https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T06:34:46.875973+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2023-2454 CVE-2023-2454 2026-10-09T06:34:47.019934+00:00

Affected: postgresql

schema_element defeats protective search_path changes; It was found that certain database calls in PostgreSQL could permit an authed attacker with elevated database-level privileges to execute arbitrary code.

 https://cve.radiocsirt.org/vuln/usn-6104-1 USN-6104-1 — postgresql-10, postgresql-12, postgresql-14, postgresql-15 vulnerabilities 2026-10-09T06:34:47.019998+00:00

Affected: Ubuntu:18.04:LTS: postgresql-10, Ubuntu:20.04:LTS: postgresql-12, Ubuntu:22.04:LTS: postgresql-14

Alexander Lakhin discovered that PostgreSQL incorrectly handled certain CREATE privileges. An authenticated user could possibly use this issue to execute arbitrary code as the bootstrap supervisor. (CVE-2023-2454)

Wolfgang Walther discovered that PostgreSQL incorrectly handled certain row security policies. An authenticated user could possibly use this issue to complete otherwise forbidden reads and modifications. (CVE-2023-2455)