https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 07:28:11 +0000 https://cve.radiocsirt.org/vuln/bdu:2019-04099 bdu:2019-04099 https://cve.radiocsirt.org/vuln/bdu:2019-04099 https://cve.radiocsirt.org/vuln/bell-cve-2017-15099 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Withdrawn by the publisher.</strong></p> https://cve.radiocsirt.org/vuln/bell-cve-2017-15099 https://cve.radiocsirt.org/vuln/cleanstart-2026-fw42039 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> CleanStart: postgresql</p> <p>Multiple security vulnerabilities affect the postgresql package. A vulnerability was found in PostgreSQL with the use of the MERGE command, which fails to test new rows against row security policies defined for UPDATE and SELECT. See references for individual vulnerability details.</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> CleanStart: postgresql</p> <p>Multiple security vulnerabilities affect the postgresql package. A vulnerability was found in PostgreSQL with the use of the MERGE command, which fails to test new rows against row security policies defined for UPDATE and SELECT. See references for individual vulnerability details.</p> https://cve.radiocsirt.org/vuln/cleanstart-2026-fw42039 https://cve.radiocsirt.org/vuln/cnvd-2017-36406 cnvd-2017-36406 https://cve.radiocsirt.org/vuln/cnvd-2017-36406 https://cve.radiocsirt.org/vuln/euvd-2026-164535 EUVD-2026-164535 https://cve.radiocsirt.org/vuln/euvd-2026-164535 https://cve.radiocsirt.org/vuln/fkie_cve-2017-15099 <p>INSERT ... ON CONFLICT DO UPDATE commands in PostgreSQL 10.x before 10.1, 9.6.x before 9.6.6, and 9.5.x before 9.5.10 disclose table contents that the invoker lacks privilege to read. These exploits affect only tables where the attacker lacks full read access but has both INSERT and UPDATE privileges. Exploits bypass row level security policies and lack of SELECT privilege.</p> <p>INSERT ... ON CONFLICT DO UPDATE commands in PostgreSQL 10.x before 10.1, 9.6.x before 9.6.6, and 9.5.x before 9.5.10 disclose table contents that the invoker lacks privilege to read. These exploits affect only tables where the attacker lacks full read access but has both INSERT and UPDATE privileges. Exploits bypass row level security policies and lack of SELECT privilege.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2017-15099 https://cve.radiocsirt.org/vuln/ghsa-pcph-v7q2-77cx <p>INSERT ... ON CONFLICT DO UPDATE commands in PostgreSQL 10.x before 10.1, 9.6.x before 9.6.6, and 9.5.x before 9.5.10 disclose table contents that the invoker lacks privilege to read. These exploits affect only tables where the attacker lacks full read access but has both INSERT and UPDATE privileges. Exploits bypass row level security policies and lack of SELECT privilege.</p> <p>INSERT ... ON CONFLICT DO UPDATE commands in PostgreSQL 10.x before 10.1, 9.6.x before 9.6.6, and 9.5.x before 9.5.10 disclose table contents that the invoker lacks privilege to read. These exploits affect only tables where the attacker lacks full read access but has both INSERT and UPDATE privileges. Exploits bypass row level security policies and lack of SELECT privilege.</p> https://cve.radiocsirt.org/vuln/ghsa-pcph-v7q2-77cx https://cve.radiocsirt.org/vuln/gsd-2017-15099 gsd-2017-15099 https://cve.radiocsirt.org/vuln/gsd-2017-15099 https://cve.radiocsirt.org/vuln/opensuse-su-2024:11184-1 <p>postgresql10-10.18-1.3 on GA media</p> <p>postgresql10-10.18-1.3 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:11184-1 https://cve.radiocsirt.org/vuln/rhsa-2018:2511 <p>postgresql: Memory disclosure in JSON functions postgresql: INSERT ... ON CONFLICT DO UPDATE fails to enforce SELECT privileges postgresql: pg_upgrade creates file of sensitive metadata under prevailing umask postgresql: Uncontrolled search path element in pg_dump and other client applications postgresql: Certain host connection parameters defeat client-side security defenses postgresql: Missing authorization and memory disclosure in INSERT ... ON CONFLICT DO UPDATE statements</p> <p>postgresql: Memory disclosure in JSON functions postgresql: INSERT ... ON CONFLICT DO UPDATE fails to enforce SELECT privileges postgresql: pg_upgrade creates file of sensitive metadata under prevailing umask postgresql: Uncontrolled search path element in pg_dump and other client applications postgresql: Certain host connection parameters defeat client-side security defenses postgresql: Missing authorization and memory disclosure in INSERT ... ON CONFLICT DO UPDATE statements</p> https://cve.radiocsirt.org/vuln/rhsa-2018:2511 https://cve.radiocsirt.org/vuln/suse-su-2017:3391-1 <p>Security update for postgresql96</p> <p>Security update for postgresql96</p> https://cve.radiocsirt.org/vuln/suse-su-2017:3391-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-15099 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: postgresql-9.5</p> <p>INSERT ... ON CONFLICT DO UPDATE commands in PostgreSQL 10.x before 10.1, 9.6.x before 9.6.6, and 9.5.x before 9.5.10 disclose table contents that the invoker lacks privilege to read. These exploits affect only tables where the attacker lacks full read access but has both INSERT and UPDATE privileges. Exploits bypass row level security policies and lack of SELECT privilege.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: postgresql-9.5</p> <p>INSERT ... ON CONFLICT DO UPDATE commands in PostgreSQL 10.x before 10.1, 9.6.x before 9.6.6, and 9.5.x before 9.5.10 disclose table contents that the invoker lacks privilege to read. These exploits affect only tables where the attacker lacks full read access but has both INSERT and UPDATE privileges. Exploits bypass row level security policies and lack of SELECT privilege.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-15099 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0143 <p>Ein lokaler oder entfernter authenitisierter Angreifer kann mehrere Schwachstellen in PostgreSQL ausnutzen, um seine Privilegien zu erhöhen, vertrauliche Daten einzusehen, Daten zu manipulieren, einen Denial of Serivce auszulösen oder Sicherheitsmechanismen zu umgehen.</p> <p>Ein lokaler oder entfernter authenitisierter Angreifer kann mehrere Schwachstellen in PostgreSQL ausnutzen, um seine Privilegien zu erhöhen, vertrauliche Daten einzusehen, Daten zu manipulieren, einen Denial of Serivce auszulösen oder Sicherheitsmechanismen zu umgehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0143