Known vulnerabilities in postgresql-13-plperl

Vendor: openEuler
Software: postgresql-13-plperl
Software CPE: cpe:2.3:o:openeuler:postgresql-13-plperl:*:*:*:*:*:openeuler:*:*
Website: https://www.openeuler.org/
Total vulnerabilities: 19
Public exploits: 1
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting postgresql-13-plperl postgresql-13-plperl is affected by 19 known vulnerabilities: 1 critical, 2 high, 9 medium, 7 low Critical High Medium Low

Vulnerabilities (19)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU118520 - Integer overflow
CVE-2025-12818		 CWE-190 Medium
No
No
 13.23-1 13.11.2025 SB2025111368
SB2025112204
SB2025112205
and 64 more
#VU118519 - Missing Authorization
CVE-2025-12817		 CWE-862 Low
No
No
 13.23-1 13.11.2025 SB2025111368
SB2025112204
SB2025112205
and 49 more
#VU108834 - Buffer over-read
CVE-2025-4207		 CWE-126 Medium
No
No
 13.21-1 09.05.2025 SB2025050920
SB2025051669
SB20250521157
and 38 more
#VU103970 - Improper input validation
CVE-2025-1094		 CWE-20 Critical
Available
Exploited
 13.20-1 14.02.2025 SB2025021408
SB2025022038
SB2025022039
and 78 more
#VU100514 - Improper Authorization
CVE-2024-10979		 CWE-285 High
No
No
 13.20-1 15.11.2024 SB2024111502
SB2024111601
SB2024112245
and 65 more
#VU100513 - Incorrect Privilege Assignment
CVE-2024-10978		 CWE-266 Medium
No
No
 13.20-1 15.11.2024 SB2024111502
SB2024111601
SB2024112245
and 46 more
#VU100512 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2024-10977		 CWE-300 Low
No
No
 13.20-1 15.11.2024 SB2024111502
SB2024111601
SB2024112245
and 34 more
#VU100511 - Improper Privilege Management
CVE-2024-10976		 CWE-269 Medium
No
No
 13.20-1 15.11.2024 SB2024111502
SB2024111601
SB2024112245
and 47 more
#VU95605 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2024-7348		 CWE-367 Low
No
No
 13.20-1 08.08.2024 SB2024080866
SB2024080954
SB2024080955
and 63 more
#VU86275 - Improper Privilege Management
CVE-2024-0985		 CWE-269 Medium
No
No
 13.20-1 08.02.2024 SB2024020869
SB2024021617
SB2024021637
and 62 more
#VU82943 - Permissions, Privileges, and Access Controls
CVE-2023-5870		 CWE-264 Low
No
No
 13.20-1 09.11.2023 SB2023110930
SB2023111320
SB2023111324
and 54 more
#VU82942 - Integer overflow
CVE-2023-5869		 CWE-190 High
No
No
 13.20-1 09.11.2023 SB2023110930
SB2023111320
SB2023111324
and 70 more
#VU82941 - Exposure of sensitive information to an unauthorized actor
CVE-2023-5868		 CWE-200 Low
No
No
 13.20-1 09.11.2023 SB2023110930
SB2023111320
SB2023111324
and 53 more
#VU79454 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2023-39417		 CWE-89 Medium
No
No
 13.20-1 11.08.2023 SB2023081132
SB2023081715
SB2023081716
and 60 more
#VU76042 - Security Features
CVE-2023-2455		 CWE-254 Low
No
No
 13.20-1 11.05.2023 SB2023051138
SB2023051301
SB2023051528
and 61 more
#VU59043 - Missing release of memory after effective lifetime
CVE-2021-3677		 CWE-401 Low
No
No
 13.20-1 16.12.2021 SB2021121641
SB2021121642
SB2021121643
and 17 more
#VU58114 - Missing Encryption of Sensitive Data
CVE-2021-23222		 CWE-311 Medium
No
No
 13.3-2 11.11.2021 SB2021111139
SB2021111708
SB2021111709
and 29 more
#VU58113 - Missing Encryption of Sensitive Data
CVE-2021-23214		 CWE-311 Medium
No
No
 13.3-2 11.11.2021 SB2021111139
SB2021111708
SB2021111709
and 34 more
#VU40402 - Security Features
CVE-2016-2193		 CWE-254 Medium
No
No
 13.20-1 11.04.2016 SB2016041114
SB2024112245
SB2024112246
and 16 more