Поиск уязвимостей
Количество 58
Количество 58
CVE-2026-6472
Missing authorization in PostgreSQL CREATE TYPE allows an object creator to hijack other queries that use search_path to find user-defined types, including extension-defined types. That is to say, the victim will execute arbitrary SQL functions of the attacker's choice. Versions before PostgreSQL 18.4, 17.10, 16.14, 15.18, and 14.23 are affected.
CVE-2026-6472
Missing authorization in PostgreSQL CREATE TYPE allows an object creator to hijack other queries that use search_path to find user-defined types, including extension-defined types. That is to say, the victim will execute arbitrary SQL functions of the attacker's choice. Versions before PostgreSQL 18.4, 17.10, 16.14, 15.18, and 14.23 are affected.
CVE-2026-6472
Missing authorization in PostgreSQL CREATE TYPE allows an object creator to hijack other queries that use search_path to find user-defined types, including extension-defined types. That is to say, the victim will execute arbitrary SQL functions of the attacker's choice. Versions before PostgreSQL 18.4, 17.10, 16.14, 15.18, and 14.23 are affected.
CVE-2026-6472
PostgreSQL CREATE TYPE does not check multirange schema CREATE privilege
CVE-2026-6472
Missing authorization in PostgreSQL CREATE TYPE allows an object creat ...
GHSA-3276-f9jg-jf2x
Missing authorization in PostgreSQL CREATE TYPE allows an object creator to hijack other queries that use search_path to find user-defined types, including extension-defined types. That is to say, the victim will execute arbitrary SQL functions of the attacker's choice. Versions before PostgreSQL 18.4, 17.10, 16.14, 15.18, and 14.23 are affected.
BDU:2026-07103
Уязвимость команды CREATE TYPE системы управления базами данных PostgreSQL, позволяющая нарушителю выполнять произвольные SQL-функции
ROS-20260707-80-0056
Уязвимость postgresql18
ROS-20260706-80-0015
Уязвимость postgresql14
ROS-20260706-80-0014
Уязвимость postgresql16
ROS-20260706-80-0013
Уязвимость postgresql18-1c
ROS-20260706-80-0012
Уязвимость postgresql17-1c
ROS-20260706-80-0011
Уязвимость postgresql17
ROS-20260706-80-0010
Уязвимость postgresql15-1c
ROS-20260706-80-0009
Уязвимость postgresql15
ROS-20260706-80-0008
Уязвимость postgresql-1c
ROS-20260706-80-0007
Уязвимость postgresql
ROS-20260706-73-0015
Уязвимость postgresql15
ROS-20260706-73-0014
Уязвимость postgresql14
ROS-20260706-73-0013
Уязвимость postgresql18-1c
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-6472 Missing authorization in PostgreSQL CREATE TYPE allows an object creator to hijack other queries that use search_path to find user-defined types, including extension-defined types. That is to say, the victim will execute arbitrary SQL functions of the attacker's choice. Versions before PostgreSQL 18.4, 17.10, 16.14, 15.18, and 14.23 are affected. | CVSS3: 5.4 | 0% Низкий | 6 месяцев назад |
 | CVE-2026-6472 Missing authorization in PostgreSQL CREATE TYPE allows an object creator to hijack other queries that use search_path to find user-defined types, including extension-defined types. That is to say, the victim will execute arbitrary SQL functions of the attacker's choice. Versions before PostgreSQL 18.4, 17.10, 16.14, 15.18, and 14.23 are affected. | CVSS3: 5.4 | 0% Низкий | 6 месяцев назад |
 | CVE-2026-6472 Missing authorization in PostgreSQL CREATE TYPE allows an object creator to hijack other queries that use search_path to find user-defined types, including extension-defined types. That is to say, the victim will execute arbitrary SQL functions of the attacker's choice. Versions before PostgreSQL 18.4, 17.10, 16.14, 15.18, and 14.23 are affected. | CVSS3: 5.4 | 0% Низкий | 6 месяцев назад |
 | CVE-2026-6472 PostgreSQL CREATE TYPE does not check multirange schema CREATE privilege | CVSS3: 5.4 | 0% Низкий | 6 месяцев назад |
| CVE-2026-6472 Missing authorization in PostgreSQL CREATE TYPE allows an object creat ... | CVSS3: 5.4 | 0% Низкий | 6 месяцев назад |
| GHSA-3276-f9jg-jf2x Missing authorization in PostgreSQL CREATE TYPE allows an object creator to hijack other queries that use search_path to find user-defined types, including extension-defined types. That is to say, the victim will execute arbitrary SQL functions of the attacker's choice. Versions before PostgreSQL 18.4, 17.10, 16.14, 15.18, and 14.23 are affected. | CVSS3: 5.4 | 0% Низкий | 6 месяцев назад |
 | BDU:2026-07103 Уязвимость команды CREATE TYPE системы управления базами данных PostgreSQL, позволяющая нарушителю выполнять произвольные SQL-функции | CVSS3: 5.4 | 0% Низкий | 6 месяцев назад |
 | ROS-20260707-80-0056 Уязвимость postgresql18 | CVSS3: 5.4 | 0% Низкий | 4 месяца назад |
| ROS-20260706-80-0015 Уязвимость postgresql14 | CVSS3: 5.4 | 0% Низкий | 4 месяца назад |
| ROS-20260706-80-0014 Уязвимость postgresql16 | CVSS3: 5.4 | 0% Низкий | 4 месяца назад |
| ROS-20260706-80-0013 Уязвимость postgresql18-1c | CVSS3: 5.4 | 0% Низкий | 4 месяца назад |
| ROS-20260706-80-0012 Уязвимость postgresql17-1c | CVSS3: 5.4 | 0% Низкий | 4 месяца назад |
| ROS-20260706-80-0011 Уязвимость postgresql17 | CVSS3: 5.4 | 0% Низкий | 4 месяца назад |
| ROS-20260706-80-0010 Уязвимость postgresql15-1c | CVSS3: 5.4 | 0% Низкий | 4 месяца назад |
| ROS-20260706-80-0009 Уязвимость postgresql15 | CVSS3: 5.4 | 0% Низкий | 4 месяца назад |
| ROS-20260706-80-0008 Уязвимость postgresql-1c | CVSS3: 5.4 | 0% Низкий | 4 месяца назад |
| ROS-20260706-80-0007 Уязвимость postgresql | CVSS3: 5.4 | 0% Низкий | 4 месяца назад |
| ROS-20260706-73-0015 Уязвимость postgresql15 | CVSS3: 5.4 | 0% Низкий | 4 месяца назад |
| ROS-20260706-73-0014 Уязвимость postgresql14 | CVSS3: 5.4 | 0% Низкий | 4 месяца назад |
| ROS-20260706-73-0013 Уязвимость postgresql18-1c | CVSS3: 5.4 | 0% Низкий | 4 месяца назад |
Уязвимостей на страницу