Lucene search
+L

25 matches found

Tenable Nessus
Tenable Nessus
added 2026/08/26 12:00 a.m.5 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: postgresql (UTSA-2026-104759)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104759 advisory. Incomplete tracking in PostgreSQL of changes to role membership, role attributes, and database ownership allows a query to continue using cached row-level security...

4.2CVSS5.9AI score0.00175EPSS
SaveExploits0References4
OSV
OSV
added 2026/08/19 8:52 a.m.8 views

BIT-POSTGRESQL-2026-14666 PostgreSQL row security caching disregards role modifications

Incomplete tracking in PostgreSQL of changes to role membership, role attributes, and database ownership allows a query to continue using cached row-level security policies after those changes require a different policy, via plan reuse. Stale policies continue until some other event invalidates t...

4.2CVSS5.9AI score0.00175EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
added 2026/08/15 12:00 a.m.9 views

SUSE CVE-2026-14666

Incomplete tracking in PostgreSQL of changes to role membership, role attributes, and database ownership allows a query to continue using cached row-level security policies after those changes require a different policy, via plan reuse. Stale policies continue until some other event invalidates t...

4.2CVSS5.3AI score0.00175EPSS
SaveExploits0References5
Snyk
Snyk
added 2026/08/13 4:03 p.m.5 views

Improper Preservation of Consistency Between Independent Representations of Shared State

Overview Affected versions of this package are vulnerable to Improper Preservation of Consistency Between Independent Representations of Shared State due to incomplete tracking of changes in role membership, role attributes, and database ownership in the plan reuse process. An attacker can access...

4.2CVSS5.9AI score0.00175EPSS
SaveExploits0References2
OSV
OSV
added 2026/08/13 1:17 p.m.9 views

AZL-95726 CVE-2026-14666 affecting package postgresql 16.14-1

Incomplete tracking in PostgreSQL of changes to role membership, role attributes, and database ownership allows a query to continue using cached row-level security policies after those changes require a different policy, via plan reuse. Stale policies continue until some other event invalidates t...

4.2CVSS5.9AI score0.00175EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2026/08/13 1:17 p.m.10 views

CVE-2026-14666

Incomplete tracking in PostgreSQL of changes to role membership, role attributes, and database ownership allows a query to continue using cached row-level security policies after those changes require a different policy, via plan reuse. Stale policies continue until some other event invalidates t...

4.2CVSS5.4AI score0.00175EPSS
SaveExploits0References4
OSV
OSV
added 2026/08/13 1:17 p.m.18 views

UBUNTU-CVE-2026-14666

Incomplete tracking in PostgreSQL of changes to role membership, role attributes, and database ownership allows a query to continue using cached row-level security policies after those changes require a different policy, via plan reuse. Stale policies continue until some other event invalidates t...

4.2CVSS5.5AI score0.00175EPSS
SaveExploits0References5
AlpineLinux
AlpineLinux
added 2026/08/13 1:00 p.m.9 views

CVE-2026-14666

Incomplete tracking in PostgreSQL of changes to role membership, role attributes, and database ownership allows a query to continue using cached row-level security policies after those changes require a different policy, via plan reuse. Stale policies continue until some other event invalidates t...

4.2CVSS5.9AI score0.00175EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2026/08/13 1:00 p.m.9 views

CVE-2026-14666

Incomplete tracking in PostgreSQL of changes to role membership, role attributes, and database ownership allows a query to continue using cached row-level security policies after those changes require a different policy, via plan reuse. Stale policies continue until some other event invalidates t...

4.2CVSS5.9AI score0.00175EPSS
SaveExploits0
Vulnrichment
Vulnrichment
added 2026/08/13 1:00 p.m.8 views

CVE-2026-14666 PostgreSQL row security caching disregards role modifications

Incomplete tracking in PostgreSQL of changes to role membership, role attributes, and database ownership allows a query to continue using cached row-level security policies after those changes require a different policy, via plan reuse. Stale policies continue until some other event invalidates t...

