59 entries matching postgresql — updated 2026-11-02 · vulnfeed
| CVE / ID | Title | Severity | CVSS | EPSS | Source | Date |
|---|---|---|---|---|---|---|
| CVE-2026-116247 | When a server in pgAdmin 4 had no password file, client certificate or client key configured, or the configured one coul | HIGH | 7.1 | 2%ile | NVD | 2026-10-30 |
| CVE-2026-116252 | pgAdmin 4's materialized view refresh passed the target database's name to psql's --dbname argument unchanged. libpq tre | HIGH | 7.1 | 17%ile | NVD | 2026-10-30 |
| CVE-2026-61789 | DBHub is a database MCP server for Postgres, MySQL, SQL Server, Oracle, MariaDB, SQLite. Prior to 0.22.6, read-only SQL | MEDIUM | 6.1 | 33%ile | NVD | 2026-10-30 |
| CVE-2026-112197 | Vulnerability due to a lack of authentication in critical functions of the NoviGest Desktop App's Java RMI service. An a | CRITICAL | 9.4 | 32%ile | NVD | 2026-10-28 |
| CVE-2026-105617 | PostgreSQL Anonymizer doesn't invalidate plans prepared after a rule was added or a role changed. Users using such plans | MEDIUM | 6.5 | 12%ile | NVD | 2026-10-28 |
| CVE-2026-105620 | PostgreSQL Anonymizer doesn't mask data returned by a sub-query in a rule. The problem is resolved in PostgreSQL Anonymi | MEDIUM | 6.5 | 10%ile | NVD | 2026-10-28 |
| CVE-2026-110181 | PostgreSQL Anonymizer contains a vulnerability related to anonymization functions defined using SQL-standard function bo | MEDIUM | 6.5 | 19%ile | NVD | 2026-10-28 |
| CVE-2026-105616 | PostgreSQL restricts acces to the salt and shift via the `SHOW` command for users not member of `pg_read_all_settings`. | MEDIUM | 5.7 | 9%ile | NVD | 2026-10-28 |
| CVE-2026-105618 | PostgreSQL Anonymizer's documentation recommends applying rules on partitions and inheritance tables. Direct access to t | MEDIUM | 5.7 | 7%ile | NVD | 2026-10-28 |
| CVE-2026-105619 | PostgreSQL Anonymizer doesn't mask data accessed thru a security_invoker view. The problem is resolved in PostgreSQL Ano | MEDIUM | 4.8 | 4%ile | NVD | 2026-10-28 |
| CVE-2026-105613 | PostgreSQL Anonymizer's range-based dummy functions dont constraint the range size. This vulnerability can be exploited | MEDIUM | 4.7 | 8%ile | NVD | 2026-10-28 |
| CVE-2026-105614 | PostgreSQL Anonymizer's `anon.image_blur()` function doesn't check the declared dimension of the provided image, allowin | MEDIUM | 4.7 | 8%ile | NVD | 2026-10-28 |
| CVE-2026-110182 | PostgreSQL Anonymizer contains a vulnerability related to the anon.partial() and anon.partial_email() functions. These f | MEDIUM | 4.3 | 7%ile | NVD | 2026-10-28 |
| CVE-2026-110183 | PostgreSQL Anonymizer contains a vulnerability related to static masking and statistics persistence. Statistics pertaini | MEDIUM | 4.3 | 5%ile | NVD | 2026-10-28 |
| CVE-2026-105612 | PostgreSQL Anonymizer contains a vulnerability that data-modifying CTEs to bypass the read-only restriction of masked ro | LOW | 3.5 | 6%ile | NVD | 2026-10-28 |
| CVE-2026-105615 | PostgreSQL's optimized statistics on a table are visible as long as you have SELECT privilege on said table. A masked ro | LOW | 3.5 | 4%ile | NVD | 2026-10-28 |
