15816 matches found
PostgreSQL ascii() function reads past end of buffer
...
PostgreSQL regexp heap buffer overflow executes arbitrary code
...
PostgreSQL row security caching disregards role modifications
...
PostgreSQL pgcrypto, for OpenSSL-disabled ciphers, silently encrypts to and decrypts from cleartext
...
PostgreSQL type confusion in cursor CLOSE + DECLARE executes arbitrary code
...
PostgreSQL ALTER TABLE ALTER TYPE resets extended statistics ownership
...
PostgreSQL pg_dump heap buffer overflow executes arbitrary code
...
PostgreSQL psql \unrestrict lets superuser of pg_dump origin server execute arbitrary code in psql client
...
PostgreSQL observable response discrepancy with non-default scram_iterations provides user existence oracle
...
PostgreSQL ctid type confusion in selectivity estimator discloses derivative of arbitrary read
...
PostgreSQL plperl tied object heap buffer overflow executes arbitrary code
...
PostgreSQL expression deparse allows SQL injection via EXTRACT argument
...
PostgreSQL amcheck does not clear untrusted search path
...
SUSE CVE-2026-6464
Untrusted data inclusion in PostgreSQL psql COPY may allow a server administrator to elicit execution of data lines as psql commands, via error injection. If the "COPY FROM STDIN" or "\copy FROM STDIN" command fails before the server indicates that it awaits input rows, psql processes the in-line...
SUSE CVE-2026-6469
Incorrect ownership assignment in PostgreSQL ALTER TABLE ALTER TYPE command reassigns ownership of dependent statistics objects to the current user. This wrongly allows the table owner to run DROP STATISTICS and ALTER STATISTICS via this improper ownership. It wrongly denies those commands to the...
SUSE CVE-2026-6470
Missing authorization in PostgreSQL DDL commands allows an object creator to achieve denial of service against ALTER and DROP of the type, via creating a dependency on the type. Many DDL operations did check the privilege, but assigning a range subtype and referencing the type from an SQL...
SUSE CVE-2026-6471
Missing authorization in PostgreSQL logical decoding allows a non-superuser holding REPLICATION privilege to dlopen any file visible to the operating system account running the server, via the choice of logical decoding plugin. This in turn runs arbitrary code as that account. Versions before...
SUSE CVE-2026-14664
Heap buffer overflow in PostgreSQL regexp allows the query author to execute arbitrary code as the operating system user running the database, via text that would not pass encoding validation. This shares heritage with CVE-2026-2006, but this case involved unanticipated data growth when...
SUSE CVE-2026-14666
Incomplete tracking in PostgreSQL of changes to role membership, role attributes, and database ownership allows a query to continue using cached row-level security policies after those changes require a different policy, via plan reuse. Stale policies continue until some other event invalidates t...
SUSE CVE-2026-14668
Type confusion regarding input of PostgreSQL ctid data type selectivity estimator allows an object creator to view a calculation derived from the value of an arbitrary 4-byte span of memory, via a chosen non-ctid input. While the calculation loses precision, substantial memory value recovery...