Поиск уязвимостей
Количество 67
Количество 67
CVE-2026-14662
Integer wraparound in PostgreSQL tsvector and tsquery data type functions allows an unprivileged database user to cause the server to undersize an allocation and write out-of-bounds, via crafted large inputs. This may execute arbitrary code as the operating system user running the database. These types are typically sourced from application logic, not taken from the application's user. Hence, application users attacking the database, through the application as a conduit, are unlikely. CVE-2026-6473 had fixed similar problems. Versions before PostgreSQL 18.6, 17.11, 16.15, 15.19, and 14.24 are affected.
CVE-2026-14662
Integer wraparound in PostgreSQL tsvector and tsquery data type functions allows an unprivileged database user to cause the server to undersize an allocation and write out-of-bounds, via crafted large inputs. This may execute arbitrary code as the operating system user running the database. These types are typically sourced from application logic, not taken from the application's user. Hence, application users attacking the database, through the application as a conduit, are unlikely. CVE-2026-6473 had fixed similar problems. Versions before PostgreSQL 18.5, 17.11, 16.15, 15.19, and 14.24 are affected.
CVE-2026-14662
Integer wraparound in PostgreSQL tsvector and tsquery data type functions allows an unprivileged database user to cause the server to undersize an allocation and write out-of-bounds, via crafted large inputs. This may execute arbitrary code as the operating system user running the database. These types are typically sourced from application logic, not taken from the application's user. Hence, application users attacking the database, through the application as a conduit, are unlikely. CVE-2026-6473 had fixed similar problems. Versions before PostgreSQL 18.6, 17.11, 16.15, 15.19, and 14.24 are affected.
CVE-2026-14662
PostgreSQL tsvector and tsquery undersize allocations, via integer wraparound
CVE-2026-14662
Integer wraparound in PostgreSQL tsvector and tsquery data type functi ...
GHSA-jvgx-qpg4-cv6w
Integer wraparound in PostgreSQL tsvector and tsquery data type functions allows an unprivileged database user to cause the server to undersize an allocation and write out-of-bounds, via crafted large inputs. This may execute arbitrary code as the operating system user running the database. These types are typically sourced from application logic, not taken from the application's user. Hence, application users attacking the database, through the application as a conduit, are unlikely. CVE-2026-6473 had fixed similar problems. Versions before PostgreSQL 18.5, 17.11, 16.15, 15.19, and 14.24 are affected.
BDU:2026-11951
Уязвимость функций работы с типами данных tsvector и tsquery системы управления базами данных PostgreSQL, позволяющая нарушителю выполнить произвольный код
ROS-20261002-80-0091
Уязвимость postgresql18
ROS-20261002-80-0090
Уязвимость postgresql17
ROS-20261002-80-0089
Уязвимость postgresql16
ROS-20261002-80-0088
Уязвимость postgresql15
ROS-20261002-80-0087
Уязвимость postgresql14
ROS-20261002-80-0086
Уязвимость postgresql
ROS-20261002-73-0075
Уязвимость postgresql18
ROS-20261002-73-0074
Уязвимость postgresql17
ROS-20261002-73-0073
Уязвимость postgresql16
ROS-20261002-73-0072
Уязвимость postgresql15
ROS-20261002-73-0071
Уязвимость postgresql14
RLSA-2026:69924
Important: postgresql:12 security update
ELSA-2026-69924
ELSA-2026-69924: postgresql:12 security update (IMPORTANT)
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-14662 Integer wraparound in PostgreSQL tsvector and tsquery data type functions allows an unprivileged database user to cause the server to undersize an allocation and write out-of-bounds, via crafted large inputs. This may execute arbitrary code as the operating system user running the database. These types are typically sourced from application logic, not taken from the application's user. Hence, application users attacking the database, through the application as a conduit, are unlikely. CVE-2026-6473 had fixed similar problems. Versions before PostgreSQL 18.6, 17.11, 16.15, 15.19, and 14.24 are affected. | CVSS3: 8.8 | 0% Низкий | 3 месяца назад |
