Known vulnerabilities in PostgreSQL - page 8

Software: PostgreSQL
Software CPE: cpe:2.3:a:postgresql_global_development_group:postgresql:*:*:*:*:*:*:*:*
Total vulnerabilities: 170
Public exploits: 9
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting PostgreSQL PostgreSQL is affected by 170 known vulnerabilities: 2 critical, 18 high, 75 medium, 75 low Critical High Medium Low

Vulnerabilities (170)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU111758 - Incorrect Regular Expression
CVE-2007-4769
CWE-185 Medium
No
No
7.4.19, 8.0.15, 8.1.11, 8.2.6 23.06.2025 SB2008010901
SB2008010902
SB2008012902
#VU111757 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2007-4772
CWE-835 Medium
No
No
7.4.19, 8.0.15, 8.1.11, 8.2.6 23.06.2025 SB2008010901
SB2008010902
SB2008012902
#VU111755 - Incorrect Regular Expression
CVE-2007-6067
CWE-185 Medium
No
No
7.4.19, 8.0.15, 8.1.11, 8.2.6 23.06.2025 SB2008010901
SB2008010902
SB2008012902
#VU41877 - Memory corruption
CVE-2014-0065
CWE-119 Low
No
No
- 31.03.2014 SB2014033102
SB2014031330
SB2014031331
and 1 more
#VU41878 - NULL Pointer Dereference
CVE-2014-0066
CWE-476 Low
No
No
- 31.03.2014 SB2014033102
SB2014031330
SB2014031331
and 1 more
#VU41880 - Permissions, Privileges, and Access Controls
CVE-2014-0060
CWE-264 Low
No
No
- 31.03.2014 SB2014033102
SB2014031330
SB2014031331
and 1 more
#VU33905 - Improper input validation
CVE-2013-1900
CWE-20 Medium
No
No
9.2.4 04.04.2013 SB2013040403
SB2013041107
SB2013042301
and 4 more
#VU42931 - Improper input validation
CVE-2013-1902
CWE-20 High
No
No
- 04.04.2013 SB2013040404
#VU42932 - Permissions, Privileges, and Access Controls
CVE-2013-1903
CWE-264 High
No
No
- 04.04.2013 SB2013040404
#VU32710 - Improper input validation
CVE-2013-1899
CWE-20 Low
Available
No
9.2.4 04.04.2013 SB2013040401
SB2013041106
SB2013042301
and 3 more
#VU32711 - Permissions, Privileges, and Access Controls
CVE-2013-1901
CWE-264 Low
No
No
9.2.4 04.04.2013 SB2013040402
SB2013041108
SB2013042301
and 3 more
#VU32715 - Improper input validation
CVE-2013-0255
CWE-20 Low
No
No
9.2.3 13.02.2013 SB2013021303
SB2013032612
SB2013110301
and 1 more
#VU32769 - Permissions, Privileges, and Access Controls
CVE-2012-3488
CWE-264 Low
No
No
8.3.20 04.10.2012 SB2012100401
SB2012082016
SB2012092303
and 2 more
#VU32770 - Improper input validation
CVE-2012-3489
CWE-20 Low
No
No
8.3.20 04.10.2012 SB2012100402
SB2012082017
SB2012092303
and 1 more
#VU32771 - Resource Management Errors
CVE-2012-2655
CWE-399 Low
No
No
8.3.19 19.07.2012 SB2012071902
SB2012070322
SB2012070510
and 1 more
#VU43839 - Permissions, Privileges, and Access Controls
CVE-2012-0866
CWE-264 Low
No
No
- 19.07.2012 SB2012071904
SB2012092802
#VU43840 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2012-0868
CWE-89 Medium
No
No
- 19.07.2012 SB2012071904
SB2012092802
SB2025090533
and 14 more
#VU45396 - Improper input validation
CVE-2010-4015
CWE-20 Low
No
No
- 02.02.2011 SB2011020204
SB2011102510
#VU111797 - Memory corruption
CVE-2002-1401
CWE-119 Medium
No
No
7.2.4 10.09.2008 SB2008091004
#VU111795 - Improper input validation
CVE-2003-0901
CWE-20 Medium
No
No
7.3.4 05.09.2008 SB2008090506


Showing elements 141 - 160 out of 170