https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T10:37:13.962658+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2019-03335 bdu:2019-03335 2026-10-06T10:37:14.094559+00:00 bdu:2019-03335 https://cve.radiocsirt.org/vuln/cnvd-2017-36407 cnvd-2017-36407 2026-10-06T10:37:14.094602+00:00 cnvd-2017-36407 https://cve.radiocsirt.org/vuln/euvd-2026-173922 EUVD-2026-173922 2026-10-06T10:37:14.094618+00:00 EUVD-2026-173922 https://cve.radiocsirt.org/vuln/fkie_cve-2017-12172 fkie_cve-2017-12172 2026-10-06T10:37:14.094631+00:00

PostgreSQL 10.x before 10.1, 9.6.x before 9.6.6, 9.5.x before 9.5.10, 9.4.x before 9.4.15, 9.3.x before 9.3.20, and 9.2.x before 9.2.24 runs under a non-root operating system account, and database superusers have effective ability to run arbitrary code under that system account. PostgreSQL provides a script for starting the database server during system boot. Packages of PostgreSQL for many operating systems provide their own, packager-authored startup implementations. Several implementations use a log file name that the database superuser can replace with a symbolic link. As root, they open(), chmod() and/or chown() this log file name. This often suffices for the database superuser to escalate to root privileges when root starts the server.

 https://cve.radiocsirt.org/vuln/ghsa-r936-w9vp-c53q GHSA-r936-w9vp-c53q 2026-10-06T10:37:14.094665+00:00

PostgreSQL 10.x before 10.1, 9.6.x before 9.6.6, 9.5.x before 9.5.10, 9.4.x before 9.4.15, 9.3.x before 9.3.20, and 9.2.x before 9.2.24 runs under a non-root operating system account, and database superusers have effective ability to run arbitrary code under that system account. PostgreSQL provides a script for starting the database server during system boot. Packages of PostgreSQL for many operating systems provide their own, packager-authored startup implementations. Several implementations use a log file name that the database superuser can replace with a symbolic link. As root, they open(), chmod() and/or chown() this log file name. This often suffices for the database superuser to escalate to root privileges when root starts the server.

 https://cve.radiocsirt.org/vuln/gsd-2017-12172 gsd-2017-12172 2026-10-06T10:37:14.094684+00:00 gsd-2017-12172 https://cve.radiocsirt.org/vuln/rhsa-2017:3402 RHSA-2017:3402 — Red Hat Security Advisory: postgresql security update 2026-10-06T10:37:14.094695+00:00

postgresql: Start scripts permit database administrator to modify root-owned files postgresql: Start scripts permit database administrator to modify root-owned files

 https://cve.radiocsirt.org/vuln/rhsa-2017:3403 RHSA-2017:3403 — Red Hat Security Advisory: rh-postgresql94-postgresql security update 2026-10-06T10:37:14.094717+00:00

postgresql: Start scripts permit database administrator to modify root-owned files postgresql: Start scripts permit database administrator to modify root-owned files

 https://cve.radiocsirt.org/vuln/suse-su-2018:0077-1 SUSE-SU-2018:0077-1 — Security update for postgresql94 2026-10-06T10:37:14.094735+00:00

Security update for postgresql94

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0143 WID-SEC-W-2024-0143 — PostgreSQL: Mehrere Schwachstellen 2026-10-06T10:37:14.094750+00:00

Ein lokaler oder entfernter authenitisierter Angreifer kann mehrere Schwachstellen in PostgreSQL ausnutzen, um seine Privilegien zu erhöhen, vertrauliche Daten einzusehen, Daten zu manipulieren, einen Denial of Serivce auszulösen oder Sicherheitsmechanismen zu umgehen.