Vulnerability index

Browse CVEs

144 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

PostgreSQL MEDIUM 6.4
CVE-2015-5288

The crypt function in contrib/pgcrypto in PostgreSQL before 9.0.23, 9.1.x before 9.1.19, 9.2.x before 9.2.14, 9.3.x before 9.3.10, and 9.4.x before 9…

Fix: after 9.0.22
Fix from $1,600 2015-10-26
PostgreSQL MEDIUM 6.5
CVE-2014-2669

Multiple integer overflows in contrib/hstore/hstore_io.c in PostgreSQL 9.0.x before 9.0.16, 9.1.x before 9.1.12, 9.2.x before 9.2.7, and 9.3.x before…

Patch available
Fix from $1,600 2014-03-31
PostgreSQL MEDIUM 6.5
CVE-2014-0061

The validator functions for the procedural languages (PLs) in PostgreSQL before 8.4.20, 9.0.x before 9.0.16, 9.1.x before 9.1.12, 9.2.x before 9.2.7,…

Fix: after 8.4.19
Fix from $1,600 2014-03-31
PostgreSQL MEDIUM 6.5
CVE-2014-0063EPSS 7%

Multiple stack-based buffer overflows in PostgreSQL before 8.4.20, 9.0.x before 9.0.16, 9.1.x before 9.1.12, 9.2.x before 9.2.7, and 9.3.x before 9.3…

Fix: after 8.4.19
Fix from $1,600 2014-03-31
PostgreSQL MEDIUM 6.5
CVE-2014-0064EPSS 5%

Multiple integer overflows in the path_in and other unspecified functions in PostgreSQL before 8.4.20, 9.0.x before 9.0.16, 9.1.x before 9.1.12, 9.2.…

Fix: after 8.4.19
Fix from $1,600 2014-03-31
PostgreSQL MEDIUM 6.5
CVE-2014-0065EPSS 5%

Multiple buffer overflows in PostgreSQL before 8.4.20, 9.0.x before 9.0.16, 9.1.x before 9.1.12, 9.2.x before 9.2.7, and 9.3.x before 9.3.3 allow rem…

Fix: after 8.4.19
Fix from $1,600 2014-03-31
PostgreSQL HIGH 10.0
CVE-2013-1902

PostgreSQL, 9.2.x before 9.2.4, 9.1.x before 9.1.9, 9.0.x before 9.0.13, 8.4.x before 8.4.17, and 8.3.x before 8.3.23 generates insecure temporary fi…

Mitigation only
Fix from $1,950 2013-04-04
PostgreSQL HIGH 10.0
CVE-2013-1903

PostgreSQL, possibly 9.2.x before 9.2.4, 9.1.x before 9.1.9, 9.0.x before 9.0.13, 8.4.x before 8.4.17, and 8.3.x before 8.3.23 incorrectly provides t…

Mitigation only
Fix from $1,950 2013-04-04
PostgreSQL HIGH 8.5
CVE-2013-1900

PostgreSQL 9.2.x before 9.2.4, 9.1.x before 9.1.9, 9.0.x before 9.0.13, and 8.4.x before 8.4.17, when using OpenSSL, generates insufficiently random …

Mitigation only
Fix from $1,950 2013-04-04
PostgreSQL MEDIUM 6.5
CVE-2013-1899EPSS 54%

Argument injection vulnerability in PostgreSQL 9.2.x before 9.2.4, 9.1.x before 9.1.9, and 9.0.x before 9.0.13 allows remote attackers to cause a den…

Mitigation only
Fix from $1,600 2013-04-04
PostgreSQL MEDIUM 6.8
CVE-2013-0255

PostgreSQL 9.2.x before 9.2.3, 9.1.x before 9.1.8, 9.0.x before 9.0.12, 8.4.x before 8.4.16, and 8.3.x before 8.3.23 does not properly declare the en…

Mitigation only
Fix from $1,600 2013-02-13
PostgreSQL HIGH 7.5
CVE-2012-1618

Interaction error in the PostgreSQL JDBC driver before 8.2, when used with a PostgreSQL server with the "standard_conforming_strings" option enabled,…

Mitigation only
Fix from $1,950 2012-10-06
PostgreSQL MEDIUM 6.5
CVE-2012-3489

The xml_parse function in the libxml2 support in the core server component in PostgreSQL 8.3 before 8.3.20, 8.4 before 8.4.13, 9.0 before 9.0.9, and …

Fix: 8.3.20 / 8.4.13+
Fix from $1,600 2012-10-03
PostgreSQL MEDIUM 6.8
CVE-2012-0868

CRLF injection vulnerability in pg_dump in PostgreSQL 8.3.x before 8.3.18, 8.4.x before 8.4.11, 9.0.x before 9.0.7, and 9.1.x before 9.1.3 allows use…

Mitigation only
Fix from $1,600 2012-07-18
PostgreSQL MEDIUM 6.5
CVE-2012-0866

CREATE TRIGGER in PostgreSQL 8.3.x before 8.3.18, 8.4.x before 8.4.11, 9.0.x before 9.0.7, and 9.1.x before 9.1.3 does not properly check the execute…

