vulnwire

All · PostgreSQL

Newest first. Every filter here is also a feed: see the subscribe box.

  1. 8.8high
    CVE-2026-14671PostgreSQL refint plan cache type confusion executes arbitrary code
    PostgreSQL
    2 mo ago
  2. 7.2high
    CVE-2026-6471PostgreSQL logical decoding can dlopen arbitrary file
    PostgreSQL
    2 mo ago
  3. 4.3med
    CVE-2026-6470PostgreSQL fails to check type USAGE privilege
    PostgreSQL
    2 mo ago
  4. 3.8low
    CVE-2026-6469PostgreSQL ALTER TABLE ALTER TYPE resets extended statistics ownership
    PostgreSQL
    2 mo ago
  5. 8.1high
    CVE-2026-6464PostgreSQL psql COPY FROM STDIN early failure processes data lines as psql commands
    PostgreSQL
    2 mo ago
  6. 8.8high
    CVE-2026-19385PostgreSQL pg_dump heap buffer overflow executes arbitrary code
    PostgreSQL
    2 mo ago
  7. 8.8high
    CVE-2026-18408PostgreSQL psql \unrestrict lets superuser of pg_dump origin server execute arbitrary code in psql client
    PostgreSQL
    2 mo ago
  8. 4.3med
    CVE-2026-18024PostgreSQL ascii() function reads past end of buffer
    PostgreSQL
    2 mo ago
  9. 3.8low
    CVE-2026-16241PostgreSQL ECPG integer underflow can crash the client
    PostgreSQL
    2 mo ago
  10. 8.8high
    CVE-2026-16239PostgreSQL type confusion in cursor CLOSE + DECLARE executes arbitrary code
    PostgreSQL
    2 mo ago
  11. 8.8high
    CVE-2026-16238PostgreSQL type confusion in pg_restore_attribute_stats() executes arbitrary code
    PostgreSQL
    2 mo ago
  12. 8.8high
    CVE-2026-15742PostgreSQL fuzzystrmatch writes effectively-arbitrary addresses, via integer wraparound
    PostgreSQL
    2 mo ago
  13. 8.8high
    CVE-2026-15741PostgreSQL expression deparse allows SQL injection via EXTRACT argument
    PostgreSQL
    2 mo ago
  14. 4.2med
    CVE-2026-14681PostgreSQL improper enforcement of GSSAPI encryption when coupled with SSL
    PostgreSQL
    2 mo ago
  15. 8.8high
    CVE-2026-14680PostgreSQL type confusion via "internal" arguments
    PostgreSQL
    2 mo ago
  16. 8.2high
    CVE-2026-14679PostgreSQL stack buffer overflow in argument match writes 0x0 and 0x1 to server memory
    PostgreSQL
    2 mo ago
  17. 4.3med
    CVE-2026-14678PostgreSQL pg_trgm picksplit reads past end of buffer
    PostgreSQL
    2 mo ago
  18. 8.8high
    CVE-2026-14677PostgreSQL 32-bit pltcl and plperl undersize allocations, via integer wraparound
    PostgreSQL
    2 mo ago
  19. 8.8high
    CVE-2026-14676PostgreSQL pg_stat_statements heap buffer overflow executes arbitrary code
    PostgreSQL
    2 mo ago
  20. 3.8low
    CVE-2026-14673PostgreSQL amcheck does not clear untrusted search path
    PostgreSQL
    2 mo ago
  21. 5.3med
    CVE-2026-14672PostgreSQL observable response discrepancy with non-default scram_iterations provides user existence oracle
    PostgreSQL
    2 mo ago
  22. 8.8high
    CVE-2026-14670PostgreSQL plperl tied object heap buffer overflow executes arbitrary code
    PostgreSQL
    2 mo ago
  23. 8.8high
    CVE-2026-14669PostgreSQL to_char heap buffer overflow executes arbitrary code
    PostgreSQL
    2 mo ago
  24. 8.1high
    CVE-2026-14668PostgreSQL ctid type confusion in selectivity estimator discloses derivative of arbitrary read
    PostgreSQL
    2 mo ago
  25. 4.2med
    CVE-2026-14666PostgreSQL row security caching disregards role modifications
    PostgreSQL
    2 mo ago
  26. 8.8high
    CVE-2026-14664PostgreSQL regexp heap buffer overflow executes arbitrary code
    PostgreSQL
    2 mo ago
  27. 6.5med
    CVE-2026-14663PostgreSQL pgcrypto, for OpenSSL-disabled ciphers, silently encrypts to and decrypts from cleartext
    PostgreSQL
    2 mo ago
  28. 8.8high
    CVE-2026-14662PostgreSQL tsvector and tsquery undersize allocations, via integer wraparound
    PostgreSQL
    2 mo ago
  29. 3.7low
    CVE-2026-6638PostgreSQL REFRESH PUBLICATION allows SQL injection via table name
    PostgreSQL
    5 mo ago
  30. 8.8high
    CVE-2026-6637PostgreSQL refint allows stack buffer overflow and SQL injection
    PostgreSQL
    5 mo ago