Skip to content
Fencer Intel

All · PostgreSQL

Newest first, late arrivals on top. Also a feed.

  1. 4.0
    CVE-2012-2655 PostgreSQL 8.3.x before 8.3.19, 8.4.x before 8.4.12, 9.0.x before 9.0.8, and 9.1.x before 9.1.4 allows remote authenticated users to cause…
    PostgreSQL
    EPSS 2.9% chance of exploitation in 30 days, percentile 87%
  2. 6.8
    CVE-2012-0868 CRLF injection vulnerability in pg_dump in PostgreSQL 8.3.x before 8.3.18, 8.4.x before 8.4.11, 9.0.x before 9.0.7, and 9.1.x before 9.1.3…
    PostgreSQL
    EPSS 2.7% chance of exploitation in 30 days, percentile 86%
  3. 4.3
    CVE-2012-0867 PostgreSQL 8.4.x before 8.4.11, 9.0.x before 9.0.7, and 9.1.x before 9.1.3 truncates the common name to only 32 characters when verifying S…
    PostgreSQL
    EPSS 2.3% chance of exploitation in 30 days, percentile 83%
  4. 6.5
    CVE-2012-0866 CREATE TRIGGER in PostgreSQL 8.3.x before 8.3.18, 8.4.x before 8.4.11, 9.0.x before 9.0.7, and 9.1.x before 9.1.3 does not properly check t…
    PostgreSQL
    EPSS 3.6% chance of exploitation in 30 days, percentile 89%
  5. 4.3
    CVE-2012-2143 The crypt_des (aka DES-based crypt) function in FreeBSD before 9.0-RELEASE-p2, as used in PHP, PostgreSQL, and other products, does not pro…
    PostgreSQLPHP
    EPSS 5.7% chance of exploitation in 30 days, percentile 93%
  6. 5.0
    CVE-2011-2483 crypt_blowfish before 1.1, as used in PHP before 5.3.7 on certain platforms, PostgreSQL before 8.4.9, and other products, does not properly…
    PostgreSQLPHP
    EPSS 5.0% chance of exploitation in 30 days, percentile 92%
  7. 6.5
    CVE-2010-4015 Buffer overflow in the gettoken function in contrib/intarray/_int_bool.c in the intarray array module in PostgreSQL 9.0.x before 9.0.3, 8.4…
    PostgreSQL
    EPSS 4.6% chance of exploitation in 30 days, percentile 91%
  8. 6.0
    CVE-2010-3433 The PL/perl and PL/Tcl implementations in PostgreSQL 7.4 before 7.4.30, 8.0 before 8.0.26, 8.1 before 8.1.22, 8.2 before 8.2.18, 8.3 before…
    PostgreSQL
    EPSS 3.3% chance of exploitation in 30 days, percentile 88%
  9. 5.5
    CVE-2010-1975 PostgreSQL 7.4 before 7.4.29, 8.0 before 8.0.25, 8.1 before 8.1.21, 8.2 before 8.2.17, 8.3 before 8.3.11, and 8.4 before 8.4.4 does not pro…
    PostgreSQL
    EPSS 2.7% chance of exploitation in 30 days, percentile 85%
  10. 8.5
    CVE-2010-1447 The Safe (aka Safe.pm) module 2.26, and certain earlier versions, for Perl, as used in PostgreSQL 7.4 before 7.4.29, 8.0 before 8.0.25, 8.1…
    PostgreSQL
    EPSS 2.8% chance of exploitation in 30 days, percentile 86%
  11. 6.0
    CVE-2010-1170 The PL/Tcl implementation in PostgreSQL 7.4 before 7.4.29, 8.0 before 8.0.25, 8.1 before 8.1.21, 8.2 before 8.2.17, 8.3 before 8.3.11, 8.4…
    PostgreSQL
    EPSS 2.9% chance of exploitation in 30 days, percentile 87%
  12. 8.5
    CVE-2010-1169 PostgreSQL 7.4 before 7.4.29, 8.0 before 8.0.25, 8.1 before 8.1.21, 8.2 before 8.2.17, 8.3 before 8.3.11, 8.4 before 8.4.4, and 9.0 Beta be…
    PostgreSQL
    EPSS 4.1% chance of exploitation in 30 days, percentile 90%
  13. 3.5
    CVE-2010-0733 Integer overflow in src/backend/executor/nodeHash.c in PostgreSQL 8.4.1 and earlier, and 8.5 through 8.5alpha2, allows remote authenticated…
    PostgreSQL
    1 public exploit EPSS 6.8% chance of exploitation in 30 days, percentile 94%
  14. 6.5
    CVE-2010-0442 The bitsubstr function in backend/utils/adt/varbit.c in PostgreSQL 8.0.23, 8.1.11, and 8.3.8 allows remote authenticated users to cause a d…
    PostgreSQL
    1 public exploit EPSS 13.3% chance of exploitation in 30 days, percentile 96%
  15. 6.5
    CVE-2009-4136 PostgreSQL 7.4.x before 7.4.27, 8.0.x before 8.0.23, 8.1.x before 8.1.19, 8.2.x before 8.2.15, 8.3.x before 8.3.9, and 8.4.x before 8.4.2 d…
    PostgreSQL
