kafka-connect-adaptor and may be impacted: - org.apache.pulsar:pulsar-io-debezium-core 2.5.1 -...

org.apache.pulsar:pulsar-io-debezium-core (2.8.3), org.apache.pulsar:pulsar-io-debezium-mongodb (2.8.3) +3 more potentially affected by CVE-2025-30677 via org.apache.pulsar:pulsar-io-kafka-connect-adaptor (2.8.3)

org.apache.pulsar:pulsar-io-kafka-connect-adaptor MAVEN version 2.8.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.pulsar:pulsar-io-kafka-connect-adaptor and may be impacted: - org.apache.pulsar:pulsar-io-debezium-core 2.8.3 -...

org.apache.pulsar:pulsar-io-debezium-core (2.11.1), org.apache.pulsar:pulsar-io-debezium-mongodb (2.11.1) +5 more potentially affected by CVE-2025-30677 via org.apache.pulsar:pulsar-io-kafka-connect-adaptor (2.11.1)

org.apache.pulsar:pulsar-io-kafka-connect-adaptor MAVEN version 2.11.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.pulsar:pulsar-io-kafka-connect-adaptor and may be impacted: - org.apache.pulsar:pulsar-io-debezium-core 2.11.1 -...

org.apache.pulsar:pulsar-io-debezium-core (2.11.0), org.apache.pulsar:pulsar-io-debezium-mongodb (2.11.0) +5 more potentially affected by CVE-2025-30677 via org.apache.pulsar:pulsar-io-kafka-connect-adaptor (2.11.0)

org.apache.pulsar:pulsar-io-kafka-connect-adaptor MAVEN version 2.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.pulsar:pulsar-io-kafka-connect-adaptor and may be impacted: - org.apache.pulsar:pulsar-io-debezium-core 2.11.0 -...

org.apache.pulsar:pulsar-io-debezium-core (2.7.5), org.apache.pulsar:pulsar-io-debezium-mongodb (2.7.5) +2 more potentially affected by CVE-2025-30677 via org.apache.pulsar:pulsar-io-kafka-connect-adaptor (2.7.5)

org.apache.pulsar:pulsar-io-kafka-connect-adaptor MAVEN version 2.7.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.pulsar:pulsar-io-kafka-connect-adaptor and may be impacted: - org.apache.pulsar:pulsar-io-debezium-core 2.7.5 -...

org.apache.pulsar:pulsar-io-debezium-core (2.10.6), org.apache.pulsar:pulsar-io-debezium-mongodb (2.10.6) +5 more potentially affected by CVE-2025-30677 via org.apache.pulsar:pulsar-io-kafka-connect-adaptor (2.10.6)

org.apache.pulsar:pulsar-io-kafka-connect-adaptor MAVEN version 2.10.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.pulsar:pulsar-io-kafka-connect-adaptor and may be impacted: - org.apache.pulsar:pulsar-io-debezium-core 2.10.6 -...