SUSE CVE-2019-9193

🗓️ 04 Jun 2024 13:24:19Reported by Suse CVEType

CVE-2019-9193: PostgreSQL 9.3–11.2 lets superusers and the pg_execute_server_program group run OS commands via COPY TO/FROM PROGRAM.

Reporter	Title	Published	Views	Family All 39
0day.today	PostgreSQL COPY FROM PROGRAM Command Execution Exploit	7 May 201900:00	–	zdt
0day.today	PostgreSQL 9.3-11.7 - Remote Code Execution (Authenticated) Exploit	30 Mar 202200:00	–	zdt
0day.today	PostgreSQL 9.6.1 - Remote Code Execution (Authenticated) Exploit	5 Apr 202300:00	–	zdt
GithubExploit	Exploit for OS Command Injection in Postgresql	29 Mar 202221:02	–	githubexploit
GithubExploit	Exploit for OS Command Injection in Postgresql	6 Oct 202417:16	–	githubexploit
GithubExploit	Exploit for OS Command Injection in Postgresql	21 Jan 202602:08	–	githubexploit
GithubExploit	Exploit for OS Command Injection in Postgresql	1 Dec 202502:49	–	githubexploit
GithubExploit	Exploit for OS Command Injection in Postgresql	6 Oct 202417:16	–	githubexploit
GithubExploit	SQLi	21 Apr 202609:36	–	githubexploit
IBM Security Bulletins	Security Bulletin: IBM has announced a release for IBM Security Identity Governance and Intelligence in response to security vulnerabilities (CVE-2018-1058, CVE-2018-10936, CVE-2019-9193)	27 May 202008:42	–	ibm

Source	Link
suse	www.suse.com/security/cve/CVE-2019-9193
suse	www.suse.com/support/security/rating/
bugzilla	www.bugzilla.suse.com/1131315

13 Mar 2026 15:27Current

7.6High risk

Vulners AI Score7.6

CVSS 37.2

CVSS 29

EPSS0.93645

SSVC