| CVE-2026-106076 | A vulnerability allowing an authenticated organization-transfer peer to inject SQL into the configuration database of th | CRITICAL | 9.0 | 30%ile | NVD | 2026-10-27 |
| CVE-2026-57190 | Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 2 | HIGH | 7.0 | 52%ile | NVD | 2026-10-27 |
| GHSA-44jh-23m7-hpcf | @better-auth/drizzle-adapter: Concurrent requests can exceed rate limits on PostgreSQL | LOW | 3.7 | — | GitHub | 2026-10-27 |
| CVE-2026-85878 | Azure Database for PostgreSQL Elevation of Privilege Vulnerability | CRITICAL | 9.9 | 56%ile | Microsoft | 2026-09-08 |
| CVE-2026-14662 | PostgreSQL tsvector and tsquery undersize allocations, via integer wraparound | HIGH | 8.8 | 40%ile | Microsoft | 2026-08-11 |
| CVE-2026-14664 | PostgreSQL regexp heap buffer overflow executes arbitrary code | HIGH | 8.8 | 38%ile | Microsoft | 2026-08-11 |
| CVE-2026-14670 | PostgreSQL plperl tied object heap buffer overflow executes arbitrary code | HIGH | 8.8 | 38%ile | Microsoft | 2026-08-11 |
| CVE-2026-14671 | PostgreSQL refint plan cache type confusion executes arbitrary code | HIGH | 8.8 | 37%ile | Microsoft | 2026-08-11 |
| CVE-2026-14677 | PostgreSQL 32-bit pltcl and plperl undersize allocations, via integer wraparound | HIGH | 8.8 | 36%ile | Microsoft | 2026-08-11 |
| CVE-2026-14680 | PostgreSQL type confusion via "internal" arguments | HIGH | 8.8 | 37%ile | Microsoft | 2026-08-11 |
| CVE-2026-15741 | PostgreSQL expression deparse allows SQL injection via EXTRACT argument | HIGH | 8.8 | 38%ile | Microsoft | 2026-08-11 |
| CVE-2026-15742 | PostgreSQL fuzzystrmatch writes effectively-arbitrary addresses, via integer wraparound | HIGH | 8.8 | 48%ile | Microsoft | 2026-08-11 |
| CVE-2026-16238 | PostgreSQL type confusion in pg_restore_attribute_stats() executes arbitrary code | HIGH | 8.8 | 36%ile | Microsoft | 2026-08-11 |
| CVE-2026-16239 | PostgreSQL type confusion in cursor CLOSE + DECLARE executes arbitrary code | HIGH | 8.8 | 52%ile | Microsoft | 2026-08-11 |
| CVE-2026-18408 | PostgreSQL psql \unrestrict lets superuser of pg_dump origin server execute arbitrary code in psql client | HIGH | 8.8 | 29%ile | Microsoft | 2026-08-11 |
| CVE-2026-19385 | PostgreSQL pg_dump heap buffer overflow executes arbitrary code | HIGH | 8.8 | 37%ile | Microsoft | 2026-08-11 |
| CVE-2026-14668 | PostgreSQL ctid type confusion in selectivity estimator discloses derivative of arbitrary read | HIGH | 8.1 | 27%ile | Microsoft | 2026-08-11 |
| CVE-2026-6464 | PostgreSQL psql COPY FROM STDIN early failure processes data lines as psql commands | HIGH | 8.1 | 30%ile | Microsoft | 2026-08-11 |
| CVE-2026-6471 | PostgreSQL logical decoding can dlopen arbitrary file | HIGH | 7.2 | 45%ile | Microsoft | 2026-08-11 |
| CVE-2026-14663 | PostgreSQL pgcrypto, for OpenSSL-disabled ciphers, silently encrypts to and decrypts from cleartext | MEDIUM | 6.5 | 1%ile | Microsoft | 2026-08-11 |
| CVE-2026-53572 | KEDA: PostgreSQL connection string parameter injection via incomplete whitespace escaping | MEDIUM | 5.9 | 33%ile | Microsoft | 2026-08-11 |