    EPSS 3.6% chance of exploitation in 30 days, percentile 89%
  16. 5.8
    CVE-2009-4034 PostgreSQL 7.4.x before 7.4.27, 8.0.x before 8.0.23, 8.1.x before 8.1.19, 8.2.x before 8.2.15, 8.3.x before 8.3.9, and 8.4.x before 8.4.2 d…
    PostgreSQL
    EPSS 2.1% chance of exploitation in 30 days, percentile 82%
  17. 6.8
    CVE-2009-3231 The core server component in PostgreSQL 8.3 before 8.3.8 and 8.2 before 8.2.14, when using LDAP authentication with anonymous binds, allows…
    PostgreSQL
    EPSS 7.6% chance of exploitation in 30 days, percentile 94%
  18. 6.5
    CVE-2009-3230 The core server component in PostgreSQL 8.4 before 8.4.1, 8.3 before 8.3.8, 8.2 before 8.2.14, 8.1 before 8.1.18, 8.0 before 8.0.22, and 7.…
    PostgreSQL
    EPSS 2.8% chance of exploitation in 30 days, percentile 86%
  19. 4.0
    CVE-2009-3229 The core server component in PostgreSQL 8.4 before 8.4.1, 8.3 before 8.3.8, and 8.2 before 8.2.14 allows remote authenticated users to caus…
    PostgreSQL
    EPSS 2.6% chance of exploitation in 30 days, percentile 85%
  20. 4.0
    CVE-2009-0922 PostgreSQL before 8.3.7, 8.2.13, 8.1.17, 8.0.21, and 7.4.25 allows remote authenticated users to cause a denial of service (stack consumpti…
    PostgreSQL
    1 public exploit EPSS 10.2% chance of exploitation in 30 days, percentile 95%
  21. 7.2
    CVE-2007-6601 The DBLink module in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, 7.4 before 7.4.19, and 7.3 before 7.3.21, when loca…
    PostgreSQL
    EPSS 1.6% chance of exploitation in 30 days, percentile 75%
  22. 6.5
    CVE-2007-6600 PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, 7.4 before 7.4.19, and 7.3 before 7.3.21 uses superuser privileges inste…
    PostgreSQL
    EPSS 3.1% chance of exploitation in 30 days, percentile 88%
  23. 6.8
    CVE-2007-6067 Algorithmic complexity vulnerability in the regular expression parser in TCL before 8.4.17, as used in PostgreSQL 8.2 before 8.2.6, 8.1 bef…
    PostgreSQL
    EPSS 3.9% chance of exploitation in 30 days, percentile 90%
  24. 4.0
    CVE-2007-4772 The regular expression parser in TCL before 8.4.17, as used in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, and 7.4 b…
    PostgreSQL
    EPSS 3.8% chance of exploitation in 30 days, percentile 90%
  25. 6.8
    CVE-2007-4769 The regular expression parser in TCL before 8.4.17, as used in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, and 7.4 b…
    PostgreSQL
    EPSS 3.6% chance of exploitation in 30 days, percentile 89%
  26. 9.0
    CVE-2007-3280 The Database Link library (dblink) in PostgreSQL 8.1 implements functions via CREATE statements that map to arbitrary libraries based on th…
    PostgreSQL
    1 public exploit EPSS 25.5% chance of exploitation in 30 days, percentile 97%
  27. 10.0
    CVE-2007-3279 PostgreSQL 8.1 and probably later versions, when the PL/pgSQL (plpgsql) language has been created, grants certain plpgsql privileges to the…
    PostgreSQL
    EPSS 2.6% chance of exploitation in 30 days, percentile 85%
  28. 6.9
    CVE-2007-3278 PostgreSQL 8.1 and probably later versions, when local trust authentication is enabled and the Database Link library (dblink) is installed,…
    PostgreSQL
    EPSS 1.3% chance of exploitation in 30 days, percentile 70%
  29. 6.0
    CVE-2007-2138 Untrusted search path vulnerability in PostgreSQL before 7.3.19, 7.4.x before 7.4.17, 8.0.x before 8.0.13, 8.1.x before 8.1.9, and 8.2.x be…
    PostgreSQL
    EPSS 3.8% chance of exploitation in 30 days, percentile 90%
  30. 6.6
    CVE-2007-0556 The query planner in PostgreSQL before 8.0.11, 8.1 before 8.1.7, and 8.2 before 8.2.2 does not verify that a table is compatible with a "pr…
    PostgreSQL
    EPSS 3.1% chance of exploitation in 30 days, percentile 88%