Known vulnerabilities in PostgreSQL - page 10

Software: PostgreSQL
Software CPE: cpe:2.3:a:postgresql_global_development_group:postgresql:*:*:*:*:*:*:*:*
Total vulnerabilities: 198
Public exploits: 9
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting PostgreSQL PostgreSQL is affected by 198 known vulnerabilities: 2 critical, 22 high, 90 medium, 84 low Critical High Medium Low

Vulnerabilities (198)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU111762 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2007-6601
CWE-78 Medium
No
No
7.4.19, 8.0.15, 8.1.11, 8.2.6 23.06.2025 SB2008010902
SB2008012902
#VU111761 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2007-3278
CWE-78 Medium
No
No
7.4.18, 8.0.14, 8.1.10, 8.2.5 23.06.2025 SB2007091802
SB2008012902
#VU111760 - Improper Privilege Management
CVE-2007-6600
CWE-269 Medium
No
No
7.4.19, 8.0.15, 8.1.11, 8.2.6 23.06.2025 SB2008010902
SB2008012902
#VU111758 - Incorrect Regular Expression
CVE-2007-4769
CWE-185 Medium
No
No
7.4.19, 8.0.15, 8.1.11, 8.2.6 23.06.2025 SB2008010901
SB2008010902
SB2008012902
#VU111757 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2007-4772
CWE-835 Medium
No
No
7.4.19, 8.0.15, 8.1.11, 8.2.6 23.06.2025 SB2008010901
SB2008010902
SB2008012902
#VU111755 - Incorrect Regular Expression
CVE-2007-6067
CWE-185 Medium
No
No
7.4.19, 8.0.15, 8.1.11, 8.2.6 23.06.2025 SB2008010901
SB2008010902
SB2008012902
#VU111741 - Memory corruption
CVE-2005-0247
CWE-119 Medium
No
No
8.0.2 21.06.2025 SB2005021001
#VU111740 - Improper input validation
CVE-2005-0246
CWE-20 Medium
No
No
7.2.7, 7.3.9, 7.4.7, 8.0.1 21.06.2025 SB2005020101
#VU111739 - Heap-based Buffer Overflow
CVE-2005-0245
CWE-122 Medium
Available
No
7.2.7, 7.3.9, 7.4.7, 8.0.1 21.06.2025 SB2005020101
#VU111738 - Permissions, Privileges, and Access Controls
CVE-2005-0244
CWE-264 Medium
No
No
7.2.7, 7.3.9, 7.4.7, 8.0.1 21.06.2025 SB2005020101
#VU111737 - Exposed Dangerous Method or Function
CVE-2005-0227
CWE-749 Medium
No
No
7.2.7, 7.3.9, 7.4.7, 8.0.1 21.06.2025 SB2005020101
#VU111792 - Improper input validation
CVE-2005-1410
CWE-20 Low
No
No
8.0.0 19.10.2018 SB2005050301
#VU32771 - Resource Management Errors
CVE-2012-2655
CWE-399 Low
No
No
8.3.19 19.07.2012 SB2012071902
SB2012070322
SB2012070510
and 1 more
#VU43840 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2012-0868
CWE-89 Medium
No
No
- 19.07.2012 SB2012071904
SB2012092802
SB2025090533
and 14 more
#VU45396 - Improper input validation
CVE-2010-4015
CWE-20 Low
No
No
- 02.02.2011 SB2011020204
SB2011102510
#VU111797 - Memory corruption
CVE-2002-1401
CWE-119 Medium
No
No
7.2.4 10.09.2008 SB2008091004
#VU111795 - Improper input validation
CVE-2003-0901
CWE-20 Medium
No
No
7.3.4 05.09.2008 SB2008090506
#VU111764 - Improper input validation
CVE-2005-1409
CWE-20 Medium
No
No
8.0.0 03.05.2005 SB2005050301


Showing elements 181 - 200 out of 198