https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 11:14:29 +0000 https://cve.radiocsirt.org/vuln/certa-2012-avi-101 certa-2012-avi-101 https://cve.radiocsirt.org/vuln/certa-2012-avi-101 https://cve.radiocsirt.org/vuln/euvd-2026-110070 EUVD-2026-110070 https://cve.radiocsirt.org/vuln/euvd-2026-110070 https://cve.radiocsirt.org/vuln/fkie_cve-2012-0866 <p>CREATE TRIGGER in PostgreSQL 8.3.x before 8.3.18, 8.4.x before 8.4.11, 9.0.x before 9.0.7, and 9.1.x before 9.1.3 does not properly check the execute permission for trigger functions marked SECURITY DEFINER, which allows remote authenticated users to execute otherwise restricted triggers on arbitrary data by installing the trigger on an attacker-owned table.</p> <p>CREATE TRIGGER in PostgreSQL 8.3.x before 8.3.18, 8.4.x before 8.4.11, 9.0.x before 9.0.7, and 9.1.x before 9.1.3 does not properly check the execute permission for trigger functions marked SECURITY DEFINER, which allows remote authenticated users to execute otherwise restricted triggers on arbitrary data by installing the trigger on an attacker-owned table.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2012-0866 https://cve.radiocsirt.org/vuln/ghsa-8fvr-fgp7-p77m <p>CREATE TRIGGER in PostgreSQL 8.3.x before 8.3.18, 8.4.x before 8.4.11, 9.0.x before 9.0.7, and 9.1.x before 9.1.3 does not properly check the execute permission for trigger functions marked SECURITY DEFINER, which allows remote authenticated users to execute otherwise restricted triggers on arbitrary data by installing the trigger on an attacker-owned table.</p> <p>CREATE TRIGGER in PostgreSQL 8.3.x before 8.3.18, 8.4.x before 8.4.11, 9.0.x before 9.0.7, and 9.1.x before 9.1.3 does not properly check the execute permission for trigger functions marked SECURITY DEFINER, which allows remote authenticated users to execute otherwise restricted triggers on arbitrary data by installing the trigger on an attacker-owned table.</p> https://cve.radiocsirt.org/vuln/ghsa-8fvr-fgp7-p77m https://cve.radiocsirt.org/vuln/gsd-2012-0866 gsd-2012-0866 https://cve.radiocsirt.org/vuln/gsd-2012-0866 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10030-1 <p>postgresql94-9.4.10-1.1 on GA media</p> <p>postgresql94-9.4.10-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:10030-1 https://cve.radiocsirt.org/vuln/rhsa-2012:0677 <p>postgresql: Absent permission checks on trigger function to be called when creating a trigger postgresql: SQL injection due unsanitized newline characters in object names</p> <p>postgresql: Absent permission checks on trigger function to be called when creating a trigger postgresql: SQL injection due unsanitized newline characters in object names</p> https://cve.radiocsirt.org/vuln/rhsa-2012:0677