https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 22:24:41 +0000 https://cve.radiocsirt.org/vuln/alsa-2020:5620 <p><strong>Affected:</strong> AlmaLinux:8: postgres-decoderbufs</p> <p>PostgreSQL is an advanced object-relational database management system (DBMS).</p> <p>The following packages have been upgraded to a later upstream version: postgresql (12.5).</p> <p>Security Fix(es):</p> <p>* postgresql: Reconnection can downgrade connection security settings (CVE-2020-25694)</p> <p>* postgresql: Multiple features escape &#34;security restricted operation&#34; sandbox (CVE-2020-25695)</p> <p>* postgresql: Uncontrolled search path element in logical replication (CVE-2020-14349)</p> <p>* postgresql: Uncontrolled search path element in CREATE EXTENSION (CVE-2020-14350)</p> <p>* postgresql: psql&#39;s \gset allows overwriting specially treated variables (CVE-2020-25696)</p> <p>* postgresql: ALTER ... DEPENDS ON EXTENSION is missing authorization checks (CVE-2020-1720)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> AlmaLinux:8: postgres-decoderbufs</p> <p>PostgreSQL is an advanced object-relational database management system (DBMS).</p> <p>The following packages have been upgraded to a later upstream version: postgresql (12.5).</p> <p>Security Fix(es):</p> <p>* postgresql: Reconnection can downgrade connection security settings (CVE-2020-25694)</p> <p>* postgresql: Multiple features escape &#34;security restricted operation&#34; sandbox (CVE-2020-25695)</p> <p>* postgresql: Uncontrolled search path element in logical replication (CVE-2020-14349)</p> <p>* postgresql: Uncontrolled search path element in CREATE EXTENSION (CVE-2020-14350)</p> <p>* postgresql: psql&#39;s \gset allows overwriting specially treated variables (CVE-2020-25696)</p> <p>* postgresql: ALTER ... DEPENDS ON EXTENSION is missing authorization checks (CVE-2020-1720)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2020:5620 https://cve.radiocsirt.org/vuln/bdu:2023-00613 bdu:2023-00613 https://cve.radiocsirt.org/vuln/bdu:2023-00613 https://cve.radiocsirt.org/vuln/bell-cve-2020-14349 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Withdrawn by the publisher.</strong></p> https://cve.radiocsirt.org/vuln/bell-cve-2020-14349 https://cve.radiocsirt.org/vuln/bit-postgresql-2020-14349 <p><strong>Affected:</strong> Bitnami: postgresql</p> <p>It was found that PostgreSQL versions before 12.4, before 11.9 and before 10.14 did not properly sanitize the search_path during logical replication. An authenticated attacker could use this flaw in an attack similar to CVE-2018-1058, in order to execute arbitrary SQL command in the context of the user used for replication.</p> <p><strong>Affected:</strong> Bitnami: postgresql</p> <p>It was found that PostgreSQL versions before 12.4, before 11.9 and before 10.14 did not properly sanitize the search_path during logical replication. An authenticated attacker could use this flaw in an attack similar to CVE-2018-1058, in order to execute arbitrary SQL command in the context of the user used for replication.</p> https://cve.radiocsirt.org/vuln/bit-postgresql-2020-14349 https://cve.radiocsirt.org/vuln/certfr-2020-avi-510 certfr-2020-avi-510 https://cve.radiocsirt.org/vuln/certfr-2020-avi-510 https://cve.radiocsirt.org/vuln/cleanstart-2026-eg52606 <p><strong>Affected:</strong> CleanStart: postgresql15</p> <p>Security vulnerability affects the postgresql15 package. This issue is resolved in later releases. See references for vulnerability details.</p> <p><strong>Affected:</strong> CleanStart: postgresql15</p> <p>Security vulnerability affects the postgresql15 package. This issue is resolved in later releases. See references for vulnerability details.