Lucene search
+L

15660 matches found

Tenable Nessus
Tenable Nessus
•added 2026/08/31 12:00 a.m.•16 views

Amazon Linux 2023 : postgresql16, postgresql16-contrib, postgresql16-llvmjit (ALAS2023-2026-2078)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-2078 advisory. Integer wraparound in PostgreSQL tsvector and tsquery data type functions allows an unprivileged database user to cause the server to undersize an allocation and write out-of-bounds, via craft...

8.8CVSS7.3AI score0.00683EPSS
SaveExploits3References50
Tenable Nessus
Tenable Nessus
•added 2026/08/31 12:00 a.m.•17 views

Amazon Linux 2023 : postgresql15, postgresql15-contrib, postgresql15-llvmjit (ALAS2023-2026-2077)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-2077 advisory. Integer wraparound in PostgreSQL tsvector and tsquery data type functions allows an unprivileged database user to cause the server to undersize an allocation and write out-of-bounds, via craft...

8.8CVSS7.2AI score0.00683EPSS
SaveExploits3References48
Tenable Nessus
Tenable Nessus
•added 2026/08/31 12:00 a.m.•17 views

Amazon Linux 2023 : postgresql18, postgresql18-contrib, postgresql18-llvmjit (ALAS2023-2026-2079)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-2079 advisory. Integer wraparound in PostgreSQL tsvector and tsquery data type functions allows an unprivileged database user to cause the server to undersize an allocation and write out-of-bounds, via craft...

8.8CVSS7.5AI score0.00683EPSS
SaveExploits3References56
Tenable Nessus
Tenable Nessus
•added 2026/08/31 12:00 a.m.•15 views

RHEL 8 : postgresql:12 (RHSA-2026:61255)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:61255 advisory. PostgreSQL is an advanced object-relational database management system DBMS. Security Fixes: postgresql: PostgreSQL: Denial of Service via...

7.5CVSS7.2AI score0.0046EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2026/08/31 12:00 a.m.•21 views

RHEL 8 : postgresql:12 (RHSA-2026:61254)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:61254 advisory. PostgreSQL is an advanced object-relational database management system DBMS. Security Fixes: postgresql: PostgreSQL: Denial of Service via...

7.5CVSS7.2AI score0.0046EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/31 12:00 a.m.•0 views

CVE-2026-75132: Improper Neutralization of Special Elements used in an SQL Command

WAPT Server versions 2.6.1.17834 and earlier contains a SQL injection vulnerability in the columns parameter of the GET /api/v3/hosts endpoint. A remote authenticated user with read-only privileges can inject arbitrary PostgreSQL expressions into the SQL query constructed by WAPT. By exploiting t...

7.1CVSS6AI score0.00491EPSS
SaveExploits0References2
Amazon
Amazon
•added 2026/08/31 12:00 a.m.•22 views

Important: postgresql17

Issue Overview: Integer wraparound in PostgreSQL tsvector and tsquery data type functions allows an unprivileged database user to cause the server to undersize an allocation and write out-of-bounds, via crafted large inputs. This may execute arbitrary code as the operating system user running the...

8.8CVSS7.3AI score0.00683EPSS
SaveExploits2
Tenable Nessus
Tenable Nessus
•added 2026/08/31 12:00 a.m.•14 views

Amazon Linux 2023 : postgresql17, postgresql17-contrib, postgresql17-llvmjit (ALAS2023-2026-2076)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-2076 advisory. Integer wraparound in PostgreSQL tsvector and tsquery data type functions allows an unprivileged database user to cause the server to undersize an allocation and write out-of-bounds, via craft...

8.8CVSS7.3AI score0.00683EPSS
SaveExploits3References50
Tenable Nessus
Tenable Nessus
•added 2026/08/31 12:00 a.m.•16 views

Amazon Linux 2 : postgresql, --advisory ALAS2-2026-3900 (ALAS-2026-3900)

The version of postgresql installed on the remote host is prior to 9.2.24-8. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3900 advisory. Integer wraparound in PostgreSQL tsvector and tsquery data type functions allows an unprivileged database user to caus...

8.8CVSS7.8AI score0.01509EPSS
SaveExploits2References14
OSV
OSV
•added 2026/08/30 3:41 p.m.•10 views

OPENSUSE-SU-2026:21702-1 Security update for postgresql17

This update for postgresql17 fixes the following issues: - CVE-2026-6464: psql COPY FROM STDIN early failure processes data lines as psql commands bsc1275046. - CVE-2026-6469: ALTER TABLE ALTER TYPE resets extended statistics ownership bsc1275044. - CVE-2026-6470: failure to check type USAGE...

