17283 matches found
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: postgresql (UTSA-2026-099479)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099479 advisory. Missing authorization in PostgreSQL CREATE TYPE allows an object creator to hijack other queries that use searchpath to find user-defined types, including...
PT-2026-73424
ProxySQL is a proxy for MySQL and its forks, as well as PostgreSQL. Versions 2.0.18 through 3.0.8 have a pre-authentication heap memory corruption vulnerability in the MySQL and PostgreSQL protocol first-read paths. A remote unauthenticated client can declare an oversized first packet length, and...
PT-2026-76627
openssl encrypt versions before 1.4.0 contain hardcoded database credentials in standalone server configuration files. Attackers on the same network can access PostgreSQL databases using well-known default credentials to retrieve sensitive data...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: postgresql (UTSA-2026-099449)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099449 advisory. PostgreSQL optimizer statistics allow a user to read sampled data within a view that the user cannot access. Separately, statistics allow a user to read sampled data...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: postgresql (UTSA-2026-099519)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099519 advisory. Uncontrolled recursion in PostgreSQL SSL and GSS negotiation allows an attacker able to connect to a PostgreSQL AFUNIX socket to achieve sustained denial of service...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: postgresql (UTSA-2026-099535)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099535 advisory. Missing authorization in PostgreSQL CREATE STATISTICS command allows a table owner to achieve denial of service against other CREATE STATISTICS users by creating in...
Unity Linux 20.1070a Security Update: libpq (UTSA-2026-099547)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099547 advisory. Symlink following in PostgreSQL pgbasebackup plain format and in pgrewind allows an origin superuser to overwrite local files, e.g. /var/lib/postgres/.bashrc, that...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: postgresql (UTSA-2026-099512)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099512 advisory. Improper neutralization of newlines in pgdump in PostgreSQL allows a user of the origin server to inject arbitrary code for restore-time execution as the client...
PostgreSQL: Multiple Vulnerabilities
Background PostgreSQL is an open source object-relational database management system. Description Multiple vulnerabilities have been discovered in PostgreSQL. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for details. Workaroun...
Exploit for CVE-2026-76904
GeoServer SQL Injection to RCE Zero-Day CVE: CVE-2026...
geoserver-0day-rce
GeoServer SQL Injection to RCE Zero-Day CVE: None yet?...
GHSA-H84G-69H7-MW6V vulnerabilities
Vulnerabilities for packages: solr-fips, solr, airbyte-platform-fips, airbyte-platform, airbyte-server-fips, hono, debezium...
PostgreSQL pg_trgm picksplit reads past end of buffer
...
PostgreSQL refint plan cache type confusion executes arbitrary code
...
PostgreSQL fuzzystrmatch writes effectively-arbitrary addresses, via integer wraparound
...
PostgreSQL 32-bit pltcl and plperl undersize allocations, via integer wraparound
...
PostgreSQL psql COPY FROM STDIN early failure processes data lines as psql commands
...
PostgreSQL fails to check type USAGE privilege
...