Known vulnerabilities in postgresql-static - page 3

Vendor: openEuler
Software: postgresql-static
Software CPE: cpe:2.3:o:openeuler:postgresql-static:*:*:*:*:*:openeuler:*:*
Website: https://www.openeuler.org/
Total vulnerabilities: 66
Public exploits: 4
Known exploited (KEV): 1

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting postgresql-static postgresql-static is affected by 66 known vulnerabilities: 1 critical, 6 high, 36 medium, 23 low Critical High Medium Low

Vulnerabilities (66)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU114096 - Improper input validation
CVE-2025-8715		 CWE-20 Medium
No
No
 13.22-1, 15.14-1 14.08.2025 SB2025081496
SB2025081898
SB2025082551
and 53 more
#VU108834 - Buffer over-read
CVE-2025-4207		 CWE-126 Medium
No
No
 13.21-2, 15.13-2 09.05.2025 SB2025050920
SB2025051669
SB20250521157
and 40 more
#VU103970 - Improper input validation
CVE-2025-1094		 CWE-20 Critical
Available
Exploited
 13.19-1, 15.11-1 14.02.2025 SB2025021408
SB2025022038
SB2025022039
and 78 more
#VU100514 - Improper Authorization
CVE-2024-10979		 CWE-285 High
No
No
 13.17-1, 15.9-1 15.11.2024 SB2024111502
SB2024111601
SB2024112245
and 65 more
#VU100513 - Incorrect Privilege Assignment
CVE-2024-10978		 CWE-266 Medium
No
No
 13.17-1, 15.9-1 15.11.2024 SB2024111502
SB2024111601
SB2024112245
and 46 more
#VU100512 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2024-10977		 CWE-300 Low
No
No
 13.17-1, 15.9-1 15.11.2024 SB2024111502
SB2024111601
SB2024112245
and 34 more
#VU100511 - Improper Privilege Management
CVE-2024-10976		 CWE-269 Medium
No
No
 13.17-1, 15.9-1 15.11.2024 SB2024111502
SB2024111601
SB2024112245
and 47 more
#VU95605 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2024-7348		 CWE-367 Low
No
No
 13.16-1, 15.8-1 08.08.2024 SB2024080866
SB2024080954
SB2024080955
and 63 more
#VU88696 - Improper input validation
CVE-2024-21096		 CWE-20 Low
No
No
 13.22-1, 15.14-1 17.04.2024 SB2024041799
SB2024051083
SB2024051084
and 41 more
#VU79454 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2023-39417		 CWE-89 Medium
No
No
 13.12-1, 13.12-2 11.08.2023 SB2023081132
SB2023081715
SB2023081716
and 60 more
#VU76042 - Security Features
CVE-2023-2455		 CWE-254 Low
No
No
 13.17-1, 15.9-1 11.05.2023 SB2023051138
SB2023051301
SB2023051528
and 61 more
#VU58114 - Missing Encryption of Sensitive Data
CVE-2021-23222		 CWE-311 Medium
No
No
 10.5-23, 13.3-7 11.11.2021 SB2021111139
SB2021111708
SB2021111709
and 29 more
#VU58113 - Missing Encryption of Sensitive Data
CVE-2021-23214		 CWE-311 Medium
No
No
 10.5-23, 13.3-7 11.11.2021 SB2021111139
SB2021111708
SB2021111709
and 34 more
#VU53232 - Missing release of memory after effective lifetime
CVE-2021-32028		 CWE-401 Medium
No
No
 10.5-22 13.05.2021 SB2021051316
SB2021051605
SB2021052507
and 41 more
#VU50656 - Permissions, Privileges, and Access Controls
CVE-2021-20229		 CWE-264 Low
No
No
 10.5-20 11.02.2021 SB2021021136
SB2021022002
SB2021022620
and 3 more
#VU48438 - Improper input validation
CVE-2020-25696		 CWE-20 Medium
No
No
 10.5-19 16.11.2020 SB2020111609
SB2020111711
SB2020111817
and 32 more
#VU18424 - Permissions, Privileges, and Access Controls
CVE-2019-10130		 CWE-264 Low
No
No
 13.22-1, 15.14-1 10.05.2019 SB2019051001
SB2019051002
SB2019051513
and 29 more
#VU6892 - Exposure of sensitive information to an unauthorized actor
CVE-2017-7484		 CWE-200 Low
No
No
 13.22-1, 15.14-1 02.06.2017 SB2017052914
SB2017052915
SB2017073109
and 20 more
#VU40402 - Security Features
CVE-2016-2193		 CWE-254 Medium
No
No
 13.17-1, 15.9-1 11.04.2016 SB2016041114
SB2024112245
SB2024112246
and 16 more
#VU43840 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2012-0868		 CWE-89 Medium
No
No
 13.22-1, 15.14-1 19.07.2012 SB2012071904
SB2012092802
SB2025090533
and 16 more


Showing elements 41 - 60 out of 66