| CVE-2026-14672 | PostgreSQL observable response discrepancy with non-default scram_iterations provides user existence oracle | MEDIUM | 5.3 | 34%ile | Microsoft | 2026-08-11 |
| CVE-2026-14678 | PostgreSQL pg_trgm picksplit reads past end of buffer | MEDIUM | 4.3 | 23%ile | Microsoft | 2026-08-11 |
| CVE-2026-18024 | PostgreSQL ascii() function reads past end of buffer | MEDIUM | 4.3 | 23%ile | Microsoft | 2026-08-11 |
| CVE-2026-6470 | PostgreSQL fails to check type USAGE privilege | MEDIUM | 4.3 | 26%ile | Microsoft | 2026-08-11 |
| CVE-2026-14666 | PostgreSQL row security caching disregards role modifications | MEDIUM | 4.2 | 11%ile | Microsoft | 2026-08-11 |
| CVE-2026-14673 | PostgreSQL amcheck does not clear untrusted search path | LOW | 3.8 | 19%ile | Microsoft | 2026-08-11 |
| CVE-2026-6469 | PostgreSQL ALTER TABLE ALTER TYPE resets extended statistics ownership | LOW | 3.8 | 25%ile | Microsoft | 2026-08-11 |
| CVE-2026-6473 | PostgreSQL server undersizes allocations, via integer wraparound | HIGH | 8.8 | 63%ile | Microsoft | 2026-05-12 |
| CVE-2026-6475 | PostgreSQL pg_basebackup and pg_rewind can overwrite unrelated files of origin superuser choice | HIGH | 8.8 | 35%ile | Microsoft | 2026-05-12 |
| CVE-2026-6477 | PostgreSQL libpq lo_* functions let server superuser overwrite client stack memory | HIGH | 8.8 | 39%ile | Microsoft | 2026-05-12 |
| CVE-2026-6637 | PostgreSQL refint allows stack buffer overflow and SQL injection | HIGH | 8.8 | 31%ile | Microsoft | 2026-05-12 |
| CVE-2026-6479 | PostgreSQL SSL/GSS init causes denial of service, via uncontrolled recursion | HIGH | 7.5 | 48%ile | Microsoft | 2026-05-12 |
| CVE-2026-6478 | PostgreSQL discloses MD5-hashed passwords via covert timing channel | MEDIUM | 6.5 | 46%ile | Microsoft | 2026-05-12 |
| CVE-2026-6472 | PostgreSQL CREATE TYPE does not check multirange schema CREATE privilege | MEDIUM | 5.4 | 5%ile | Microsoft | 2026-05-12 |
| CVE-2026-6474 | PostgreSQL timeofday() can disclose portions of server memory | MEDIUM | 4.3 | 12%ile | Microsoft | 2026-05-12 |
| CVE-2026-6638 | PostgreSQL REFRESH PUBLICATION allows SQL injection via table name | LOW | 3.7 | 8%ile | Microsoft | 2026-05-12 |
| CVE-2025-12818 | PostgreSQL libpq undersizes allocations, via integer wraparound | MEDIUM | 5.9 | 30%ile | Microsoft | 2025-11-11 |
| CVE-2025-12817 | PostgreSQL CREATE STATISTICS does not check for schema CREATE privilege | LOW | 3.1 | 16%ile | Microsoft | 2025-11-11 |
| CVE-2025-8714 | PostgreSQL pg_dump lets superuser of origin server execute arbitrary code in psql client | HIGH | 8.8 | 55%ile | Microsoft | 2025-08-12 |
| CVE-2025-8715 | PostgreSQL pg_dump newline in object name executes arbitrary code in psql client and in restore target server | HIGH | 8.8 | 37%ile | Microsoft | 2025-08-12 |
| CVE-2025-8713 | PostgreSQL optimizer statistics can expose sampled data within a view, partition, or child table | LOW | 3.1 | 15%ile | Microsoft | 2025-08-12 |
| CVE-2025-4207 | PostgreSQL GB18030 encoding validation can read one byte past end of allocation for text that fails validation | MEDIUM | 5.9 | 55%ile | Microsoft | 2025-05-13 |