</p> https://cve.radiocsirt.org/vuln/cleanstart-2026-eg52606 https://cve.radiocsirt.org/vuln/cnvd-2020-64266 cnvd-2020-64266 https://cve.radiocsirt.org/vuln/cnvd-2020-64266 https://cve.radiocsirt.org/vuln/euvd-2026-42383 EUVD-2026-42383 https://cve.radiocsirt.org/vuln/euvd-2026-42383 https://cve.radiocsirt.org/vuln/fkie_cve-2020-14349 <p>It was found that PostgreSQL versions before 12.4, before 11.9 and before 10.14 did not properly sanitize the search_path during logical replication. An authenticated attacker could use this flaw in an attack similar to CVE-2018-1058, in order to execute arbitrary SQL command in the context of the user used for replication.</p> <p>It was found that PostgreSQL versions before 12.4, before 11.9 and before 10.14 did not properly sanitize the search_path during logical replication. An authenticated attacker could use this flaw in an attack similar to CVE-2018-1058, in order to execute arbitrary SQL command in the context of the user used for replication.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-14349 https://cve.radiocsirt.org/vuln/ghsa-2783-h34h-q54q <p>It was found that PostgreSQL versions before 12.4, before 11.9 and before 10.14 did not properly sanitize the search_path during logical replication. An authenticated attacker could use this flaw in an attack similar to CVE-2018-1058, in order to execute arbitrary SQL command in the context of the user used for replication.</p> <p>It was found that PostgreSQL versions before 12.4, before 11.9 and before 10.14 did not properly sanitize the search_path during logical replication. An authenticated attacker could use this flaw in an attack similar to CVE-2018-1058, in order to execute arbitrary SQL command in the context of the user used for replication.</p> https://cve.radiocsirt.org/vuln/ghsa-2783-h34h-q54q https://cve.radiocsirt.org/vuln/gsd-2020-14349 gsd-2020-14349 https://cve.radiocsirt.org/vuln/gsd-2020-14349 https://cve.radiocsirt.org/vuln/msrc_cve-2020-14349 msrc_CVE-2020-14349 https://cve.radiocsirt.org/vuln/msrc_cve-2020-14349 https://cve.radiocsirt.org/vuln/opensuse-su-2020:1228-1 <p>Security update for postgresql, postgresql96, postgresql10, postgresql12</p> <p>Security update for postgresql, postgresql96, postgresql10, postgresql12</p> https://cve.radiocsirt.org/vuln/opensuse-su-2020:1228-1 https://cve.radiocsirt.org/vuln/rhsa-2020:5110 <p>postgresql: Uncontrolled search path element in logical replication postgresql: Uncontrolled search path element in CREATE EXTENSION</p> <p>postgresql: Uncontrolled search path element in logical replication postgresql: Uncontrolled search path element in CREATE EXTENSION</p> https://cve.radiocsirt.org/vuln/rhsa-2020:5110 https://cve.radiocsirt.org/vuln/suse-su-2020:2264-1 <p>Security update for postgresql10</p> <p>Security update for postgresql10</p> https://cve.radiocsirt.org/vuln/suse-su-2020:2264-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-14349 <p><strong>Affected:</strong> Ubuntu:18.04:LTS: postgresql-10, Ubuntu:20.04:LTS: postgresql-12</p> <p>It was found that PostgreSQL versions before 12.4, before 11.9 and before 10.14 did not properly sanitize the search_path during logical replication. An authenticated attacker could use this flaw in an attack similar to CVE-2018-1058, in order to execute arbitrary SQL command in the context of the user used for replication.</p> <p><strong>Affected:</strong> Ubuntu:18.04:LTS: postgresql-10, Ubuntu:20.04:LTS: postgresql-12</p> <p>It was found that PostgreSQL versions before 12.4, before 11.9 and before 10.14 did not properly sanitize the search_path during logical replication. An authenticated attacker could use this flaw in an attack similar to CVE-2018-1058, in order to execute arbitrary SQL command in the context of the user used for replication.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-14349