Логотип exploitDog
bind:"BDU:2022-04971" OR bind:"CVE-2022-2625"
Консоль
Логотип exploitDog

exploitDog

bind:"BDU:2022-04971" OR bind:"CVE-2022-2625"

Количество 28

Количество 28

rocky логотип

RLSA-2022:7128

больше 2 лет назад

Moderate: postgresql:12 security update

EPSS: Низкий
github логотип

GHSA-m7mv-m566-78j6

почти 3 года назад

A vulnerability found in postgresql. On this security issue an attack requires permission to create non-temporary objects in at least one schema, ability to lure or wait for an administrator to create or update an affected extension in that schema, and ability to lure or wait for a victim to use the object targeted in CREATE OR REPLACE or CREATE IF NOT EXISTS. Given all three prerequisites, the attacker can run arbitrary code as the victim role, which may be a superuser. Known-affected extensions include both PostgreSQL-bundled and non-bundled extensions. PostgreSQL blocks this attack in the core server, so there's no need to modify individual extensions.

CVSS3: 8
EPSS: Низкий
oracle-oval логотип

ELSA-2023-0113

больше 2 лет назад

ELSA-2023-0113: postgresql:10 security update (MODERATE)

EPSS: Низкий
oracle-oval логотип

ELSA-2022-7128

больше 2 лет назад

ELSA-2022-7128: postgresql:12 security update (MODERATE)

EPSS: Низкий
oracle-oval логотип

ELSA-2023-1693

около 2 лет назад

ELSA-2023-1693: postgresql security update (MODERATE)

EPSS: Низкий
oracle-oval логотип

ELSA-2023-1576

около 2 лет назад

ELSA-2023-1576: postgresql:13 security update (MODERATE)

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2022:2893-1

почти 3 года назад

Security update for postgresql10

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2022:2958-1

почти 3 года назад

Security update for postgresql12

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
rocky логотип
RLSA-2022:7128

Moderate: postgresql:12 security update

1%
Низкий
больше 2 лет назад
github логотип
GHSA-m7mv-m566-78j6

A vulnerability found in postgresql. On this security issue an attack requires permission to create non-temporary objects in at least one schema, ability to lure or wait for an administrator to create or update an affected extension in that schema, and ability to lure or wait for a victim to use the object targeted in CREATE OR REPLACE or CREATE IF NOT EXISTS. Given all three prerequisites, the attacker can run arbitrary code as the victim role, which may be a superuser. Known-affected extensions include both PostgreSQL-bundled and non-bundled extensions. PostgreSQL blocks this attack in the core server, so there's no need to modify individual extensions.

CVSS3: 8
1%
Низкий
почти 3 года назад
oracle-oval логотип
ELSA-2023-0113

ELSA-2023-0113: postgresql:10 security update (MODERATE)

больше 2 лет назад
oracle-oval логотип
ELSA-2022-7128

ELSA-2022-7128: postgresql:12 security update (MODERATE)

больше 2 лет назад
oracle-oval логотип
ELSA-2023-1693

ELSA-2023-1693: postgresql security update (MODERATE)

около 2 лет назад
oracle-oval логотип
ELSA-2023-1576

ELSA-2023-1576: postgresql:13 security update (MODERATE)

около 2 лет назад
suse-cvrf логотип
SUSE-SU-2022:2893-1

Security update for postgresql10

почти 3 года назад
suse-cvrf логотип
SUSE-SU-2022:2958-1

Security update for postgresql12

почти 3 года назад

Уязвимостей на страницу