Mitigation only
Fix from $1,600 2012-07-18
PostgreSQL MEDIUM 6.5
CVE-2010-4015

Buffer overflow in the gettoken function in contrib/intarray/_int_bool.c in the intarray array module in PostgreSQL 9.0.x before 9.0.3, 8.4.x before …

Mitigation only
Fix from $1,600 2011-02-02
PostgreSQL MEDIUM 6.0
CVE-2010-3433

The PL/perl and PL/Tcl implementations in PostgreSQL 7.4 before 7.4.30, 8.0 before 8.0.26, 8.1 before 8.1.22, 8.2 before 8.2.18, 8.3 before 8.3.12, 8…

Patch available
Fix from $1,600 2010-10-06
PostgreSQL HIGH 8.5
CVE-2010-1447

The Safe (aka Safe.pm) module 2.26, and certain earlier versions, for Perl, as used in PostgreSQL 7.4 before 7.4.29, 8.0 before 8.0.25, 8.1 before 8.…

Patch available
Fix from $1,950 2010-05-19
PostgreSQL MEDIUM 6.0
CVE-2010-1170

The PL/Tcl implementation in PostgreSQL 7.4 before 7.4.29, 8.0 before 8.0.25, 8.1 before 8.1.21, 8.2 before 8.2.17, 8.3 before 8.3.11, 8.4 before 8.4…

Patch available
Fix from $1,600 2010-05-19
PostgreSQL MEDIUM 5.5
CVE-2010-1975

PostgreSQL 7.4 before 7.4.29, 8.0 before 8.0.25, 8.1 before 8.1.21, 8.2 before 8.2.17, 8.3 before 8.3.11, and 8.4 before 8.4.4 does not properly chec…

Mitigation only
Fix from $1,600 2010-05-19
PostgreSQL HIGH 8.5
CVE-2010-1169

PostgreSQL 7.4 before 7.4.29, 8.0 before 8.0.25, 8.1 before 8.1.21, 8.2 before 8.2.17, 8.3 before 8.3.11, 8.4 before 8.4.4, and 9.0 Beta before 9.0 B…

Patch available
Fix from $1,950 2010-05-19
PostgreSQL MEDIUM 6.5
CVE-2010-0442EPSS 13%

The bitsubstr function in backend/utils/adt/varbit.c in PostgreSQL 8.0.23, 8.1.11, and 8.3.8 allows remote authenticated users to cause a denial of s…

Fix: 7.4.28 / 8.0.24+
Fix from $1,600 2010-02-02
PostgreSQL MEDIUM 6.5
CVE-2009-4136

PostgreSQL 7.4.x before 7.4.27, 8.0.x before 8.0.23, 8.1.x before 8.1.19, 8.2.x before 8.2.15, 8.3.x before 8.3.9, and 8.4.x before 8.4.2 does not pr…

Patch available
Fix from $1,600 2009-12-15
PostgreSQL MEDIUM 5.8
CVE-2009-4034

PostgreSQL 7.4.x before 7.4.27, 8.0.x before 8.0.23, 8.1.x before 8.1.19, 8.2.x before 8.2.15, 8.3.x before 8.3.9, and 8.4.x before 8.4.2 does not pr…

Patch available
Fix from $1,600 2009-12-15
PostgreSQL MEDIUM 6.8
CVE-2009-3231EPSS 8%

The core server component in PostgreSQL 8.3 before 8.3.8 and 8.2 before 8.2.14, when using LDAP authentication with anonymous binds, allows remote at…

Fix: 8.2.14 / 8.3.8+
Fix from $1,600 2009-09-17
PostgreSQL MEDIUM 6.5
CVE-2009-3230

The core server component in PostgreSQL 8.4 before 8.4.1, 8.3 before 8.3.8, 8.2 before 8.2.14, 8.1 before 8.1.18, 8.0 before 8.0.22, and 7.4 before 7…

Mitigation only
Fix from $1,600 2009-09-17
PostgreSQL HIGH 7.2
CVE-2007-6601

The DBLink module in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, 7.4 before 7.4.19, and 7.3 before 7.3.21, when local trust or…

Fix: 7.3.21 / 7.4.19+
Fix from $1,950 2008-01-09
PostgreSQL MEDIUM 6.8
CVE-2007-4769

The regular expression parser in TCL before 8.4.17, as used in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, and 7.4 before 7.4.…

Fix: after 8.4.16
Fix from $1,600 2008-01-09
PostgreSQL MEDIUM 6.8
CVE-2007-6067

Algorithmic complexity vulnerability in the regular expression parser in TCL before 8.4.17, as used in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11…

Fix: after 8.4.16
Fix from $1,600 2008-01-09
PostgreSQL MEDIUM 6.5
CVE-2007-6600

PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, 7.4 before 7.4.19, and 7.3 before 7.3.21 uses superuser privileges instead of tabl…

Patch available
Fix from $1,600 2008-01-09