Known vulnerabilities in PostgreSQL 11.2
Software:
PostgreSQL
Version:
11.2
Software CPE:
cpe:2.3:a:postgresql_global_development_group:postgresql:*:*:*:*:*:*:*:*
Website:
https://www.postgresql.org
Total vulnerabilities:
33
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.2
Vulnerabilities by Severity
18.4
17.10
16.14
15.18
14.23
18.3
17.9
16.13
15.17
14.22
18.2
17.8
16.12
15.16
14.21
18.1
17.7
16.11
15.15
14.20
13.23
18.0
17.6
16.10
15.14
14.19
13.22
-
17.5
16.9
15.13
14.18
13.21
17.4
16.8
15.12
14.17
13.20
17.3
16.7
15.11
14.16
13.19
17.2
16.6
15.10
14.15
13.18
12.22
17.1
16.5
15.9
14.14
13.17
12.21
17.0
16.4
15.8
14.13
13.16
12.20
16.3
15.7
14.12
13.15
12.19
16.2
15.6
14.11
13.14
12.18
16.1
15.5
14.10
13.13
12.17
11.22
16.0
15.4
14.9
13.12
12.16
11.21
15.3
14.8
13.11
12.15
11.20
15.2
14.7
13.10
12.14
11.19
15.1
14.6
13.9
12.13
11.18
10.23
15.0
14.5
13.8
12.12
11.17
10.22
14.4
14.3
13.7
12.11
11.16
10.21
14.2
13.6
12.10
11.15
10.20
14.1
13.5
12.9
11.14
10.19
9.6.24
14.0
13.4
12.8
11.13
10.18
9.6.23
13.3
12.7
11.12
10.17
9.6.22
13.2
12.6
11.11
10.16
9.6.21
9.5.25
13.1
12.5
11.10
10.15
9.6.20
9.5.24
13.0
8.4.22
12.4
11.9
10.14
9.6.19
9.5.23
5.0.3
10.10.4
12.3
11.8
10.13
9.6.18
9.5.22
12.2
11.7
10.12
9.6.17
9.5.21
9.4.26
12.1
11.6
10.11
9.6.16
9.5.20
9.4.25
12.0
11.5
10.10
9.6.15
9.5.19
9.4.24
12
11.4
10.9
9.6.14
9.5.18
9.4.23
11.3
11.2
10.8
10.7
9.6.13
9.6.12
9.6.11
9.5.17
9.5.16
9.5.15
9.5.13
9.5.12
9.4.22
9.4.21
9.4.20
9.4.18
9.4.17
9.3.25
9.3.23
9.3.22
11.1
11.0
10.6
9.3.24
9.4.19
9.5.14
9.6.10
10.5
9.6.8
10.4
9.6.9
10.3
10.2
10.1
10.0
9.6.7
9.5.11
9.5.10
9.5.9
9.4.16
9.4.15
9.4.14
9.3.21
9.3.20
9.3.19
9.3.18
9.3.0
9.2.24
9.2.23
9.2.0
9.1.24
9.1.22
9.1.21
9.1.20
9.1.0
9.0.23
9.0.21
9.0.20
9.0.18
9.0.17
9.0.16
8.4.21
8.4.20
8.4.0
8.3.23
8.3.0
8.2.23
8.2.22
8.2.21
8.2.20
8.2.0
8.1.23
8.1.22
8.0.26
7.4.30
7.3.21
7.3.20
1.08
9.6.6
9.6.5
9.5.8
9.6.4
9.5.0
9.4.13
9.2.22
9.6.3
9.5.7
9.4.12
9.3.17
9.2.21
9.6.2
9.6.1
9.6.0
9.5.6
9.5.5
9.5.3
9.5.2
9.4.11
9.4.10
9.4.8
9.4.7
9.4.6
9.3.13
9.3.12
9.3.11
9.3.10
9.3.16
9.3.15
9.2.20
9.2.19
9.2.17
9.2.16
9.2.15
9.5.1
9.2.14
9.5
9.4.5
9.4
9.1.19
9.0.22
9.2.13
9.2.12
9.3.8
9.2.11
9.3.9
9.3.7
9.1.18
9.1.17
9.1.16
9.4.3
9.4.4
9.4.2
9.2.10
9.4.0
9.0.19
9.4.1
9.3.3
9.3.4
9.3.5
9.3.6
9.2.7
9.2.8
9.2.9
9.1.12
9.1.15
9.1.14
9.1.13
9.3.2
9.3.1
9.1.9
9.0.13
9.0.14
9.0.15
8.4.19
8.4.18
8.4.17
9.2.4
9.2.5
9.2.6
9.3
9.1.11
9.1.10
8.4.16
9.2.3
9.2.1
9.2.2
9.1.8
9.0.12
9.2
9.1.5
9.1.6
9.1.7
9.0.10
9.0.11
8.4.14
8.4.13
8.4.15
9.0.9
8.3.20
8.3.21
8.3.22
8.3.19
8.4.12
9.1.4
9.0.8
8.4.11
9.1.3
8.3.18
9.0.7
9.1.1
