Exposição de PostgreSQL

Databases
41
score de exposição
9.752
sites usam
0
em exploração
0
críticos

CVEs

83 resultados
CVE-2026-2004HIGHPostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary codeEPSS 0.5%CVE-2018-1053—In postgresql 9.3.x before 9.3.21, 9.4.x before 9.4.16, 9.5.x before 9.5.11, 9.6.x before 9.6.7 and 10.x before 10.2, pg_upgrade creates filEPSS 0.5%CVE-2026-6479HIGHPostgreSQL SSL/GSS init causes denial of service, via uncontrolled recursionEPSS 0.5%CVE-2019-10128—A vulnerability was found in postgresql versions 11.x prior to 11.3. The Windows installer for EnterpriseDB-supplied PostgreSQL does not locEPSS 0.4%CVE-2026-6473HIGHPostgreSQL server undersizes allocations, via integer wraparoundEPSS 0.4%CVE-2025-8715HIGHPostgreSQL pg_dump newline in object name executes arbitrary code in psql client and in restore target serverEPSS 0.4%CVE-2019-10210MEDIUMPostgresql Windows installer before versions 11.5, 10.10, 9.6.15, 9.5.19, 9.4.24 is vulnerable via superuser writing password to unprotectedEPSS 0.4%CVE-2024-10977LOWPostgreSQL libpq retains an error message from man-in-the-middleEPSS 0.4%CVE-2026-6637HIGHPostgreSQL refint allows stack buffer overflow and SQL injectionEPSS 0.4%CVE-2026-2007HIGHPostgreSQL pg_trgm heap buffer overflow writes pattern onto server memoryEPSS 0.3%CVE-2026-6475HIGHPostgreSQL pg_basebackup and pg_rewind can overwrite unrelated files of origin superuser choiceEPSS 0.3%CVE-2019-10127—A vulnerability was found in postgresql versions 11.x prior to 11.3. The Windows installer for BigSQL-supplied PostgreSQL does not lock downEPSS 0.3%CVE-2025-12818MEDIUMPostgreSQL libpq undersizes allocations, via integer wraparoundEPSS 0.3%CVE-2026-6476HIGHPostgreSQL pg_createsubscriber allows SQL injection via subscription nameEPSS 0.3%CVE-2026-6477HIGHPostgreSQL libpq lo_* functions let server superuser overwrite client stack memoryEPSS 0.3%CVE-2026-2003MEDIUMPostgreSQL oidvector discloses a few bytes of memoryEPSS 0.3%CVE-2026-6478MEDIUMPostgreSQL discloses MD5-hashed passwords via covert timing channelEPSS 0.2%CVE-2026-6575MEDIUMPostgreSQL pg_restore_attribute_stats accepts values that cause query planning to read past end of stats arrayEPSS 0.2%CVE-2026-6474MEDIUMPostgreSQL timeofday() can disclose portions of server memoryEPSS 0.2%CVE-2025-8713LOWPostgreSQL optimizer statistics can expose sampled data within a view, partition, or child tableEPSS 0.2%

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →