https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 22:41:56 +0000 https://cve.radiocsirt.org/vuln/bdu:2019-01295 bdu:2019-01295 https://cve.radiocsirt.org/vuln/bdu:2019-01295 https://cve.radiocsirt.org/vuln/bell-cve-2018-10925 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Withdrawn by the publisher.</strong></p> https://cve.radiocsirt.org/vuln/bell-cve-2018-10925 https://cve.radiocsirt.org/vuln/cleanstart-2026-in55684 <p><strong>Affected:</strong> CleanStart: postgresql15</p> <p>Security vulnerability affects the postgresql15 package. This issue is resolved in later releases. See references for vulnerability details.</p> <p><strong>Affected:</strong> CleanStart: postgresql15</p> <p>Security vulnerability affects the postgresql15 package. This issue is resolved in later releases. See references for vulnerability details.</p> https://cve.radiocsirt.org/vuln/cleanstart-2026-in55684 https://cve.radiocsirt.org/vuln/cnvd-2020-02195 cnvd-2020-02195 https://cve.radiocsirt.org/vuln/cnvd-2020-02195 https://cve.radiocsirt.org/vuln/euvd-2026-64936 EUVD-2026-64936 https://cve.radiocsirt.org/vuln/euvd-2026-64936 https://cve.radiocsirt.org/vuln/fkie_cve-2018-10925 <p>It was discovered that PostgreSQL versions before 10.5, 9.6.10, 9.5.14, 9.4.19, and 9.3.24 failed to properly check authorization on certain statements involved with &#34;INSERT ... ON CONFLICT DO UPDATE&#34;. An attacker with &#34;CREATE TABLE&#34; privileges could exploit this to read arbitrary bytes server memory. If the attacker also had certain &#34;INSERT&#34; and limited &#34;UPDATE&#34; privileges to a particular table, they could exploit this to update other columns in the same table.</p> <p>It was discovered that PostgreSQL versions before 10.5, 9.6.10, 9.5.14, 9.4.19, and 9.3.24 failed to properly check authorization on certain statements involved with &#34;INSERT ... ON CONFLICT DO UPDATE&#34;. An attacker with &#34;CREATE TABLE&#34; privileges could exploit this to read arbitrary bytes server memory. If the attacker also had certain &#34;INSERT&#34; and limited &#34;UPDATE&#34; privileges to a particular table, they could exploit this to update other columns in the same table.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2018-10925 https://cve.radiocsirt.org/vuln/ghsa-mr45-mwhc-fw72 <p>It was discovered that PostgreSQL versions before 10.5, 9.6.10, 9.5.14, 9.4.19, and 9.3.24 failed to properly check authorization on certain statements involved with &#34;INSERT ... ON CONFLICT DO UPDATE&#34;. An attacker with &#34;CREATE TABLE&#34; privileges could exploit this to read arbitrary bytes server memory. If the attacker also had certain &#34;INSERT&#34; and limited &#34;UPDATE&#34; privileges to a particular table, they could exploit this to update other columns in the same table.</p> <p>It was discovered that PostgreSQL versions before 10.5, 9.6.10, 9.5.14, 9.4.19, and 9.3.24 failed to properly check authorization on certain statements involved with &#34;INSERT ... ON CONFLICT DO UPDATE&#34;. An attacker with &#34;CREATE TABLE&#34; privileges could exploit this to read arbitrary bytes server memory. If the attacker also had certain &#34;INSERT&#34; and limited &#34;UPDATE&#34; privileges to a particular table, they could exploit this to update other columns in the same table.</p> https://cve.radiocsirt.org/vuln/ghsa-mr45-mwhc-fw72 https://cve.radiocsirt.org/vuln/gsd-2018-10925 gsd-2018-10925 https://cve.radiocsirt.org/vuln/gsd-2018-10925 https://cve.radiocsirt.org/vuln/opensuse-su-2020:1227-1 <p>Security update for postgresql96, postgresql10 and postgresql12</p> <p>Security update for postgresql96, postgresql10 and postgresql12</p> https://cve.radiocsirt.org/vuln/opensuse-su-2020:1227-1 https://cve.radiocsirt.org/vuln/rhsa-2018:2511 <p>postgresql: Memory disclosure in JSON functions postgresql: INSERT ... ON CONFLICT DO UPDATE fails to enforce SELECT privileges postgresql: pg_upgrade creates file of sensitive metadata under prevailing umask postgresql: Uncontrolled search path element in pg_dump and other client applications postgresql: Certain host connection parameters defeat client-side security defenses postgresql: Missing authorization and memory disclosure in INSERT ... ON CONFLICT DO UPDATE statements</p> <p>postgresql: Memory disclosure in JSON functions postgresql: INSERT ... ON CONFLICT DO UPDATE fails to enforce SELECT privileges postgresql: pg_upgrade creates file of sensitive metadata under prevailing umask postgresql: Uncontrolled search path element in pg_dump and other client applications postgresql: Certain host connection parameters defeat client-side security defenses postgresql: Missing authorization and memory disclosure in INSERT ... ON CONFLICT DO UPDATE statements</p> https://cve.radiocsirt.org/vuln/rhsa-2018:2511 https://cve.radiocsirt.org/vuln/suse-su-2018:2564-1 <p>Security update for postgresql10</p> <p>Security update for postgresql10</p> https://cve.radiocsirt.org/vuln/suse-su-2018:2564-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-10925 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: postgresql-9.5, Ubuntu:18.04:LTS: postgresql-10</p> <p>It was discovered that PostgreSQL versions before 10.5, 9.6.10, 9.5.14, 9.4.19, and 9.3.24 failed to properly check authorization on certain statements involved with &#34;INSERT ... ON CONFLICT DO UPDATE&#34;. An attacker with &#34;CREATE TABLE&#34; privileges could exploit this to read arbitrary bytes server memory. If the attacker also had certain &#34;INSERT&#34; and limited &#34;UPDATE&#34; privileges to a particular table, they could exploit this to update other columns in the same table.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: postgresql-9.5, Ubuntu:18.04:LTS: postgresql-10</p> <p>It was discovered that PostgreSQL versions before 10.5, 9.6.10, 9.5.14, 9.4.19, and 9.3.24 failed to properly check authorization on certain statements involved with &#34;INSERT ... ON CONFLICT DO UPDATE&#34;. An attacker with &#34;CREATE TABLE&#34; privileges could exploit this to read arbitrary bytes server memory. If the attacker also had certain &#34;INSERT&#34; and limited &#34;UPDATE&#34; privileges to a particular table, they could exploit this to update other columns in the same table.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-10925 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3749 <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in PostgreSQL ausnutzen, um Sicherheitsvorkehrungen zu umgehen und Informationen offenzulegen.</p> <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in PostgreSQL ausnutzen, um Sicherheitsvorkehrungen zu umgehen und Informationen offenzulegen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3749