Поиск уязвимостей
Количество 67
Количество 67
CVE-2026-6471
Missing authorization in PostgreSQL logical decoding allows a non-superuser holding REPLICATION privilege to dlopen any file visible to the operating system account running the server, via the choice of logical decoding plugin. This in turn runs arbitrary code as that account. Versions before PostgreSQL 18.6, 17.11, 16.15, 15.19, and 14.24 are affected.
CVE-2026-6471
Missing authorization in PostgreSQL logical decoding allows a non-superuser holding REPLICATION privilege to dlopen any file visible to the operating system account running the server, via the choice of logical decoding plugin. This in turn runs arbitrary code as that account. Versions before PostgreSQL 18.5, 17.11, 16.15, 15.19, and 14.24 are affected.
CVE-2026-6471
Missing authorization in PostgreSQL logical decoding allows a non-superuser holding REPLICATION privilege to dlopen any file visible to the operating system account running the server, via the choice of logical decoding plugin. This in turn runs arbitrary code as that account. Versions before PostgreSQL 18.6, 17.11, 16.15, 15.19, and 14.24 are affected.
CVE-2026-6471
PostgreSQL logical decoding can dlopen arbitrary file
CVE-2026-6471
Missing authorization in PostgreSQL logical decoding allows a non-supe ...
GHSA-r26j-h78w-pjqm
Missing authorization in PostgreSQL logical decoding allows a non-superuser holding REPLICATION privilege to dlopen any file visible to the operating system account running the server, via the choice of logical decoding plugin. This in turn runs arbitrary code as that account. Versions before PostgreSQL 18.5, 17.11, 16.15, 15.19, and 14.24 are affected.
BDU:2026-11977
Уязвимость механизма логического декодирования (logical decoding) системы управления базами данных PostgreSQL, позволяющая нарушителю выполнить произвольный код
ROS-20261002-80-0007
Уязвимость postgresql18
ROS-20261002-80-0006
Уязвимость postgresql17
ROS-20261002-80-0005
Уязвимость postgresql16
ROS-20261002-80-0004
Уязвимость postgresql15
ROS-20261002-80-0003
Уязвимость postgresql14
ROS-20261002-80-0002
Уязвимость postgresql
ROS-20261002-73-0005
Уязвимость postgresql18
ROS-20261002-73-0004
Уязвимость postgresql17
ROS-20261002-73-0003
Уязвимость postgresql16
ROS-20261002-73-0002
Уязвимость postgresql15
ROS-20261002-73-0001
Уязвимость postgresql14
RLSA-2026:69924
Important: postgresql:12 security update
ELSA-2026-69924
ELSA-2026-69924: postgresql:12 security update (IMPORTANT)
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-6471 Missing authorization in PostgreSQL logical decoding allows a non-superuser holding REPLICATION privilege to dlopen any file visible to the operating system account running the server, via the choice of logical decoding plugin. This in turn runs arbitrary code as that account. Versions before PostgreSQL 18.6, 17.11, 16.15, 15.19, and 14.24 are affected. | CVSS3: 7.2 | 1% Низкий | 3 месяца назад |
 | CVE-2026-6471 Missing authorization in PostgreSQL logical decoding allows a non-superuser holding REPLICATION privilege to dlopen any file visible to the operating system account running the server, via the choice of logical decoding plugin. This in turn runs arbitrary code as that account. Versions before PostgreSQL 18.5, 17.11, 16.15, 15.19, and 14.24 are affected. | CVSS3: 7.2 | 1% Низкий | 3 месяца назад |
 | CVE-2026-6471 Missing authorization in PostgreSQL logical decoding allows a non-superuser holding REPLICATION privilege to dlopen any file visible to the operating system account running the server, via the choice of logical decoding plugin. This in turn runs arbitrary code as that account. Versions before PostgreSQL 18.6, 17.11, 16.15, 15.19, and 14.24 are affected. | CVSS3: 7.2 | 1% Низкий | 3 месяца назад |
 | CVE-2026-6471 PostgreSQL logical decoding can dlopen arbitrary file | CVSS3: 7.2 | 1% Низкий | 3 месяца назад |
| CVE-2026-6471 Missing authorization in PostgreSQL logical decoding allows a non-supe ... | CVSS3: 7.2 | 1% Низкий | 3 месяца назад |
| GHSA-r26j-h78w-pjqm Missing authorization in PostgreSQL logical decoding allows a non-superuser holding REPLICATION privilege to dlopen any file visible to the operating system account running the server, via the choice of logical decoding plugin. This in turn runs arbitrary code as that account. Versions before PostgreSQL 18.5, 17.11, 16.15, 15.19, and 14.24 are affected. | CVSS3: 7.2 | 1% Низкий | 3 месяца назад |
 | BDU:2026-11977 Уязвимость механизма логического декодирования (logical decoding) системы управления базами данных PostgreSQL, позволяющая нарушителю выполнить произвольный код | CVSS3: 7.2 | 1% Низкий | 3 месяца назад |
 | ROS-20261002-80-0007 Уязвимость postgresql18 | CVSS3: 7.2 | 1% Низкий | около 1 месяца назад |
| ROS-20261002-80-0006 Уязвимость postgresql17 | CVSS3: 7.2 | 1% Низкий | около 1 месяца назад |
| ROS-20261002-80-0005 Уязвимость postgresql16 | CVSS3: 7.2 | 1% Низкий | около 1 месяца назад |
| ROS-20261002-80-0004 Уязвимость postgresql15 | CVSS3: 7.2 | 1% Низкий | около 1 месяца назад |
| ROS-20261002-80-0003 Уязвимость postgresql14 | CVSS3: 7.2 | 1% Низкий | около 1 месяца назад |
| ROS-20261002-80-0002 Уязвимость postgresql | CVSS3: 7.2 | 1% Низкий | около 1 месяца назад |
| ROS-20261002-73-0005 Уязвимость postgresql18 | CVSS3: 7.2 | 1% Низкий | около 1 месяца назад |
| ROS-20261002-73-0004 Уязвимость postgresql17 | CVSS3: 7.2 | 1% Низкий | около 1 месяца назад |
| ROS-20261002-73-0003 Уязвимость postgresql16 | CVSS3: 7.2 | 1% Низкий | около 1 месяца назад |
| ROS-20261002-73-0002 Уязвимость postgresql15 | CVSS3: 7.2 | 1% Низкий | около 1 месяца назад |
| ROS-20261002-73-0001 Уязвимость postgresql14 | CVSS3: 7.2 | 1% Низкий | около 1 месяца назад |
 | RLSA-2026:69924 Important: postgresql:12 security update | около 2 месяцев назад | ||
| ELSA-2026-69924 ELSA-2026-69924: postgresql:12 security update (IMPORTANT) | около 2 месяцев назад |
Уязвимостей на страницу