Most recent entries from all

EUVD-2026-118826

fkie_cve-2010-1975

PostgreSQL 7.4 before 7.4.29, 8.0 before 8.0.25, 8.1 before 8.1.21, 8.2 before 8.2.17, 8.3 before 8.3.11, and 8.4 before 8.4.4 does not properly check privileges during certain RESET ALL operations, which allows remote authenticated users to remove arbitrary parameter settings via a (1) ALTER USER or (2) ALTER DATABASE statement.

GHSA-q6wf-wh6m-ch8f

gsd-2010-1975

RHSA-2026:8756 — Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

postgresql: improper privilege check during certain RESET ALL operations postgresql: CREATE STATISTICS does not check for schema CREATE privilege postgresql: libpq: libpq undersizes allocations, via integer wraparound postgresql: PostgreSQL oidvector discloses a few bytes of memory postgresql: PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code postgresql: PostgreSQL pgcrypto heap buffer overflow executes arbitrary code postgresql: PostgreSQL missing validation of multibyte character length executes arbitrary code postgresql: PostgreSQL pg_trgm heap buffer overflow writes pattern onto server memory