8.4.7
8.4.10
8.4.8
8.4.9
9.0.4
8.3.15
9.0.5
8.3.16
9.1.2
9.0.3
8.3.17
9.0.6
8.3.14
8.2.19
8.2.18
9.0.1
9.0.2
8.4.6
8.4.5
8.3.13
8.3.12
9.0
7.4.29
8.2.17
8.4.4
8.0.25
8.3.11
8.1.21
7.4.28
7.4.27
9.0.0
8.4.2
8.4.3
8.0.24
8.1.19
8.3.9
8.1.20
8.3.10
8.2.15
8.2.16
8.5
8.0.23
8.1.18
8.3.8
7.4.26
8.1.17
8.2.14
8.4.1
8.0.22
8.0.19
8.0.17
8.0.18
8.0.15
8.0.16
7.4.19
7.4.23
7.4.22
7.4.21
7.4.25
7.4.20
8.1.14
8.1.15
8.1.12
8.1.13
8.1.11
8.0.21
8.3.3
8.3.4
8.3.1
8.3.2
8.2.8
8.3.7
8.2.9
8.2.6
8.3.5
8.2.7
8.3
8.4
8.2.13
8.2.11
8.2.10
7.4.24
8.1.16
8.3.6
8.0.20
8.2.12
8.0.12
8.2.5
7.4.18
8.0.14
8.1.10
8.1.8
8.1.7
8.1.9
8.0.11
8.0.13
8.2.2
8.2.4
8.0.317
7.4.17
8.2.3
8.1.6
8.1.5
1.09
6.4
6.2
6.5
6.0
6.3
6.1.1
6.3.1
7.3.18
7.2.8
8.0.10
6.5.2
7.0.1
6.5.1
6.1
8.0.9
7.4.15
7.4.16
1.0
6.4.1
6.2.1
7.3.16
7.3.17
6.4.2
7.0
1.02
1.01
8.2.1
8.2
7.4.14
8.1.4
7.4.13
8.0.8
7.0.2
7.3.15
8.1.3
8.0.7
7.3.14
7.4.12
8.0.6
7.4.9
7.4.8
7.3.10
7.3.11
7.3.12
7.3.13
8.1
7.4.10
7.4.11
8.1.2
8.0.4
8.0.5
8.1.0
8.1.1
8.0.3
8.0.2
8.0.1
8.0
7.4
7.3.4
7.3.7
7.3.5
7.3.8
7.3.6
7.3.9
8.0.0
7.4.2
7.2.5
7.4.6
7.4.1
7.4.4
7.2.6
7.4.7
7.2.7
7.4.3
7.4.5
7.3.3
7.2.4
7.3.1
7.3.2
7.3
7.3.19
7.2.2
7.2.3
7.0.3
7.1.3
7.1.1
7.2.1
7.1.2
7.1
7.2
6.5.0
6.3.2
6.5.3.1
6.5.3
9.1
9.5.4
9.4.9
9.3.14
9.2.18
9.1.23
Vulnerabilities (33)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU82943 - Permissions, Privileges, and Access Controls CVE-2023-5870 |
CWE-264 | Low | 11.22, 12.17, 13.13, 14.10, 15.5, 16.1 | 09.11.2023 |
SB2023110930 SB2023111320 SB2023111324 and 54 more |
||
| #VU82942 - Integer overflow CVE-2023-5869 |
CWE-190 | High | 11.22, 12.17, 13.13, 14.10, 15.5, 16.1 | 09.11.2023 |
SB2023110930 SB2023111320 SB2023111324 and 70 more |
||
| #VU82941 - Exposure of sensitive information to an unauthorized actor CVE-2023-5868 |
CWE-200 | Low | 11.22, 12.17, 13.13, 14.10, 15.5, 16.1 | 09.11.2023 |
SB2023110930 SB2023111320 SB2023111324 and 53 more |
||
| #VU79454 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CVE-2023-39417 |
CWE-89 | Medium | 11.21, 12.16, 13.12, 14.9, 15.4 | 11.08.2023 |
SB2023081132 SB2023081715 SB2023081716 and 60 more |
||
| #VU76042 - Security Features CVE-2023-2455 |
CWE-254 | Low | 11.20, 12.15, 13.11, 14.8, 15.3 | 11.05.2023 |
SB2023051138 SB2023051301 SB2023051528 and 61 more |
||
| #VU76041 - Permissions, Privileges, and Access Controls CVE-2023-2454 |
CWE-264 | Medium | 11.20, 12.15, 13.11, 14.8, 15.3 | 11.05.2023 |
SB2023051138 SB2023051301 SB2023051528 and 55 more |
||
| #VU66429 - Permissions, Privileges, and Access Controls CVE-2022-2625 |
