https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 07:40:52 +0000 https://cve.radiocsirt.org/vuln/bdu:2026-07095 bdu:2026-07095 https://cve.radiocsirt.org/vuln/bdu:2026-07095 https://cve.radiocsirt.org/vuln/bell-cve-2026-6575 <p><strong>Affected:</strong> Alpaquita:stream: postgresql18</p> <p><strong>Affected:</strong> Alpaquita:stream: postgresql18</p> https://cve.radiocsirt.org/vuln/bell-cve-2026-6575 https://cve.radiocsirt.org/vuln/bit-postgresql-2026-6575 <p><strong>Affected:</strong> Bitnami: postgresql</p> <p>Buffer over-read in PostgreSQL function pg_restore_attribute_stats() accepts array values of unmatched length, which causes query planning to read past end of one array. This allows a table maintainer to infer memory values past that array end. Within major version 18, minor versions before PostgreSQL 18.4 are affected. Versions before PostgreSQL 18 are unaffected.</p> <p><strong>Affected:</strong> Bitnami: postgresql</p> <p>Buffer over-read in PostgreSQL function pg_restore_attribute_stats() accepts array values of unmatched length, which causes query planning to read past end of one array. This allows a table maintainer to infer memory values past that array end. Within major version 18, minor versions before PostgreSQL 18.4 are affected. Versions before PostgreSQL 18 are unaffected.</p> https://cve.radiocsirt.org/vuln/bit-postgresql-2026-6575 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0595 certfr-2026-avi-0595 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0595 https://cve.radiocsirt.org/vuln/euvd-2026-318522 EUVD-2026-318522 https://cve.radiocsirt.org/vuln/euvd-2026-318522 https://cve.radiocsirt.org/vuln/fkie_cve-2026-6575 <p>Buffer over-read in PostgreSQL function pg_restore_attribute_stats() accepts array values of unmatched length, which causes query planning to read past end of one array. This allows a table maintainer to infer memory values past that array end. Within major version 18, minor versions before PostgreSQL 18.4 are affected. Versions before PostgreSQL 18 are unaffected.</p> <p>Buffer over-read in PostgreSQL function pg_restore_attribute_stats() accepts array values of unmatched length, which causes query planning to read past end of one array. This allows a table maintainer to infer memory values past that array end. Within major version 18, minor versions before PostgreSQL 18.4 are affected. Versions before PostgreSQL 18 are unaffected.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-6575 https://cve.radiocsirt.org/vuln/ghsa-f8xc-gmqx-v9fh <p>Buffer over-read in PostgreSQL function pg_restore_attribute_stats() accepts array values of unmatched length, which causes query planning to read past end of one array. This allows a table maintainer to infer memory values past that array end. Within major version 18, minor versions before PostgreSQL 18.4 are affected. Versions before PostgreSQL 18 are unaffected.</p> <p>Buffer over-read in PostgreSQL function pg_restore_attribute_stats() accepts array values of unmatched length, which causes query planning to read past end of one array. This allows a table maintainer to infer memory values past that array end. Within major version 18, minor versions before PostgreSQL 18.4 are affected. Versions before PostgreSQL 18 are unaffected.</p> https://cve.radiocsirt.org/vuln/ghsa-f8xc-gmqx-v9fh https://cve.radiocsirt.org/vuln/opensuse-su-2026:10828-1 <p>libecpg6-18.4-1.1 on GA media</p> <p>libecpg6-18.4-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2026:10828-1 https://cve.radiocsirt.org/vuln/rhsa-2026:21182 <p>postgresql: PostgreSQL CREATE TYPE does not check multirange schema CREATE privilege postgresql: PostgreSQL: Operating system account hijack via symlink following in pg_basebackup and pg_rewind postgresql: PostgreSQL libpq: Buffer overflow allows server superuser to overwrite client stack memory postgresql: PostgreSQL: Credential recovery via covert timing channel in MD5 password comparison postgresql: PostgreSQL: Denial of Service via uncontrolled recursion in SSL/GSS negotiation postgresql: PostgreSQL: Information disclosure via buffer over-read in pg_restore_attribute_stats() postgresql: PostgreSQL: Arbitrary code execution vulnerability in &#39;refint&#39; module postgresql: PostgreSQL: Arbitrary SQL execution via SQL injection in logical replication</p> <p>postgresql: PostgreSQL CREATE TYPE does not check multirange schema CREATE privilege postgresql: PostgreSQL: Operating system account hijack via symlink following in pg_basebackup and pg_rewind postgresql: PostgreSQL libpq: Buffer overflow allows server superuser to overwrite client stack memory postgresql: PostgreSQL: Credential recovery via covert timing channel in MD5 password comparison postgresql: PostgreSQL: Denial of Service via uncontrolled recursion in SSL/GSS negotiation postgresql: PostgreSQL: Information disclosure via buffer over-read in pg_restore_attribute_stats() postgresql: PostgreSQL: Arbitrary code execution vulnerability in &#39;refint&#39; module postgresql: PostgreSQL: Arbitrary SQL execution via SQL injection in logical replication</p> https://cve.radiocsirt.org/vuln/rhsa-2026:21182 https://cve.radiocsirt.org/vuln/suse-su-2026:1946-1 <p>Security update for postgresql18</p> <p>Security update for postgresql18</p> https://cve.radiocsirt.org/vuln/suse-su-2026:1946-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-6575 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: postgresql-9.3, Ubuntu:Pro:16.04:LTS: postgresql-9.5, Ubuntu:Pro:18.04:LTS: postgresql-10, Ubuntu:20.04:LTS: postgresql-12, Ubuntu:22.04:LTS: postgresql-14, Ubuntu:24.04:LTS: postgresql-16, Ubuntu:25.10: postgresql-17, Ubuntu:26.04:LTS: postgresql-18</p> <p>Buffer over-read in PostgreSQL function pg_restore_attribute_stats() accepts array values of unmatched length, which causes query planning to read past end of one array. This allows a table maintainer to infer memory values past that array end. Within major version 18, minor versions before PostgreSQL 18.4 are affected. Versions before PostgreSQL 18 are unaffected.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: postgresql-9.3, Ubuntu:Pro:16.04:LTS: postgresql-9.5, Ubuntu:Pro:18.04:LTS: postgresql-10, Ubuntu:20.04:LTS: postgresql-12, Ubuntu:22.04:LTS: postgresql-14, Ubuntu:24.04:LTS: postgresql-16, Ubuntu:25.10: postgresql-17, Ubuntu:26.04:LTS: postgresql-18</p> <p>Buffer over-read in PostgreSQL function pg_restore_attribute_stats() accepts array values of unmatched length, which causes query planning to read past end of one array. This allows a table maintainer to infer memory values past that array end. Within major version 18, minor versions before PostgreSQL 18.4 are affected. Versions before PostgreSQL 18 are unaffected.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-6575 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1544 <p>Ein Angreifer kann mehrere Schwachstellen in PostgreSQL ausnutzen, um beliebigen Programmcode auszuführen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, um Dateien zu manipulieren, um einen SQL-Injection Angriff durchzuführen, und um Sicherheitsvorkehrungen zu umgehen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in PostgreSQL ausnutzen, um beliebigen Programmcode auszuführen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, um Dateien zu manipulieren, um einen SQL-Injection Angriff durchzuführen, und um Sicherheitsvorkehrungen zu umgehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1544