PostgreSQL postgresql vulnerabilities

CVEs per yearBy the year they were published

1. 20173
2. 20195

Newest CVEs

• CVE-2019-10211

  Postgresql Windows installer before versions 11.5, 10.10, 9.6.15, 9.5.19, 9.4.24 is vulnerable via bundled OpenSSL executing code from unprotected directory.

  PostgreSQL · postgresql

  High7.8
• CVE-2019-10208

  A flaw was discovered in postgresql versions 9.4.x before 9.4.24, 9.5.x before 9.5.19, 9.6.x before 9.6.15, 10.x before 10.10 and 11.x before 11.5 where…

  PostgreSQL · postgresql

  High7.5
• CVE-2019-10209

  Postgresql, versions 11.x before 11.5, is vulnerable to a memory disclosure in cross-type comparison for hashed subplan.

  PostgreSQL · postgresql

  Low3.1
• CVE-2019-10210

  Postgresql Windows installer before versions 11.5, 10.10, 9.6.15, 9.5.19, 9.4.24 is vulnerable via superuser writing password to unprotected temporary file.

  PostgreSQL · postgresql

  Medium6.7
• CVE-2019-10164

  PostgreSQL versions 10.x before 10.9 and versions 11.x before 11.4 are vulnerable to a stack-based buffer overflow. Any authenticated user can overflow a…

  PostgreSQL · PostgreSQL

  High7.5
• CVE-2017-7548

  PostgreSQL versions before 9.4.13, 9.5.8 and 9.6.4 are vulnerable to authorization flaw allowing remote authenticated attackers with no privileges on a large…

  PostgreSQL · postgresql

  High7.5
• CVE-2017-7547

  PostgreSQL versions before 9.2.22, 9.3.18, 9.4.13, 9.5.8 and 9.6.4 are vulnerable to authorization flaw allowing remote authenticated attackers to retrieve…

  PostgreSQL · postgresql

  High8.8
• CVE-2017-7546

  PostgreSQL versions before 9.2.22, 9.3.18, 9.4.13, 9.5.8 and 9.6.4 are vulnerable to incorrect authentication flaw allowing remote attackers to gain access to…

  PostgreSQL · postgresql

  Critical9.8