Логотип exploitDog
bind:"BDU:2022-04971" OR bind:"CVE-2022-2625"
Консоль
Логотип exploitDog

exploitDog

bind:"BDU:2022-04971" OR bind:"CVE-2022-2625"

Количество 28

Количество 28

rocky логотип

RLSA-2022:7128

около 3 лет назад

Moderate: postgresql:12 security update

EPSS: Низкий
github логотип

GHSA-m7mv-m566-78j6

около 3 лет назад

A vulnerability found in postgresql. On this security issue an attack requires permission to create non-temporary objects in at least one schema, ability to lure or wait for an administrator to create or update an affected extension in that schema, and ability to lure or wait for a victim to use the object targeted in CREATE OR REPLACE or CREATE IF NOT EXISTS. Given all three prerequisites, the attacker can run arbitrary code as the victim role, which may be a superuser. Known-affected extensions include both PostgreSQL-bundled and non-bundled extensions. PostgreSQL blocks this attack in the core server, so there's no need to modify individual extensions.

CVSS3: 8
EPSS: Низкий
oracle-oval логотип

ELSA-2023-0113

почти 3 года назад

ELSA-2023-0113: postgresql:10 security update (MODERATE)

EPSS: Низкий
oracle-oval логотип

ELSA-2022-7128

около 3 лет назад

ELSA-2022-7128: postgresql:12 security update (MODERATE)

EPSS: Низкий
oracle-oval логотип

ELSA-2023-1693

больше 2 лет назад

ELSA-2023-1693: postgresql security update (MODERATE)

EPSS: Низкий
oracle-oval логотип

ELSA-2023-1576

больше 2 лет назад

ELSA-2023-1576: postgresql:13 security update (MODERATE)

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2022:2893-1

около 3 лет назад

Security update for postgresql10

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2022:2958-1

около 3 лет назад

Security update for postgresql12

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
rocky логотип
RLSA-2022:7128

Moderate: postgresql:12 security update

1%
Низкий
около 3 лет назад
github логотип
GHSA-m7mv-m566-78j6

A vulnerability found in postgresql. On this security issue an attack requires permission to create non-temporary objects in at least one schema, ability to lure or wait for an administrator to create or update an affected extension in that schema, and ability to lure or wait for a victim to use the object targeted in CREATE OR REPLACE or CREATE IF NOT EXISTS. Given all three prerequisites, the attacker can run arbitrary code as the victim role, which may be a superuser. Known-affected extensions include both PostgreSQL-bundled and non-bundled extensions. PostgreSQL blocks this attack in the core server, so there's no need to modify individual extensions.

CVSS3: 8
1%
Низкий
около 3 лет назад
oracle-oval логотип
ELSA-2023-0113

ELSA-2023-0113: postgresql:10 security update (MODERATE)

почти 3 года назад
oracle-oval логотип
ELSA-2022-7128

ELSA-2022-7128: postgresql:12 security update (MODERATE)

около 3 лет назад
oracle-oval логотип
ELSA-2023-1693

ELSA-2023-1693: postgresql security update (MODERATE)

больше 2 лет назад
oracle-oval логотип
ELSA-2023-1576

ELSA-2023-1576: postgresql:13 security update (MODERATE)

больше 2 лет назад
suse-cvrf логотип
SUSE-SU-2022:2893-1

Security update for postgresql10

около 3 лет назад
suse-cvrf логотип
SUSE-SU-2022:2958-1

Security update for postgresql12

около 3 лет назад

Уязвимостей на страницу