CWE-264 | Low | 10.22, 11.17, 12.12, 13.8, 14.5 | 12.08.2022 |
SB2022081212 SB2022081848 SB2022082547 and 40 more |
||
| #VU63126 - Permissions, Privileges, and Access Controls CVE-2022-1552 |
CWE-264 | Medium | 10.21, 11.16, 12.11, 13.7, 14.3 | 12.05.2022 |
SB2022051213 SB2022051303 SB2022051304 and 48 more |
||
| #VU59043 - Missing release of memory after effective lifetime CVE-2021-3677 |
CWE-401 | Low | 11.13, 12.8, 13.4 | 16.12.2021 |
SB2021121641 SB2021121642 SB2021121643 and 17 more |
||
| #VU58114 - Missing Encryption of Sensitive Data CVE-2021-23222 |
CWE-311 | Medium | 9.6.24, 10.19, 11.14, 12.9, 13.5, 14.1 | 11.11.2021 |
SB2021111139 SB2021111708 SB2021111709 and 29 more |
||
| #VU58113 - Missing Encryption of Sensitive Data CVE-2021-23214 |
CWE-311 | Medium | 9.6.24, 10.19, 11.14, 12.9, 13.5, 14.1 | 11.11.2021 |
SB2021111139 SB2021111708 SB2021111709 and 34 more |
||
| #VU53233 - Missing release of memory after effective lifetime CVE-2021-32029 |
CWE-401 | Medium | 11.12, 12.7, 13.3 | 13.05.2021 |
SB2021051316 SB2021051605 SB2021052507 and 18 more |
||
| #VU53232 - Missing release of memory after effective lifetime CVE-2021-32028 |
CWE-401 | Medium | 9.6.22, 10.17, 11.12, 12.7, 13.3 | 13.05.2021 |
SB2021051316 SB2021051605 SB2021052507 and 41 more |
||
| #VU53231 - Integer overflow CVE-2021-32027 |
CWE-190 | Medium | 9.6.22, 10.17, 11.12, 12.7, 13.3 | 13.05.2021 |
SB2021051316 SB2021051605 SB2021052507 and 43 more |
||
| #VU50655 - Exposure of sensitive information to an unauthorized actor CVE-2021-3393 |
CWE-200 | Low | 11.11, 12.6, 13.2 | 11.02.2021 |
SB2021021136 SB2021022002 SB2021022618 and 9 more |
||
| #VU48436 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CVE-2020-25695 |
CWE-89 | Medium | 9.5.24, 9.6.20, 10.15, 11.10, 12.5, 13.1 | 16.11.2020 |
SB2020111609 SB2020111711 SB2020111816 and 33 more |
||
| #VU48437 - Improper Access Control CVE-2020-25694 |
CWE-284 | Medium | 9.5.24, 9.6.20, 10.15, 11.10, 12.5, 13.1 | 16.11.2020 |
SB2020111609 SB2020111711 SB2020111815 and 35 more |
||
| #VU48438 - Improper input validation CVE-2020-25696 |
CWE-20 | Medium | 9.5.24, 9.6.20, 10.15, 11.10, 12.5, 13.1 | 16.11.2020 |
SB2020111609 SB2020111711 SB2020111817 and 32 more |
||
| #VU45749 - Untrusted Search Path CVE-2020-14350 |
CWE-426 | Medium | 9.5.23, 9.6.19, 10.14, 11.9, 12.4 | 18.08.2020 |
SB2020081801 SB2020081802 SB2020081803 and 31 more |
||
| #VU45748 - Untrusted Search Path CVE-2020-14349 |
CWE-426 | Medium | 10.14, 11.9, 12.4 | 18.08.2020 |
SB2020081801 SB2020081803 SB2020082205 and 23 more |
Showing elements 1 - 20 out of 33