Most recent entries from all

bdu:2019-04175

Withdrawn: BELL-CVE-2017-7486 — CVE-2017-7486 does not affect BellSoft software

Withdrawn by the publisher.

Withdrawn: CLEANSTART-2026-FW42039 — vulnerability was found in PostgreSQL with the use of the MERGE command, which fails to test new rows against row secur…

Withdrawn by the publisher.

Affected: CleanStart: postgresql

Multiple security vulnerabilities affect the postgresql package. A vulnerability was found in PostgreSQL with the use of the MERGE command, which fails to test new rows against row security policies defined for UPDATE and SELECT. See references for individual vulnerability details.

cnvd-2017-06932

EUVD-2026-74719

fkie_cve-2017-7486

PostgreSQL versions 8.4 - 9.6 are vulnerable to information leak in pg_user_mappings view which discloses foreign server passwords to any user having USAGE privilege on the associated foreign server.

GHSA-cxxw-q5xv-pww9

PostgreSQL versions 8.4 - 9.6 are vulnerable to information leak in pg_user_mappings view which discloses foreign server passwords to any user having USAGE privilege on the associated foreign server.

gsd-2017-7486

RHSA-2017:1677 — Red Hat Security Advisory: rh-postgresql95-postgresql security update

postgresql: Selectivity estimators bypass SELECT privilege checks postgresql: libpq ignores PGREQUIRESSL environment variable postgresql: pg_user_mappings view discloses foreign server passwords

RHSA-2017:1983 — Red Hat Security Advisory: postgresql security and enhancement update

postgresql: Selectivity estimators bypass SELECT privilege checks postgresql: pg_user_mappings view discloses foreign server passwords

SUSE-SU-2017:1441-1 — Security update for postgresql93

Security update for postgresql93

UBUNTU-CVE-2017-7486

Affected: Ubuntu:14.04:LTS: postgresql-9.3, Ubuntu:16.04:LTS: postgresql-9.5

PostgreSQL versions 8.4 - 9.6 are vulnerable to information leak in pg_user_mappings view which discloses foreign server passwords to any user having USAGE privilege on the associated foreign server.

WID-SEC-W-2025-1969 — PostgreSQL: Mehrere Schwachstellen

Ein entfernter, authentisierter oder anonymer Angreifer kann mehrere Schwachstellen in PostgreSQL ausnutzen, um Sicherheitsvorkehrungen zu umgehen oder Informationen offenzulegen.