주요 제품 취약점 (28건)
"PostgreSQL" 관련 CVE만 표시 중 · 필터 해제 ×
| 기술 | CVE | 심각도 | 유형 | KEV | 등재일 |
|---|---|---|---|---|---|
|
PostgreSQL
Splunk Enterprise
In Splunk Enterprise 10.2 versions below 10.2.4 and 10 versions below 10.0.7, an unauthenticated user could create or truncate arbitrary files throug…
|
CVE-2026-20253 | 9.8 | CWE-306 | KEV | 2026-06-18 |
|
PostgreSQL
Sangoma Switchvox
An unauthenticated SQL injection vulnerability exists in Sangoma Switchvox SMB Edition 8.3 (104997). The /pa endpoint processes XML content beginning…
|
CVE-2026-9586 | — | CWE-89 | KEV | 2026-09-02 |
|
PostgreSQL
Improper authorization in Azure Database for PostgreSQL allows an authorized attacker to elevate privileges over a network.
|
CVE-2026-85878 | 9.9 | CWE-285 | — | |
|
PostgreSQL
Letta through 0.16.8 ships a compose.yaml that does not enable LETTA_SERVER_SECURE, so the password middleware is never added and all API routes are …
|
CVE-2026-77936 | 9.8 | CWE-1188 | — | |
|
PostgreSQL
Stack buffer overflow in PostgreSQL module "refint" allows an unprivileged database user to execute arbitrary code as the operating system user runni…
|
CVE-2026-6637 | 8.8 | CWE-89 | — | |
|
PostgreSQL
Use of inherently dangerous function PQfn(..., result_is_int=0, ...) in PostgreSQL libpq lo_export(), lo_read(), lo_lseek64(), and lo_tell64() functi…
|
CVE-2026-6477 | 8.8 | CWE-242 | — | |
|
PostgreSQL
Symlink following in PostgreSQL pg_basebackup plain format and in pg_rewind allows an origin superuser to overwrite local files, e.g. /var/lib/postgr…
|
CVE-2026-6475 | 8.8 | CWE-61 | — | |
|
PostgreSQL
Integer wraparound in multiple PostgreSQL server features allows an unprivileged database user to cause the server to undersize an allocation and wri…
|
CVE-2026-6473 | 8.8 | CWE-190 | — | |
|
PostgreSQL
Heap buffer overflow in PostgreSQL pg_dump of long function transform lists allows an object creator to execute arbitrary code as the operating syste…
|
CVE-2026-19385 | 8.8 | CWE-122 | — | |
|
PostgreSQL
Untrusted data inclusion in pg_dump in PostgreSQL allows a malicious superuser of the origin server to inject arbitrary code for restore-time executi…
|
CVE-2026-18408 | 8.8 | CWE-829 | — | |
|
PostgreSQL
Type confusion in PostgreSQL "portal"/cursor lifecycle allows a user to execute arbitrary code as the operating system user running the database, via…
|
CVE-2026-16239 | 8.8 | CWE-843 | — | |
|
PostgreSQL
Type confusion in PostgreSQL pg_restore_attribute_stats() allows an object creator to execute arbitrary code as the operating system user running the…
|
CVE-2026-16238 | 8.8 | CWE-843 | — | |
|
PostgreSQL
Integer wraparound in PostgreSQL fuzzystrmatch allows a user to direct writes to a huge range of addresses, executing arbitrary code as the operating…
|
CVE-2026-15742 | 8.8 | CWE-190 | — | |
|
PostgreSQL
SQL injection in PostgreSQL EXTRACT() deparse allows an object owner to execute arbitrary SQL as a superuser via a hostile object definition. Attack…
|
CVE-2026-15741 | 8.8 | CWE-89 | — | |
|
PostgreSQL
Type confusion with PostgreSQL "internal" data type arguments allows any user to execute arbitrary code as the operating system user running the data…
|
CVE-2026-14680 | 8.8 | CWE-843 | — | |
|
PostgreSQL
Integer wraparound in PostgreSQL 32-bit builds of pltcl and plperl allows an object creator to cause the server to undersize an allocation and write …
|
CVE-2026-14677 | 8.8 | CWE-190 | — | |
|
PostgreSQL
Heap buffer overflow in PostgreSQL pg_stat_statements allows the query author to execute arbitrary code as the operating system user running the data…
|
CVE-2026-14676 | 8.8 | CWE-122 | — | |
|
PostgreSQL
Type confusion in PostgreSQL module "refint" allows an object creator to execute arbitrary code as the operating system user running the database. T…
|
CVE-2026-14671 | 8.8 | CWE-843 | — | |
|
PostgreSQL
Heap buffer overflow in PostgreSQL plperl return of a tied hash allows the function owner to execute arbitrary code as the operating system user runn…
|
CVE-2026-14670 | 8.8 | CWE-122 | — | |
|
PostgreSQL
Heap buffer overflow in PostgreSQL to_char(timestamptz) allows the party choosing the timezone to execute arbitrary code as the operating system user…
|
CVE-2026-14669 | 8.8 | CWE-122 | — | |
|
PostgreSQL
Heap buffer overflow in PostgreSQL regexp allows the query author to execute arbitrary code as the operating system user running the database, via te…
|
CVE-2026-14664 | 8.8 | CWE-122 | — | |
|
PostgreSQL
Integer wraparound in PostgreSQL tsvector and tsquery data type functions allows an unprivileged database user to cause the server to undersize an al…
|
CVE-2026-14662 | 8.8 | CWE-190 | — | |
|
PostgreSQL
Stack buffer overflow in PostgreSQL argument name matching allows an object creator to achieve unknown impacts via OUT parameter count. The attack c…
|
CVE-2026-14679 | 8.2 | CWE-121 | — | |
|
PostgreSQL
Untrusted data inclusion in PostgreSQL psql COPY may allow a server administrator to elicit execution of data lines as psql commands, via error injec…
|
CVE-2026-6464 | 8.1 | CWE-829 | — | |
|
PostgreSQL
Type confusion regarding input of PostgreSQL ctid data type selectivity estimator allows an object creator to view a calculation derived from the val…
|
CVE-2026-14668 | 8.1 | CWE-843 | — | |
|
PostgreSQL
Uncontrolled recursion in PostgreSQL SSL and GSS negotiation allows an attacker able to connect to a PostgreSQL AF_UNIX socket to achieve sustained d…
|
CVE-2026-6479 | 7.5 | CWE-674 | — | |
|
PostgreSQL
SQL injection in PostgreSQL pg_createsubscriber allows an attacker with pg_create_subscription rights to execute arbitrary SQL as a superuser. The a…
|
CVE-2026-6476 | 7.2 | CWE-89 | — | |
|
PostgreSQL
Missing authorization in PostgreSQL logical decoding allows a non-superuser holding REPLICATION privilege to dlopen any file visible to the operating…
|
CVE-2026-6471 | 7.2 | CWE-862 | — |