Most recent entries from all

bdu:2019-03221

Withdrawn: BELL-CVE-2019-10208 — CVE-2019-10208 does not affect BellSoft software

Withdrawn by the publisher.

Withdrawn: CLEANSTART-2026-FW42039 — vulnerability was found in PostgreSQL with the use of the MERGE command, which fails to test new rows against row secur…

Withdrawn by the publisher.

Affected: CleanStart: postgresql

Multiple security vulnerabilities affect the postgresql package. A vulnerability was found in PostgreSQL with the use of the MERGE command, which fails to test new rows against row security policies defined for UPDATE and SELECT. See references for individual vulnerability details.

cnvd-2019-26835

EUVD-2026-53446

fkie_cve-2019-10208

A flaw was discovered in postgresql versions 9.4.x before 9.4.24, 9.5.x before 9.5.19, 9.6.x before 9.6.15, 10.x before 10.10 and 11.x before 11.5 where arbitrary SQL statements can be executed given a suitable SECURITY DEFINER function. An attacker, with EXECUTE permission on the function, can execute arbitrary SQL as the owner of the function.

GHSA-7v5r-hqr9-r2x2

A flaw was discovered in postgresql where arbitrary SQL statements can be executed given a suitable SECURITY DEFINER function. An attacker, with EXECUTE permission on the function, can execute arbitrary SQL as the owner of the function.

gsd-2019-10208

openSUSE-SU-2019:2062-1 — Security update for postgresql10

Security update for postgresql10

RHSA-2020:0980 — Red Hat Security Advisory: rh-postgresql10-postgresql security update

postgresql: Selectivity estimators bypass row security policies postgresql: Stack-based buffer overflow via setting a password postgresql: TYPE in pg_temp executes arbitrary SQL during SECURITY DEFINER execution postgresql: ALTER ... DEPENDS ON EXTENSION is missing authorization checks

SUSE-SU-2019:2158-1 — Security update for postgresql94

Security update for postgresql94

UBUNTU-CVE-2019-10208

Affected: Ubuntu:Pro:14.04:LTS: postgresql-9.3, Ubuntu:16.04:LTS: postgresql-9.5, Ubuntu:18.04:LTS: postgresql-10

WID-SEC-W-2022-1380 — PostgreSQL: Mehrere Schwachstellen

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in PostgreSQL ausnutzen, um seine Privilegien zu erhöhen, um Informationen offenzulegen und um die Konfiguration zu manipulieren.