PostgreSQL — свободная объектно-реляционная система управления базами данных.
Релизный цикл, информация об уязвимостях
График релизов
Релизные элементы
| KB | Версия | Билд | Дата доступности |
|---|---|---|---|
| 17.11 | 17.11 | ||
| 17.10 | 17.10 | ||
| 17.9 | 17.9 | ||
| 17.8 | 17.8 | ||
| 17.7 | 17.7 | ||
| 17.6 | 17.6 | ||
| 17.5 | 17.5 | ||
| 17.4 | 17.4 | ||
| 17.3 | 17.3 | ||
| 17.2 | 17.2 |
Показывать по
Количество 1 300
CVE-2019-10208
A flaw was discovered in postgresql versions 9.4.x before 9.4.24, 9.5.x before 9.5.19, 9.6.x before 9.6.15, 10.x before 10.10 and 11.x before 11.5 where arbitrary SQL statements can be executed given a suitable SECURITY DEFINER function. An attacker, with EXECUTE permission on the function, can execute arbitrary SQL as the owner of the function.
CVE-2019-10209
Postgresql, versions 11.x before 11.5, is vulnerable to a memory disclosure in cross-type comparison for hashed subplan.
SUSE-SU-2019:2707-1
Security update for postgresql10
SUSE-SU-2019:2159-1
Security update for postgresql96
SUSE-SU-2019:2158-1
Security update for postgresql94
openSUSE-SU-2019:2062-1
Security update for postgresql10
SUSE-SU-2019:2228-1
Security update for postgresql10
CVE-2019-10209
Postgresql, versions 11.x before 11.5, is vulnerable to a memory disclosure in cross-type comparison for hashed subplan.
CVE-2019-10208
A flaw was discovered in postgresql versions 9.4.x before 9.4.24, 9.5.x before 9.5.19, 9.6.x before 9.6.15, 10.x before 10.10 and 11.x before 11.5 where arbitrary SQL statements can be executed given a suitable SECURITY DEFINER function. An attacker, with EXECUTE permission on the function, can execute arbitrary SQL as the owner of the function.
CVE-2019-10210
Postgresql Windows installer before versions 11.5, 10.10, 9.6.15, 9.5.19, 9.4.24 is vulnerable via superuser writing password to unprotected temporary file.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
 | CVE-2019-10208 A flaw was discovered in postgresql versions 9.4.x before 9.4.24, 9.5.x before 9.5.19, 9.6.x before 9.6.15, 10.x before 10.10 and 11.x before 11.5 where arbitrary SQL statements can be executed given a suitable SECURITY DEFINER function. An attacker, with EXECUTE permission on the function, can execute arbitrary SQL as the owner of the function. | CVSS3: 8.8 | 2% Низкий | около 7 лет назад |
| CVE-2019-10209 Postgresql, versions 11.x before 11.5, is vulnerable to a memory disclosure in cross-type comparison for hashed subplan. | CVSS3: 2.2 | 1% Низкий | около 7 лет назад |
 | SUSE-SU-2019:2707-1 Security update for postgresql10 | 2% Низкий | около 7 лет назад | |
| SUSE-SU-2019:2159-1 Security update for postgresql96 | 2% Низкий | около 7 лет назад | |
| SUSE-SU-2019:2158-1 Security update for postgresql94 | 2% Низкий | около 7 лет назад | |
| openSUSE-SU-2019:2062-1 Security update for postgresql10 | 2% Низкий | около 7 лет назад | |
| SUSE-SU-2019:2228-1 Security update for postgresql10 | 2% Низкий | около 7 лет назад | |
 | CVE-2019-10209 Postgresql, versions 11.x before 11.5, is vulnerable to a memory disclosure in cross-type comparison for hashed subplan. | CVSS3: 3.1 | 1% Низкий | больше 7 лет назад |
| CVE-2019-10208 A flaw was discovered in postgresql versions 9.4.x before 9.4.24, 9.5.x before 9.5.19, 9.6.x before 9.6.15, 10.x before 10.10 and 11.x before 11.5 where arbitrary SQL statements can be executed given a suitable SECURITY DEFINER function. An attacker, with EXECUTE permission on the function, can execute arbitrary SQL as the owner of the function. | CVSS3: 7.5 | 2% Низкий | больше 7 лет назад |
| CVE-2019-10210 Postgresql Windows installer before versions 11.5, 10.10, 9.6.15, 9.5.19, 9.4.24 is vulnerable via superuser writing password to unprotected temporary file. | CVSS3: 6.7 | 0% Низкий | больше 7 лет назад |
Уязвимостей на страницу