https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 01:05:01 +0000 https://cve.radiocsirt.org/vuln/alsa-2020:5620 <p><strong>Affected:</strong> AlmaLinux:8: postgres-decoderbufs</p> <p>PostgreSQL is an advanced object-relational database management system (DBMS).</p> <p>The following packages have been upgraded to a later upstream version: postgresql (12.5).</p> <p>Security Fix(es):</p> <p>* postgresql: Reconnection can downgrade connection security settings (CVE-2020-25694)</p> <p>* postgresql: Multiple features escape &#34;security restricted operation&#34; sandbox (CVE-2020-25695)</p> <p>* postgresql: Uncontrolled search path element in logical replication (CVE-2020-14349)</p> <p>* postgresql: Uncontrolled search path element in CREATE EXTENSION (CVE-2020-14350)</p> <p>* postgresql: psql&#39;s \gset allows overwriting specially treated variables (CVE-2020-25696)</p> <p>* postgresql: ALTER ... DEPENDS ON EXTENSION is missing authorization checks (CVE-2020-1720)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> AlmaLinux:8: postgres-decoderbufs</p> <p>PostgreSQL is an advanced object-relational database management system (DBMS).</p> <p>The following packages have been upgraded to a later upstream version: postgresql (12.5).</p> <p>Security Fix(es):</p> <p>* postgresql: Reconnection can downgrade connection security settings (CVE-2020-25694)</p> <p>* postgresql: Multiple features escape &#34;security restricted operation&#34; sandbox (CVE-2020-25695)</p> <p>* postgresql: Uncontrolled search path element in logical replication (CVE-2020-14349)</p> <p>* postgresql: Uncontrolled search path element in CREATE EXTENSION (CVE-2020-14350)</p> <p>* postgresql: psql&#39;s \gset allows overwriting specially treated variables (CVE-2020-25696)</p> <p>* postgresql: ALTER ... DEPENDS ON EXTENSION is missing authorization checks (CVE-2020-1720)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2020:5620 https://cve.radiocsirt.org/vuln/bdu:2020-05467 bdu:2020-05467 https://cve.radiocsirt.org/vuln/bdu:2020-05467 https://cve.radiocsirt.org/vuln/bell-cve-2020-25694 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Withdrawn by the publisher.</strong></p> https://cve.radiocsirt.org/vuln/bell-cve-2020-25694 https://cve.radiocsirt.org/vuln/bit-postgresql-2020-25694 <p><strong>Affected:</strong> Bitnami: postgresql</p> <p>A flaw was found in PostgreSQL versions before 13.1, before 12.5, before 11.10, before 10.15, before 9.6.20 and before 9.5.24. If a client application that creates additional database connections only reuses the basic connection parameters while dropping security-relevant parameters, an opportunity for a man-in-the-middle attack, or the ability to observe clear-text transmissions, could exist. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.</p> <p><strong>Affected:</strong> Bitnami: postgresql</p> <p>A flaw was found in PostgreSQL versions before 13.1, before 12.5, before 11.10, before 10.15, before 9.6.20 and before 9.5.24. If a client application that creates additional database connections only reuses the basic connection parameters while dropping security-relevant parameters, an opportunity for a man-in-the-middle attack, or the ability to observe clear-text transmissions, could exist. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.</p> https://cve.radiocsirt.org/vuln/bit-postgresql-2020-25694 https://cve.radiocsirt.org/vuln/certfr-2020-avi-744 certfr-2020-avi-744 https://cve.radiocsirt.org/vuln/certfr-2020-avi-744 https://cve.radiocsirt.org/vuln/cleanstart-2026-fw42039 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> CleanStart: postgresql</p> <p>Multiple security vulnerabilities affect the postgresql package. A vulnerability was found in PostgreSQL with the use of the MERGE command, which fails to test new rows against row security policies defined for UPDATE and SELECT. See references for individual vulnerability details.</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> CleanStart: postgresql</p> <p>Multiple security vulnerabilities affect the postgresql package. A vulnerability was found in PostgreSQL with the use of the MERGE command, which fails to test new rows against row security policies defined for UPDATE and SELECT. See references for individual vulnerability details.</p> https://cve.radiocsirt.org/vuln/cleanstart-2026-fw42039 https://cve.radiocsirt.org/vuln/cnvd-2020-63992 cnvd-2020-63992 https://cve.radiocsirt.org/vuln/cnvd-2020-63992 https://cve.radiocsirt.org/vuln/euvd-2026-45738 EUVD-2026-45738 https://cve.radiocsirt.org/vuln/euvd-2026-45738 https://cve.radiocsirt.org/vuln/fkie_cve-2020-25694 <p>A flaw was found in PostgreSQL versions before 13.1, before 12.5, before 11.10, before 10.15, before 9.6.20 and before 9.5.24. If a client application that creates additional database connections only reuses the basic connection parameters while dropping security-relevant parameters, an opportunity for a man-in-the-middle attack, or the ability to observe clear-text transmissions, could exist. