Most recent entries from all

bdu:2019-03334

Withdrawn: BELL-CVE-2017-7484 — CVE-2017-7484 does not affect BellSoft software

Withdrawn by the publisher.

certfr-2025-avi-0947 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan…

certfr-2025-avi-0947

Withdrawn: CLEANSTART-2026-FW42039 — vulnerability was found in PostgreSQL with the use of the MERGE command, which fails to test new rows against row secur…

Withdrawn by the publisher.

Affected: CleanStart: postgresql

Multiple security vulnerabilities affect the postgresql package. A vulnerability was found in PostgreSQL with the use of the MERGE command, which fails to test new rows against row security policies defined for UPDATE and SELECT. See references for individual vulnerability details.

cnvd-2017-06930

EUVD-2026-74709

fkie_cve-2017-7484

It was found that some selectivity estimation functions in PostgreSQL before 9.2.21, 9.3.x before 9.3.17, 9.4.x before 9.4.12, 9.5.x before 9.5.7, and 9.6.x before 9.6.3 did not check user privileges before providing information from pg_statistic, possibly leaking information. An unprivileged attacker could use this flaw to steal some information from tables they are otherwise not allowed to access.

GHSA-pwf5-pc7m-6hp4

gsd-2017-7484

RHSA-2017:1677 — Red Hat Security Advisory: rh-postgresql95-postgresql security update

postgresql: Selectivity estimators bypass SELECT privilege checks postgresql: libpq ignores PGREQUIRESSL environment variable postgresql: pg_user_mappings view discloses foreign server passwords

RHSA-2017:1983 — Red Hat Security Advisory: postgresql security and enhancement update

postgresql: Selectivity estimators bypass SELECT privilege checks postgresql: pg_user_mappings view discloses foreign server passwords

SUSE-SU-2017:1441-1 — Security update for postgresql93

Security update for postgresql93

UBUNTU-CVE-2017-7484

Affected: Ubuntu:14.04:LTS: postgresql-9.3, Ubuntu:16.04:LTS: postgresql-9.5

WID-SEC-W-2025-1969 — PostgreSQL: Mehrere Schwachstellen

Ein entfernter, authentisierter oder anonymer Angreifer kann mehrere Schwachstellen in PostgreSQL ausnutzen, um Sicherheitsvorkehrungen zu umgehen oder Informationen offenzulegen.