Most recent entries from all

bdu:2019-01225

Withdrawn: BELL-CVE-2018-16850 — CVE-2018-16850 does not affect BellSoft software

Withdrawn by the publisher.

Withdrawn: CLEANSTART-2026-FW42039 — vulnerability was found in PostgreSQL with the use of the MERGE command, which fails to test new rows against row secur…

Withdrawn by the publisher.

Affected: CleanStart: postgresql

Multiple security vulnerabilities affect the postgresql package. A vulnerability was found in PostgreSQL with the use of the MERGE command, which fails to test new rows against row security policies defined for UPDATE and SELECT. See references for individual vulnerability details.

cnvd-2020-02196

EUVD-2026-68380

fkie_cve-2018-16850

postgresql before versions 11.1, 10.6 is vulnerable to a to SQL injection in pg_upgrade and pg_dump via CREATE TRIGGER ... REFERENCING. Using a purpose-crafted trigger definition, an attacker can cause arbitrary SQL statements to run, with superuser privileges.

GHSA-h6p9-49w4-8mm8

gsd-2018-16850

openSUSE-SU-2024:11184-1 — postgresql10-10.18-1.3 on GA media

postgresql10-10.18-1.3 on GA media

RHSA-2018:3757 — Red Hat Security Advisory: rh-postgresql10-postgresql security update

postgresql: SQL injection in pg_upgrade and pg_dump, via CREATE TRIGGER ... REFERENCING

SUSE-SU-2018:3770-1 — Security update for postgresql10

Security update for postgresql10

UBUNTU-CVE-2018-16850

Affected: Ubuntu:18.04:LTS: postgresql-10