Known vulnerabilities in PostgreSQL - page 5

Software: PostgreSQL
Software CPE: cpe:2.3:a:postgresql_global_development_group:postgresql:*:*:*:*:*:*:*:*
Total vulnerabilities: 170
Public exploits: 9
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting PostgreSQL PostgreSQL is affected by 170 known vulnerabilities: 2 critical, 18 high, 75 medium, 75 low Critical High Medium Low

Vulnerabilities (170)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU111781 - Permissions, Privileges, and Access Controls
CVE-2007-2138
CWE-264 Medium
No
No
7.4.17, 8.0.13, 8.1.9, 8.2.4 19.10.2018 SB2018101914
SB2007051002
#VU111789 - Improper input validation
CVE-2006-0678
CWE-20 Low
No
No
7.3.14, 7.4.12, 8.0.7, 8.1.3 19.10.2018 SB2018101915
#VU111790 - Permissions, Privileges, and Access Controls
CVE-2006-0553
CWE-264 Medium
No
No
8.1.3 19.10.2018 SB2018101916
#VU111791 - Improper input validation
CVE-2006-0105
CWE-20 Medium
No
No
8.0.6, 8.1.2 19.10.2018 SB2018101917
#VU111779 - Improper input validation
CVE-2007-3280
CWE-20 High
Available
Exploited
8.1.0 16.10.2018 SB2018101626
#VU111780 - Improper input validation
CVE-2007-3279
CWE-20 High
No
No
8.1.0 16.10.2018 SB2018101626
#VU111783 - Improper input validation
CVE-2007-0556
CWE-20 Medium
No
No
8.1.7, 8.2.2 16.10.2018 SB2018101627
SB2007031602
#VU111773 - Improper input validation
CVE-2009-4136
CWE-20 Medium
No
No
7.4.27, 8.0.23, 8.1.19, 8.2.15, 8.3.9, 8.4.2 10.10.2018 SB2018101032
SB2011102510
#VU111774 - Cryptographic Issues
CVE-2009-4034
CWE-310 Medium
No
No
7.4.27, 8.0.23, 8.1.19, 8.2.15, 8.3.9, 8.4.2 10.10.2018 SB2018101032
SB2011102510
#VU111776 - Permissions, Privileges, and Access Controls
CVE-2009-3230
CWE-264 Medium
No
No
7.4.26, 8.0.22, 8.1.18, 8.2.14, 8.3.8, 8.4.1 10.10.2018 SB2018101033
SB2011102510
#VU111777 - Improper input validation
CVE-2009-3229
CWE-20 Low
No
No
8.2.14, 8.3.8, 8.4.1 10.10.2018 SB2018101033
SB2011102510
#VU31228 - Improper Access Control
CVE-2016-7048
CWE-284 High
No
No
9.5.5 20.08.2018 SB2018082019
#VU14327 - Exposure of sensitive information to an unauthorized actor
CVE-2018-10925
CWE-200 Low
No
No
9.3.24, 9.4.19, 9.5.14, 9.6.10, 10.5 13.08.2018 SB2018081310
SB2018081311
SB2018082316
and 14 more
#VU14326 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2018-10915
CWE-89 Low
No
No
9.3.24, 9.4.19, 9.5.14, 9.6.10, 10.5 11.08.2018 SB2018081310
SB2018081311
SB2018082316
and 19 more
#VU12652 - Improper Access Control
CVE-2018-1115
CWE-284 Medium
No
No
- 15.05.2018 SB2018051509
SB2018061712
SB2018070602
and 10 more
#VU10810 - Uncontrolled Search Path Element
CVE-2018-1058
CWE-427 Low
No
No
- 02.03.2018 SB2018030209
SB2018031101
SB2018040602
and 5 more
#VU10439 - Exposure of sensitive information to an unauthorized actor
CVE-2018-1053
CWE-200 Low
No
No
- 09.02.2018 SB2018020908
SB2018020913
SB2018022307
and 4 more
#VU10437 - Improper input validation
CVE-2018-1052
CWE-20 Low
No
No
- 09.02.2018 SB2018020908
SB2018020931
#VU111806 - Improper input validation
CVE-2000-1199
CWE-20 Low
Available
No
- 19.12.2017 SB2017121921
#VU9167 - Permissions, Privileges, and Access Controls
CVE-2017-15099
CWE-264 Low
No
No
- 10.11.2017 SB2017111004
SB2017111005
SB2017111008
and 7 more


Showing elements 81 - 100 out of 170