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.</p> <p>A flaw was found in PostgreSQL versions before 13.1, before 12.5, before 11.10, before 10.15, before 9.6.20 and before 9.5.24. If a client application that creates additional database connections only reuses the basic connection parameters while dropping security-relevant parameters, an opportunity for a man-in-the-middle attack, or the ability to observe clear-text transmissions, could exist. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-25694 https://cve.radiocsirt.org/vuln/ghsa-vmm8-82m2-pcp5 <p>A flaw was found in PostgreSQL versions before 13.1, before 12.5, before 11.10, before 10.15, before 9.6.20 and before 9.5.24. If a client application that creates additional database connections only reuses the basic connection parameters while dropping security-relevant parameters, an opportunity for a man-in-the-middle attack, or the ability to observe clear-text transmissions, could exist. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.</p> <p>A flaw was found in PostgreSQL versions before 13.1, before 12.5, before 11.10, before 10.15, before 9.6.20 and before 9.5.24. If a client application that creates additional database connections only reuses the basic connection parameters while dropping security-relevant parameters, an opportunity for a man-in-the-middle attack, or the ability to observe clear-text transmissions, could exist. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.</p> https://cve.radiocsirt.org/vuln/ghsa-vmm8-82m2-pcp5 https://cve.radiocsirt.org/vuln/gsd-2020-25694 gsd-2020-25694 https://cve.radiocsirt.org/vuln/gsd-2020-25694 https://cve.radiocsirt.org/vuln/msrc_cve-2020-25694 msrc_CVE-2020-25694 https://cve.radiocsirt.org/vuln/msrc_cve-2020-25694 https://cve.radiocsirt.org/vuln/opensuse-su-2020:2018-1 <p>Security update for postgresql12</p> <p>Security update for postgresql12</p> https://cve.radiocsirt.org/vuln/opensuse-su-2020:2018-1 https://cve.radiocsirt.org/vuln/rhsa-2020:5316 <p>postgresql: Reconnection can downgrade connection security settings postgresql: Multiple features escape &#34;security restricted operation&#34; sandbox postgresql: psql&#39;s \gset allows overwriting specially treated variables</p> <p>postgresql: Reconnection can downgrade connection security settings postgresql: Multiple features escape &#34;security restricted operation&#34; sandbox postgresql: psql&#39;s \gset allows overwriting specially treated variables</p> https://cve.radiocsirt.org/vuln/rhsa-2020:5316 https://cve.radiocsirt.org/vuln/suse-su-2020:3425-1 <p>Security update for postgresql12</p> <p>Security update for postgresql12</p> https://cve.radiocsirt.org/vuln/suse-su-2020:3425-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-25694 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: postgresql-9.3, Ubuntu:16.04:LTS: postgresql-9.5, Ubuntu:18.04:LTS: postgresql-10, Ubuntu:20.04:LTS: postgresql-12</p> <p>A flaw was found in PostgreSQL versions before 13.1, before 12.5, before 11.10, before 10.15, before 9.6.20 and before 9.5.24. If a client application that creates additional database connections only reuses the basic connection parameters while dropping security-relevant parameters, an opportunity for a man-in-the-middle attack, or the ability to observe clear-text transmissions, could exist. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: postgresql-9.3, Ubuntu:16.04:LTS: postgresql-9.5, Ubuntu:18.04:LTS: postgresql-10, Ubuntu:20.04:LTS: postgresql-12</p> <p>A flaw was found in PostgreSQL versions before 13.1, before 12.5, before 11.10, before 10.15, before 9.6.20 and before 9.5.24. If a client application that creates additional database connections only reuses the basic connection parameters while dropping security-relevant parameters, an opportunity for a man-in-the-middle attack, or the ability to observe clear-text transmissions, could exist. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-25694 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1383 <p>Ein entfernter, authentisierter oder anonymer Angreifer kann mehrere Schwachstellen in PostgreSQL ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität zu gefährden.</p> <p>Ein entfernter, authentisierter oder anonymer Angreifer kann mehrere Schwachstellen in PostgreSQL ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität zu gefährden.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1383