Known vulnerabilities in PostgreSQL - page 6

Software: PostgreSQL
Software CPE: cpe:2.3:a:postgresql_global_development_group:postgresql:*:*:*:*:*:*:*:*
Total vulnerabilities: 198
Public exploits: 11
Known exploited (KEV): 2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting PostgreSQL PostgreSQL is affected by 198 known vulnerabilities: 2 critical, 22 high, 90 medium, 84 low Critical High Medium Low

Vulnerabilities (198)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU111771 - Improper input validation
CVE-2010-0733
CWE-20 Low
Available
No
8.4.2 13.02.2023 SB2017013112
SB2011102510
#VU48437 - Improper Access Control
CVE-2020-25694
CWE-284 Medium
No
No
9.5.24, 9.6.20, 10.15, 11.10, 12.5, 13.1 16.11.2020 SB2020111609
SB2020111711
SB2020111815
and 35 more
#VU48438 - Improper input validation
CVE-2020-25696
CWE-20 Medium
No
No
9.5.24, 9.6.20, 10.15, 11.10, 12.5, 13.1 16.11.2020 SB2020111609
SB2020111711
SB2020111817
and 32 more
#VU45749 - Untrusted Search Path
CVE-2020-14350
CWE-426 Medium
No
No
9.5.23, 9.6.19, 10.14, 11.9, 12.4 18.08.2020 SB2020081801
SB2020081802
SB2020081803
and 31 more
#VU45748 - Untrusted Search Path
CVE-2020-14349
CWE-426 Medium
No
No
10.14, 11.9, 12.4 18.08.2020 SB2020081801
SB2020081803
SB2020082205
and 23 more
#VU111787 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2006-2314
CWE-89 Medium
No
No
7.3.15, 7.4.13, 8.0.8, 8.1.4 18.10.2018 SB2016110831
SB2006070901
#VU111788 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2006-2313
CWE-89 Medium
No
No
7.3.15, 7.4.13, 8.0.8, 8.1.4 18.10.2018 SB2016110831
SB2006070901
#VU111778 - Resource Management Errors
CVE-2009-0922
CWE-399 Low
Available
No
8.3.7 10.10.2018 SB2017070807
SB2011102510
SB2015040706
#VU41872 - Improper input validation
CVE-2014-2669
CWE-20 Low
No
No
- 31.03.2014 SB2014033102
SB2014082905
#VU41873 - Permissions, Privileges, and Access Controls
CVE-2014-0061
CWE-264 Low
No
No
- 31.03.2014 SB2014033102
SB2014031330
SB2014031331
and 2 more
#VU41874 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2014-0062
CWE-362 Low
No
No
- 31.03.2014 SB2014033102
SB2014031330
SB2014031331
and 2 more
#VU41875 - Stack-based buffer overflow
CVE-2014-0063
CWE-121 Low
No
No
- 31.03.2014 SB2014033102
SB2014031330
SB2014031331
and 2 more
#VU41876 - Improper input validation
CVE-2014-0064
CWE-20 Low
No
No
- 31.03.2014 SB2014033102
SB2014031330
SB2014031331
and 2 more
#VU41877 - Memory corruption
CVE-2014-0065
CWE-119 Low
No
No
- 31.03.2014 SB2014033102
SB2014031330
SB2014031331
and 2 more
#VU41878 - NULL Pointer Dereference
CVE-2014-0066
CWE-476 Low
No
No
- 31.03.2014 SB2014033102
SB2014031330
SB2014031331
and 2 more
#VU42931 - Improper input validation
CVE-2013-1902
CWE-20 High
No
No
- 04.04.2013 SB2013040404
#VU42932 - Permissions, Privileges, and Access Controls
CVE-2013-1903
CWE-264 High
No
No
- 04.04.2013 SB2013040404
#VU43839 - Permissions, Privileges, and Access Controls
CVE-2012-0866
CWE-264 Low
No
No
- 19.07.2012 SB2012071904
SB2012092802
SB2015022804
#VU43840 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2012-0868
CWE-89 Medium
No
No
- 19.07.2012 SB2012071904
SB2012092802
SB2025090533
and 16 more
#VU45396 - Improper input validation
CVE-2010-4015
CWE-20 Low
No
No
- 02.02.2011 SB2011020204
SB2011102510
SB2015020312


Showing elements 101 - 120 out of 198