8.8CVSS7.2AI score0.00683EPSS
SaveExploits3References50
OSV
OSV
•added 2026/08/30 3:41 p.m.•13 views

OPENSUSE-SU-2026:21701-1 Security update for postgresql16

This update for postgresql16 fixes the following issues: - CVE-2026-6464: psql COPY FROM STDIN early failure processes data lines as psql commands bsc1275046. - CVE-2026-6469: ALTER TABLE ALTER TYPE resets extended statistics ownership bsc1275044. - CVE-2026-6470: failure to check type USAGE...

8.8CVSS7.2AI score0.00683EPSS
SaveExploits3References50
OSV
OSV
•added 2026/08/30 3:41 p.m.•10 views

OPENSUSE-SU-2026:21700-1 Security update for postgresql15

This update for postgresql15 fixes the following issues: - CVE-2026-6464: psql COPY FROM STDIN early failure processes data lines as psql commands bsc1275046. - CVE-2026-6469: ALTER TABLE ALTER TYPE resets extended statistics ownership bsc1275044. - CVE-2026-6470: failure to check type USAGE...

8.8CVSS7.2AI score0.00683EPSS
SaveExploits3References48
OSV
OSV
•added 2026/08/30 3:40 p.m.•7 views

OPENSUSE-SU-2026:21699-1 Security update for postgresql14

This update for postgresql14 fixes the following issues: - CVE-2026-6464: psql COPY FROM STDIN early failure processes data lines as psql commands bsc1275046. - CVE-2026-6469: ALTER TABLE ALTER TYPE resets extended statistics ownership bsc1275044. - CVE-2026-6470: failure to check type USAGE...

8.8CVSS7.2AI score0.00683EPSS
SaveExploits3References48
Vulnrichment
Vulnrichment
•added 2026/08/30 3:13 p.m.•11 views

CVE-2026-78699 rename_tenant returns :ok on a failed rename, enabling cross-tenant access in AshPostgres

Unchecked Return Value vulnerability in ash-project ashpostgres allows a user who can drive a tenant rename to a name that collides with an existing tenant's schema to have their tenant record repointed at that other tenant's live schema, gaining access to its data...

7.2CVSS5.9AI score0.0016EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/08/30 3:13 p.m.•14 views

EUVD-2026-68265

Unchecked Return Value vulnerability in ash-project ashpostgres allows a user who can drive a tenant rename to a name that collides with an existing tenant's schema to have their tenant record repointed at that other tenant's live schema, gaining access to its data...

7.2CVSS5.9AI score0.0016EPSS
SaveExploits0References4
CVE
CVE
•added 2026/08/30 3:13 p.m.•26 views

CVE-2026-78699

ash_postgres (ash-project) versions 0.25.0 through 2.12.0 are affected by an unchecked return value in AshPostgres.MultiTenancy.rename_tenant/3. The function issues ALTER SCHEMA … RENAME TO … via the non-raising Ecto.Adapters.SQL.query/2, discards the result, and unconditionally returns :ok. When...

7.2CVSS5.9AI score0.0016EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/30 12:00 a.m.•0 views

CVE-2026-78699: Unchecked Return Value

Unchecked Return Value vulnerability in ash-project ashpostgres allows a user who can drive a tenant rename to a name that collides with an existing tenant's schema to have their tenant record repointed at that other tenant's live schema, gaining access to its data...

7.2CVSS5.9AI score0.0016EPSS
SaveExploits0References2
Fedora
Fedora
•added 2026/08/28 4:07 p.m.•10 views

[SECURITY] Fedora 44 Update: postgresql16-anonymizer-3.1.3-1.fc44

PostgreSQL Anonymizer is an extension to mask or replace personally identifiable information PII or commercially sensitive data from a PostgreSQL database. The project has a declarative approach of anonymization. This means you can declare the masking rules using the PostgreSQL Data Definition...

8.8CVSS5.9AI score0.00429EPSS
SaveExploits2
Packet Storm
Packet Storm
•added 2026/08/28 12:00 a.m.•42 views

ProFTPd 1.3.9 mod_sql SQL Injection / Remote Code Execution

ProFTPD versions prior to 1.3.9a contain an SQL injection vulnerability in the modsql module due to improper handling of attacker-controlled values considered already escaped. This exploit uses an authenticated FTP STOR filename to inject a stacked PostgreSQL query and execute an arbitrary...

8.1CVSS7.5AI score0.07307EPSS
SaveExploits9
RedhatCVE
RedhatCVE
•added 2026/08/27 2:08 p.m.•11 views

CVE-2026-16238

A flaw was found in PostgreSQL. An object creator can exploit a type confusion vulnerability in the pgrestoreattributestats function. This flaw occurs due to the conflation of range and multirange values, allowing the attacker to execute arbitrary code as the operating system user running the...

8.8CVSS8.3AI score0.00414EPSS
SaveExploits0References4
Rows per page
Query Builder