Skip to content
Fencer Intel

All · PostgreSQL

Newest first, late arrivals on top. Also a feed.

  1. 8.5
    CVE-2007-0555 PostgreSQL 7.3 before 7.3.13, 7.4 before 7.4.16, 8.0 before 8.0.11, 8.1 before 8.1.7, and 8.2 before 8.2.2 allows attackers to disable cert…
    PostgreSQL
    EPSS 5.0% chance of exploitation in 30 days, percentile 92%
  2. 4.0
    CVE-2006-5542 backend/tcop/postgres.c in PostgreSQL 8.1.x before 8.1.5 allows remote authenticated users to cause a denial of service (daemon crash) rela…
    PostgreSQL
    EPSS 2.0% chance of exploitation in 30 days, percentile 81%
  3. 4.0
    CVE-2006-5541 backend/parser/parse_coerce.c in PostgreSQL 7.4.1 through 7.4.14, 8.0.x before 8.0.9, and 8.1.x before 8.1.5 allows remote authenticated us…
    PostgreSQL
    EPSS 3.2% chance of exploitation in 30 days, percentile 88%
  4. 4.0
    CVE-2006-5540 backend/parser/analyze.c in PostgreSQL 8.1.x before 8.1.5 allows remote authenticated users to cause a denial of service (daemon crash) via…
    PostgreSQL
    EPSS 2.0% chance of exploitation in 30 days, percentile 81%
  5. 7.5
    CVE-2006-2314 PostgreSQL 8.1.x before 8.1.4, 8.0.x before 8.0.8, 7.4.x before 7.4.13, 7.3.x before 7.3.15, and earlier versions allows context-dependent…
    PostgreSQL
    EPSS 2.9% chance of exploitation in 30 days, percentile 86%
  6. 7.5
    CVE-2006-2313 PostgreSQL 8.1.x before 8.1.4, 8.0.x before 8.0.8, 7.4.x before 7.4.13, 7.3.x before 7.3.15, and earlier versions allows context-dependent…
    PostgreSQL
    EPSS 2.9% chance of exploitation in 30 days, percentile 86%
  7. 1.5
    CVE-2006-0678 PostgreSQL 7.3.x before 7.3.14, 7.4.x before 7.4.12, 8.0.x before 8.0.7, and 8.1.x before 8.1.3, when compiled with Asserts enabled, allows…
    PostgreSQL
  8. 6.5
    CVE-2006-0553 PostgreSQL 8.1.0 through 8.1.2 allows authenticated database users to gain additional privileges via "knowledge of the backend protocol" us…
    PostgreSQL
    EPSS 3.0% chance of exploitation in 30 days, percentile 87%
  9. 5.0
    CVE-2006-0105 PostgreSQL 8.0.x before 8.0.6 and 8.1.x before 8.1.2, when running on Windows, allows remote attackers to cause a denial of service (postma…
    PostgreSQL
    EPSS 2.3% chance of exploitation in 30 days, percentile 83%
  10. 2.1
    CVE-2005-1410 The tsearch2 module in PostgreSQL 7.4 through 8.0.x declares the (1) dex_init, (2) snb_en_init, (3) snb_ru_init, (4) spell_init, and (5) sy…
    PostgreSQL
  11. 7.5
    CVE-2005-1409 PostgreSQL 7.3.x through 8.0.x gives public EXECUTE access to certain character conversion functions, which allows unprivileged users to ca…
    PostgreSQL
    EPSS 2.0% chance of exploitation in 30 days, percentile 81%
  12. 6.5
    CVE-2005-0247 Multiple buffer overflows in gram.y for PostgreSQL 8.0.1 and earlier may allow attackers to execute arbitrary code via (1) a large number o…
    PostgreSQL
    EPSS 3.5% chance of exploitation in 30 days, percentile 89%
  13. 5.0
    CVE-2005-0246 The intagg contrib module for PostgreSQL 8.0.0 and earlier allows attackers to cause a denial of service (crash) via crafted arrays.
    PostgreSQL
    EPSS 2.6% chance of exploitation in 30 days, percentile 85%
  14. 6.5
    CVE-2005-0244 PostgreSQL 8.0.0 and earlier allows local users to bypass the EXECUTE permission check for functions by using the CREATE AGGREGATE command.
    PostgreSQL
    EPSS 2.0% chance of exploitation in 30 days, percentile 80%
  15. 4.3
