https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 15:39:53 +0000 https://cve.radiocsirt.org/vuln/bdu:2023-02941 bdu:2023-02941 https://cve.radiocsirt.org/vuln/bdu:2023-02941 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0627 certfr-2025-avi-0627 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0627 https://cve.radiocsirt.org/vuln/euvd-2026-216476 EUVD-2026-216476 https://cve.radiocsirt.org/vuln/euvd-2026-216476 https://cve.radiocsirt.org/vuln/fkie_cve-2023-32305 <p>aiven-extras is a PostgreSQL extension. Versions prior to 1.1.9 contain a privilege escalation vulnerability, allowing elevation to superuser inside PostgreSQL databases that use the aiven-extras package. The vulnerability leverages missing schema qualifiers on privileged functions called by the aiven-extras extension. A low privileged user can create objects that collide with existing function names, which will then be executed instead. Exploiting this vulnerability could allow a low privileged user to acquire `superuser` privileges, which would allow full, unrestricted access to all data and database functions. And could lead to arbitrary code execution or data access on the underlying host as the `postgres` user. The issue has been patched as of version 1.1.9.</p> <p>aiven-extras is a PostgreSQL extension. Versions prior to 1.1.9 contain a privilege escalation vulnerability, allowing elevation to superuser inside PostgreSQL databases that use the aiven-extras package. The vulnerability leverages missing schema qualifiers on privileged functions called by the aiven-extras extension. A low privileged user can create objects that collide with existing function names, which will then be executed instead. Exploiting this vulnerability could allow a low privileged user to acquire `superuser` privileges, which would allow full, unrestricted access to all data and database functions. And could lead to arbitrary code execution or data access on the underlying host as the `postgres` user. The issue has been patched as of version 1.1.9.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-32305 https://cve.radiocsirt.org/vuln/gsd-2023-32305 gsd-2023-32305 https://cve.radiocsirt.org/vuln/gsd-2023-32305