 | CVE-2026-14662 Integer wraparound in PostgreSQL tsvector and tsquery data type functions allows an unprivileged database user to cause the server to undersize an allocation and write out-of-bounds, via crafted large inputs. This may execute arbitrary code as the operating system user running the database. These types are typically sourced from application logic, not taken from the application's user. Hence, application users attacking the database, through the application as a conduit, are unlikely. CVE-2026-6473 had fixed similar problems. Versions before PostgreSQL 18.5, 17.11, 16.15, 15.19, and 14.24 are affected. | CVSS3: 8.8 | 0% Низкий | 3 месяца назад |
 | CVE-2026-14662 Integer wraparound in PostgreSQL tsvector and tsquery data type functions allows an unprivileged database user to cause the server to undersize an allocation and write out-of-bounds, via crafted large inputs. This may execute arbitrary code as the operating system user running the database. These types are typically sourced from application logic, not taken from the application's user. Hence, application users attacking the database, through the application as a conduit, are unlikely. CVE-2026-6473 had fixed similar problems. Versions before PostgreSQL 18.6, 17.11, 16.15, 15.19, and 14.24 are affected. | CVSS3: 8.8 | 0% Низкий | 3 месяца назад |
 | CVE-2026-14662 PostgreSQL tsvector and tsquery undersize allocations, via integer wraparound | CVSS3: 8.8 | 0% Низкий | 3 месяца назад |
| CVE-2026-14662 Integer wraparound in PostgreSQL tsvector and tsquery data type functi ... | CVSS3: 8.8 | 0% Низкий | 3 месяца назад |
| GHSA-jvgx-qpg4-cv6w Integer wraparound in PostgreSQL tsvector and tsquery data type functions allows an unprivileged database user to cause the server to undersize an allocation and write out-of-bounds, via crafted large inputs. This may execute arbitrary code as the operating system user running the database. These types are typically sourced from application logic, not taken from the application's user. Hence, application users attacking the database, through the application as a conduit, are unlikely. CVE-2026-6473 had fixed similar problems. Versions before PostgreSQL 18.5, 17.11, 16.15, 15.19, and 14.24 are affected. | CVSS3: 8.8 | 0% Низкий | 3 месяца назад |
 | BDU:2026-11951 Уязвимость функций работы с типами данных tsvector и tsquery системы управления базами данных PostgreSQL, позволяющая нарушителю выполнить произвольный код | CVSS3: 8.8 | 0% Низкий | 3 месяца назад |
 | ROS-20261002-80-0091 Уязвимость postgresql18 | CVSS3: 8.8 | 0% Низкий | около 1 месяца назад |
| ROS-20261002-80-0090 Уязвимость postgresql17 | CVSS3: 8.8 | 0% Низкий | около 1 месяца назад |
| ROS-20261002-80-0089 Уязвимость postgresql16 | CVSS3: 8.8 | 0% Низкий | около 1 месяца назад |
| ROS-20261002-80-0088 Уязвимость postgresql15 | CVSS3: 8.8 | 0% Низкий | около 1 месяца назад |
| ROS-20261002-80-0087 Уязвимость postgresql14 | CVSS3: 8.8 | 0% Низкий | около 1 месяца назад |
| ROS-20261002-80-0086 Уязвимость postgresql | CVSS3: 8.8 | 0% Низкий | около 1 месяца назад |
| ROS-20261002-73-0075 Уязвимость postgresql18 | CVSS3: 8.8 | 0% Низкий | около 1 месяца назад |
| ROS-20261002-73-0074 Уязвимость postgresql17 | CVSS3: 8.8 | 0% Низкий | около 1 месяца назад |
| ROS-20261002-73-0073 Уязвимость postgresql16 | CVSS3: 8.8 | 0% Низкий | около 1 месяца назад |
| ROS-20261002-73-0072 Уязвимость postgresql15 | CVSS3: 8.8 | 0% Низкий | около 1 месяца назад |
| ROS-20261002-73-0071 Уязвимость postgresql14 | CVSS3: 8.8 | 0% Низкий | около 1 месяца назад |
 | RLSA-2026:69924 Important: postgresql:12 security update | около 2 месяцев назад | ||
| ELSA-2026-69924 ELSA-2026-69924: postgresql:12 security update (IMPORTANT) | около 2 месяцев назад |
Уязвимостей на страницу