Логотип exploitDog
product: "postgresql"
Консоль
Логотип exploitDog

exploitDog

product: "postgresql"
PostgreSQL

PostgreSQLсвободная объектно-реляционная система управления базами данных.

Релизный цикл, информация об уязвимостях

Продукт: PostgreSQL
Вендор: PostgreSQL

График релизов

131415161720202021202220232024202520262027202820292030

Недавние уязвимости PostgreSQL

Количество 970

nvd логотип

CVE-2005-0247

около 20 лет назад

Multiple buffer overflows in gram.y for PostgreSQL 8.0.1 and earlier may allow attackers to execute arbitrary code via (1) a large number of variables in a SQL statement being handled by the read_sql_construct function, (2) a large number of INTO variables in a SELECT statement being handled by the make_select_stmt function, (3) a large number of arbitrary variables in a SELECT statement being handled by the make_select_stmt function, and (4) a large number of INTO variables in a FETCH statement being handled by the make_fetch_stmt function, a different set of vulnerabilities than CVE-2005-0245.

CVSS2: 6.5
EPSS: Низкий
nvd логотип

CVE-2005-0244

около 20 лет назад

PostgreSQL 8.0.0 and earlier allows local users to bypass the EXECUTE permission check for functions by using the CREATE AGGREGATE command.

CVSS2: 6.5
EPSS: Низкий
nvd логотип

CVE-2005-0246

около 20 лет назад

The intagg contrib module for PostgreSQL 8.0.0 and earlier allows attackers to cause a denial of service (crash) via crafted arrays.

CVSS2: 5
EPSS: Низкий
nvd логотип

CVE-2005-0227

около 20 лет назад

PostgreSQL (pgsql) 7.4.x, 7.2.x, and other versions allows local users to load arbitrary shared libraries and execute code via the LOAD extension.

CVSS2: 4.3
EPSS: Низкий
debian логотип

CVE-2005-0227

около 20 лет назад

PostgreSQL (pgsql) 7.4.x, 7.2.x, and other versions allows local users ...

CVSS2: 4.3
EPSS: Низкий
debian логотип

CVE-2005-0246

около 20 лет назад

The intagg contrib module for PostgreSQL 8.0.0 and earlier allows atta ...

CVSS2: 5
EPSS: Низкий
debian логотип

CVE-2005-0247

около 20 лет назад

Multiple buffer overflows in gram.y for PostgreSQL 8.0.1 and earlier m ...

CVSS2: 6.5
EPSS: Низкий
debian логотип

CVE-2005-0244

около 20 лет назад

PostgreSQL 8.0.0 and earlier allows local users to bypass the EXECUTE ...

CVSS2: 6.5
EPSS: Низкий
ubuntu логотип

CVE-2005-0246

около 20 лет назад

The intagg contrib module for PostgreSQL 8.0.0 and earlier allows attackers to cause a denial of service (crash) via crafted arrays.

CVSS2: 5
EPSS: Низкий
ubuntu логотип

CVE-2005-0244

около 20 лет назад

PostgreSQL 8.0.0 and earlier allows local users to bypass the EXECUTE permission check for functions by using the CREATE AGGREGATE command.

CVSS2: 6.5
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
1
nvd логотип
CVE-2005-0247

Multiple buffer overflows in gram.y for PostgreSQL 8.0.1 and earlier may allow attackers to execute arbitrary code via (1) a large number of variables in a SQL statement being handled by the read_sql_construct function, (2) a large number of INTO variables in a SELECT statement being handled by the make_select_stmt function, (3) a large number of arbitrary variables in a SELECT statement being handled by the make_select_stmt function, and (4) a large number of INTO variables in a FETCH statement being handled by the make_fetch_stmt function, a different set of vulnerabilities than CVE-2005-0245.

CVSS2: 6.5
2%
Низкий
около 20 лет назад
nvd логотип
CVE-2005-0244

PostgreSQL 8.0.0 and earlier allows local users to bypass the EXECUTE permission check for functions by using the CREATE AGGREGATE command.

CVSS2: 6.5
1%
Низкий
около 20 лет назад
nvd логотип
CVE-2005-0246

The intagg contrib module for PostgreSQL 8.0.0 and earlier allows attackers to cause a denial of service (crash) via crafted arrays.

CVSS2: 5
2%
Низкий
около 20 лет назад
nvd логотип
CVE-2005-0227

PostgreSQL (pgsql) 7.4.x, 7.2.x, and other versions allows local users to load arbitrary shared libraries and execute code via the LOAD extension.

CVSS2: 4.3
0%
Низкий
около 20 лет назад
debian логотип
CVE-2005-0227

PostgreSQL (pgsql) 7.4.x, 7.2.x, and other versions allows local users ...

CVSS2: 4.3
0%
Низкий
около 20 лет назад
debian логотип
CVE-2005-0246

The intagg contrib module for PostgreSQL 8.0.0 and earlier allows atta ...

CVSS2: 5
2%
Низкий
около 20 лет назад
debian логотип
CVE-2005-0247

Multiple buffer overflows in gram.y for PostgreSQL 8.0.1 and earlier m ...

CVSS2: 6.5
2%
Низкий
около 20 лет назад
debian логотип
CVE-2005-0244

PostgreSQL 8.0.0 and earlier allows local users to bypass the EXECUTE ...

CVSS2: 6.5
1%
Низкий
около 20 лет назад
ubuntu логотип
CVE-2005-0246

The intagg contrib module for PostgreSQL 8.0.0 and earlier allows attackers to cause a denial of service (crash) via crafted arrays.

CVSS2: 5
2%
Низкий
около 20 лет назад
ubuntu логотип
CVE-2005-0244

PostgreSQL 8.0.0 and earlier allows local users to bypass the EXECUTE permission check for functions by using the CREATE AGGREGATE command.

CVSS2: 6.5
1%
Низкий
около 20 лет назад

Уязвимостей на страницу


Поделиться