https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T19:33:49.840353+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2020:5620 ALSA-2020:5620 — Important: postgresql:12 security update 2026-10-04T19:33:50.422335+00:00

Affected: AlmaLinux:8: postgres-decoderbufs

PostgreSQL is an advanced object-relational database management system (DBMS).

The following packages have been upgraded to a later upstream version: postgresql (12.5).

Security Fix(es):

* postgresql: Reconnection can downgrade connection security settings (CVE-2020-25694)

* postgresql: Multiple features escape "security restricted operation" sandbox (CVE-2020-25695)

* postgresql: Uncontrolled search path element in logical replication (CVE-2020-14349)

* postgresql: Uncontrolled search path element in CREATE EXTENSION (CVE-2020-14350)

* postgresql: psql's \gset allows overwriting specially treated variables (CVE-2020-25696)

* postgresql: ALTER ... DEPENDS ON EXTENSION is missing authorization checks (CVE-2020-1720)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2021-00079 bdu:2021-00079 2026-10-04T19:33:50.422444+00:00 bdu:2021-00079 https://cve.radiocsirt.org/vuln/bell-cve-2020-14350 Withdrawn: BELL-CVE-2020-14350 — CVE-2020-14350 does not affect BellSoft software 2026-10-04T19:33:50.422463+00:00

Withdrawn by the publisher.

https://cve.radiocsirt.org/vuln/bit-postgresql-2020-14350 BIT-postgresql-2020-14350 2026-10-04T19:33:50.422479+00:00

Affected: Bitnami: postgresql

It was found that some PostgreSQL extensions did not use search_path safely in their installation script. An attacker with sufficient privileges could use this flaw to trick an administrator into executing a specially crafted script, during the installation or update of such extension. This affects PostgreSQL versions before 12.4, before 11.9, before 10.14, before 9.6.19, and before 9.5.23.

 https://cve.radiocsirt.org/vuln/certfr-2020-avi-510 certfr-2020-avi-510 — De multiples vulnérabilités ont été découvertes dans PostgreSQL. Elles permettent à un attaquant de provoquer une exécu… 2026-10-04T19:33:50.422501+00:00 certfr-2020-avi-510 https://cve.radiocsirt.org/vuln/cleanstart-2026-fr04784 Withdrawn: CLEANSTART-2026-FR04784 — Security fixes in postgresql 12.4-r0 2026-10-04T19:33:50.422516+00:00

Withdrawn by the publisher.

Affected: CleanStart: postgresql

Package postgresql version 12.4-r0 fixes 2 vulnerabilities: CVE-2020-14349, CVE-2020-14350

 https://cve.radiocsirt.org/vuln/euvd-2026-42367 EUVD-2026-42367 2026-10-04T19:33:50.422535+00:00 EUVD-2026-42367 https://cve.radiocsirt.org/vuln/fkie_cve-2020-14350 fkie_cve-2020-14350 2026-10-04T19:33:50.422547+00:00

It was found that some PostgreSQL extensions did not use search_path safely in their installation script. An attacker with sufficient privileges could use this flaw to trick an administrator into executing a specially crafted script, during the installation or update of such extension. This affects PostgreSQL versions before 12.4, before 11.9, before 10.14, before 9.6.19, and before 9.5.23.

 https://cve.radiocsirt.org/vuln/ghsa-6v9v-3f4c-cjgx GHSA-6v9v-3f4c-cjgx — Untrusted Search Path in PostgreSQL 2026-10-04T19:33:50.422569+00:00

It was found that some PostgreSQL extensions did not use search_path safely in their installation script. An attacker with sufficient privileges could use this flaw to trick an administrator into executing a specially crafted script, during the installation or update of such extension. This affects PostgreSQL versions before 12.4, before 11.9, before 10.14, before 9.6.19, and before 9.5.23.

 https://cve.radiocsirt.org/vuln/gsd-2020-14350 gsd-2020-14350 2026-10-04T19:33:50.422585+00:00 gsd-2020-14350 https://cve.radiocsirt.org/vuln/msrc_cve-2020-14350 msrc_CVE-2020-14350 — It was found that some PostgreSQL extensions did not use search_path safely in their installation script. An attacker w… 2026-10-04T19:33:50.422595+00:00 msrc_CVE-2020-14350 https://cve.radiocsirt.org/vuln/opensuse-su-2020:1227-1 openSUSE-SU-2020:1227-1 — Security update for postgresql96, postgresql10 and postgresql12 2026-10-04T19:33:50.422612+00:00

Security update for postgresql96, postgresql10 and postgresql12

 https://cve.radiocsirt.org/vuln/rhsa-2020:4295 RHSA-2020:4295 — Red Hat Security Advisory: rh-postgresql96-postgresql security update 2026-10-04T19:33:50.422632+00:00

postgresql: Selectivity estimators bypass row security policies postgresql: TYPE in pg_temp executes arbitrary SQL during SECURITY DEFINER execution postgresql: ALTER ... DEPENDS ON EXTENSION is missing authorization checks postgresql: Uncontrolled search path element in CREATE EXTENSION

 https://cve.radiocsirt.org/vuln/suse-su-2020:2264-1 SUSE-SU-2020:2264-1 — Security update for postgresql10 2026-10-04T19:33:50.422654+00:00

Security update for postgresql10

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-14350 UBUNTU-CVE-2020-14350 2026-10-04T19:33:50.422669+00:00

Affected: Ubuntu:Pro:14.04:LTS: postgresql-9.3, Ubuntu:16.04:LTS: postgresql-9.5, Ubuntu:18.04:LTS: postgresql-10, Ubuntu:20.04:LTS: postgresql-12

It was found that some PostgreSQL extensions did not use search_path safely in their installation script. An attacker with sufficient privileges could use this flaw to trick an administrator into executing a specially crafted script, during the installation or update of such extension. This affects PostgreSQL versions before 12.4, before 11.9, before 10.14, before 9.6.19, and before 9.5.23.