Postgresql (The Postgresql Global Development Group) - vulnerabilities (CVEs)

6 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2018-03-02. Vendor: The Postgresql Global Development Group.

CVEs of Postgresql

• CVE-2018-1058 - CVSS 8.8 (high), 2018-03-02: A flaw was found in the way Postgresql allowed a user to modify the behavior of a query for other users. An attacker with a user account could use this flaw…
• CVE-2018-1053 - CVSS 7 (high), 2018-02-09: In postgresql 9.3.x before 9.3.21, 9.4.x before 9.4.16, 9.5.x before 9.5.11, 9.6.x before 9.6.7 and 10.x before 10.2, pg_upgrade creates file in current…
• CVE-2018-1052 - CVSS 6.5 (medium), 2018-02-09: Memory disclosure vulnerability in table partitioning was found in postgresql 10.x before 10.2, allowing an authenticated attacker to read arbitrary bytes of…
• CVE-2017-7486 - CVSS 7.5 (high), 2017-05-12: PostgreSQL versions 8.4 - 9.6 are vulnerable to information leak in pg_user_mappings view which discloses foreign server passwords to any user having USAGE…
• CVE-2017-7485 - CVSS 5.9 (medium), 2017-05-12: In PostgreSQL 9.3.x before 9.3.17, 9.4.x before 9.4.12, 9.5.x before 9.5.7, and 9.6.x before 9.6.3, it was found that the PGREQUIRESSL environment variable…
• CVE-2017-7484 - CVSS 7.5 (high), 2017-05-12: It was found that some selectivity estimation functions in PostgreSQL before 9.2.21, 9.3.x before 9.3.17, 9.4.x before 9.4.12, 9.5.x before 9.5.7, and 9.6.x…