CVE-2018-10925

It was discovered that PostgreSQL versions before 10.5, 9.6.10, 9.5.14, 9.4.19, and 9.3.24 failed to properly check authorization on certain statements involved with "INSERT ... ON CONFLICT DO UPDATE". An attacker with "CREATE TABLE" privileges could exploit this to read arbitrary bytes server...

PT-2018-2781

Name of the Vulnerable Software and Affected Versions postgresql versions 10.x prior to 10.2 Description A memory disclosure issue was found in the table partitioning of postgresql, allowing an authenticated attacker to read arbitrary bytes of server memory via purpose-crafted insert to a...