    CVE-2005-0227 PostgreSQL (pgsql) 7.4.x, 7.2.x, and other versions allows local users to load arbitrary shared libraries and execute code via the LOAD ext…
    PostgreSQL
  16. 7.5
    CVE-2005-0245 Buffer overflow in gram.y for PostgreSQL 8.0.0 and earlier may allow attackers to execute arbitrary code via a large number of arguments to…
    PostgreSQL
    1 public exploit EPSS 14.5% chance of exploitation in 30 days, percentile 96%
  17. 2.1
    CVE-2004-0977 The make_oidjoins_check script in PostgreSQL 7.4.5 and earlier allows local users to overwrite files via a symlink attack on temporary file…
    PostgreSQL
  18. 5.0
    CVE-2004-0547 Buffer overflow in the ODBC driver for PostgreSQL before 7.2.1 allows remote attackers to cause a denial of service (crash).
    PostgreSQL
    EPSS 2.7% chance of exploitation in 30 days, percentile 86%
  19. 7.5
    CVE-2003-0901 Buffer overflow in to_ascii for PostgreSQL 7.2.x, and 7.3.x before 7.3.4, allows remote attackers to execute arbitrary code.
    PostgreSQL
    EPSS 4.8% chance of exploitation in 30 days, percentile 92%
  20. 4.6
    CVE-2002-1402 Buffer overflows in the (1) TZ and (2) SET TIME ZONE enivronment variables for PostgreSQL 7.2.1 and earlier allow local users to cause a de…
    PostgreSQL
  21. 6.5
    CVE-2002-1401 Buffer overflows in (1) circle_poly, (2) path_encode and (3) path_add (also incorrectly identified as path_addr) for PostgreSQL 7.2.3 and e…
    PostgreSQL
    EPSS 2.2% chance of exploitation in 30 days, percentile 82%
  22. 7.5
    CVE-2002-1400 Heap-based buffer overflow in the repeat() function for PostgreSQL before 7.2.2 allows attackers to execute arbitrary code by causing repea…
    PostgreSQL
    EPSS 3.9% chance of exploitation in 30 days, percentile 90%
  23. 10.0
    CVE-2002-1399 Unknown vulnerability in cash_out and possibly other functions in PostgreSQL 7.2.1 and earlier, and possibly later versions before 7.2.3, w…
    PostgreSQL
    EPSS 1.8% chance of exploitation in 30 days, percentile 78%
  24. 4.6
    CVE-2002-1398 Buffer overflow in the date parser for PostgreSQL before 7.2.2 allows attackers to cause a denial of service and possibly execute arbitrary…
    PostgreSQL
  25. 7.5
    CVE-2002-1397 Vulnerability in the cash_words() function for PostgreSQL 7.2 and earlier allows local users to cause a denial of service and possibly exec…
    PostgreSQL
    EPSS 2.8% chance of exploitation in 30 days, percentile 86%
  26. 7.5
    CVE-2002-1657 PostgreSQL uses the username for a salt when generating passwords, which makes it easier for remote attackers to guess passwords via a brut…
    PostgreSQL
    EPSS 1.3% chance of exploitation in 30 days, percentile 70%
  27. 7.2
    CVE-2002-1642 PostgreSQL 7.2.1 and 7.2.2 allows local users to delete transaction log (pg_clog) data and cause a denial of service (data loss) via the VA…
    PostgreSQL
  28. 4.6
    CVE-2002-0972 Buffer overflows in PostgreSQL 7.2 allow attackers to cause a denial of service and possibly execute arbitrary code via long arguments to t…
    PostgreSQL
  29. 7.5
    CVE-2002-0802 The multibyte support in PostgreSQL 6.5.x with SQL_ASCII encoding consumes an extra character when processing a character that cannot be co…
    PostgreSQL
    EPSS 1.1% chance of exploitation in 30 days, percentile 65%
  30. 4.6
    CVE-2000-1199 PostgreSQL stores usernames and passwords in plaintext in (1) pg_shadow and (2) pg_pwd, which allows attackers with sufficient privileges t…
    PostgreSQL
    1 public exploit