https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T22:24:41.351458+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2020:5620 ALSA-2020:5620 — Important: postgresql:12 security update 2026-10-04T22:24:41.814536+00:00

Affected: AlmaLinux:8: postgres-decoderbufs

PostgreSQL is an advanced object-relational database management system (DBMS).

The following packages have been upgraded to a later upstream version: postgresql (12.5).

Security Fix(es):

* postgresql: Reconnection can downgrade connection security settings (CVE-2020-25694)

* postgresql: Multiple features escape "security restricted operation" sandbox (CVE-2020-25695)

* postgresql: Uncontrolled search path element in logical replication (CVE-2020-14349)

* postgresql: Uncontrolled search path element in CREATE EXTENSION (CVE-2020-14350)

* postgresql: psql's \gset allows overwriting specially treated variables (CVE-2020-25696)

* postgresql: ALTER ... DEPENDS ON EXTENSION is missing authorization checks (CVE-2020-1720)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2023-00613 bdu:2023-00613 2026-10-04T22:24:41.814636+00:00 bdu:2023-00613 https://cve.radiocsirt.org/vuln/bell-cve-2020-14349 Withdrawn: BELL-CVE-2020-14349 — CVE-2020-14349 does not affect BellSoft software 2026-10-04T22:24:41.814655+00:00

Withdrawn by the publisher.

https://cve.radiocsirt.org/vuln/bit-postgresql-2020-14349 BIT-postgresql-2020-14349 2026-10-04T22:24:41.814672+00:00

Affected: Bitnami: postgresql

It was found that PostgreSQL versions before 12.4, before 11.9 and before 10.14 did not properly sanitize the search_path during logical replication. An authenticated attacker could use this flaw in an attack similar to CVE-2018-1058, in order to execute arbitrary SQL command in the context of the user used for replication.

 https://cve.radiocsirt.org/vuln/certfr-2020-avi-510 certfr-2020-avi-510 — De multiples vulnérabilités ont été découvertes dans PostgreSQL. Elles permettent à un attaquant de provoquer une exécu… 2026-10-04T22:24:41.814693+00:00 certfr-2020-avi-510 https://cve.radiocsirt.org/vuln/cleanstart-2026-eg52606 CLEANSTART-2026-EG52606 — Security fix for CVE-2020-14349 applied in: postgresql15 12.4-r0 2026-10-04T22:24:41.814709+00:00

Affected: CleanStart: postgresql15

Security vulnerability affects the postgresql15 package. This issue is resolved in later releases. See references for vulnerability details.

 https://cve.radiocsirt.org/vuln/cnvd-2020-64266 cnvd-2020-64266 2026-10-04T22:24:41.814727+00:00 cnvd-2020-64266 https://cve.radiocsirt.org/vuln/euvd-2026-42383 EUVD-2026-42383 2026-10-04T22:24:41.814740+00:00 EUVD-2026-42383 https://cve.radiocsirt.org/vuln/fkie_cve-2020-14349 fkie_cve-2020-14349 2026-10-04T22:24:41.814750+00:00

It was found that PostgreSQL versions before 12.4, before 11.9 and before 10.14 did not properly sanitize the search_path during logical replication. An authenticated attacker could use this flaw in an attack similar to CVE-2018-1058, in order to execute arbitrary SQL command in the context of the user used for replication.

 https://cve.radiocsirt.org/vuln/ghsa-2783-h34h-q54q GHSA-2783-h34h-q54q 2026-10-04T22:24:41.814771+00:00

It was found that PostgreSQL versions before 12.4, before 11.9 and before 10.14 did not properly sanitize the search_path during logical replication. An authenticated attacker could use this flaw in an attack similar to CVE-2018-1058, in order to execute arbitrary SQL command in the context of the user used for replication.

 https://cve.radiocsirt.org/vuln/gsd-2020-14349 gsd-2020-14349 2026-10-04T22:24:41.814785+00:00 gsd-2020-14349 https://cve.radiocsirt.org/vuln/msrc_cve-2020-14349 msrc_CVE-2020-14349 — It was found that PostgreSQL versions before 12.4 before 11.9 and before 10.14 did not properly sanitize the search_pat… 2026-10-04T22:24:41.814795+00:00 msrc_CVE-2020-14349 https://cve.radiocsirt.org/vuln/opensuse-su-2020:1228-1 openSUSE-SU-2020:1228-1 — Security update for postgresql, postgresql96, postgresql10, postgresql12 2026-10-04T22:24:41.814813+00:00

Security update for postgresql, postgresql96, postgresql10, postgresql12

 https://cve.radiocsirt.org/vuln/rhsa-2020:5110 RHSA-2020:5110 — Red Hat Security Advisory: rh-postgresql10-postgresql security update 2026-10-04T22:24:41.814830+00:00

postgresql: Uncontrolled search path element in logical replication postgresql: Uncontrolled search path element in CREATE EXTENSION

 https://cve.radiocsirt.org/vuln/suse-su-2020:2264-1 SUSE-SU-2020:2264-1 — Security update for postgresql10 2026-10-04T22:24:41.814847+00:00

Security update for postgresql10

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-14349 UBUNTU-CVE-2020-14349 2026-10-04T22:24:41.814862+00:00

Affected: Ubuntu:18.04:LTS: postgresql-10, Ubuntu:20.04:LTS: postgresql-12

It was found that PostgreSQL versions before 12.4, before 11.9 and before 10.14 did not properly sanitize the search_path during logical replication. An authenticated attacker could use this flaw in an attack similar to CVE-2018-1058, in order to execute arbitrary SQL command in the context of the user used for replication.