4.2CVSS5.9AI score0.00175EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/13 1:00 p.m.8 views

EUVD-2026-57834

Incomplete tracking in PostgreSQL of changes to role membership, role attributes, and database ownership allows a query to continue using cached row-level security policies after those changes require a different policy, via plan reuse. Stale policies continue until some other event invalidates t...

4.2CVSS5.3AI score0.00175EPSS
SaveExploits0References1
PostrgeSql
PostrgeSql
added 2026/08/13 12:00 a.m.176 views

Vulnerability in core server (CVE-2026-14666)

PostgreSQL row security caching disregards role modifications Incomplete tracking in PostgreSQL of changes to role membership, role attributes, and database ownership allows a query to continue using cached row-level security policies after those changes require a different policy, via plan reuse...

4.2CVSS5.9AI score0.00175EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2026/08/13 12:00 a.m.17 views

PT-2026-71465

Name of the Vulnerable Software and Affected Versions PostgreSQL versions prior to 18.5 PostgreSQL versions prior to 17.11 PostgreSQL versions prior to 16.15 PostgreSQL versions prior to 15.19 PostgreSQL versions prior to 14.24 Description Incomplete tracking of changes to role membership, role...

8.8CVSS6.5AI score0.0046EPSS
SaveExploits1References151
OSV
OSV
added 2026/04/03 1:27 p.m.16 views

JLSEC-2026-47

Incomplete tracking in PostgreSQL of tables with row security allows a reused query to view or change different rows from those intended. CVE-2023-2455 and CVE-2016-2193 fixed most interaction between row security and user ID changes. They missed cases where a subquery, WITH query, security invok...

5.4CVSS6.6AI score0.00769EPSS
SaveExploits0References3
IBM Security Bulletins
IBM Security Bulletins
added 2025/10/29 10:29 a.m.16 views

Security Bulletin: for Multiple CVEs : CVE-2024-10976 , CVE-2025-4207, CVE-2023-5870 and CVE-2025-1094

Summary Security Bulletin for Multiple CVEs. Refer below Vulnerability details for more detials. Vulnerability Details CVEID:CVE-2024-10976 DESCRIPTION: Incomplete tracking in PostgreSQL of tables with row security allows a reused query to view or change different rows from those intended...

8.1CVSS7.2AI score0.9003EPSS
SaveExploits10Affected Software2
EUVD
EUVD
added 2025/10/03 8:07 p.m.10 views

EUVD-2024-33374

Malicious code in bioql PyPI...

5.4CVSS6.5AI score0.00769EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2025/08/18 12:00 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2024-10976

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incomplete tracking in PostgreSQL of tables with row security allows a reused query to view or change different rows from those intended. CVE-2023-2455 and...

7.5CVSS6.2AI score0.01807EPSS
SaveExploits0References2
Amazon
Amazon
added 2024/12/19 12:00 a.m.9 views

Important: libpq

Issue Overview: Incomplete tracking in PostgreSQL of tables with row security allows a reused query to view or change different rows from those intended. CVE-2023-2455 and CVE-2016-2193 fixed most interaction between row security and user ID changes. They missed cases where a subquery, WITH query...

8.8CVSS7.2AI score0.04393EPSS
SaveExploits1
Amazon
Amazon
added 2024/12/19 12:00 a.m.19 views

Important: postgresql

Issue Overview: Incomplete tracking in PostgreSQL of tables with row security allows a reused query to view or change different rows from those intended. CVE-2023-2455 and CVE-2016-2193 fixed most interaction between row security and user ID changes. They missed cases where a subquery, WITH query...

8.8CVSS7.2AI score0.04393EPSS
SaveExploits1
Amazon
Amazon
added 2024/12/12 12:00 a.m.23 views

Important: postgresql16

Issue Overview: Incomplete tracking in PostgreSQL of tables with row security allows a reused query to view or change different rows from those intended. CVE-2023-2455 and CVE-2016-2193 fixed most interaction between row security and user ID changes. They missed cases where a subquery, WITH query...

8.8CVSS7.1AI score0.04393EPSS
SaveExploits1
Rows per page
Query Builder