Поиск уязвимостей
Количество 41
Количество 41
CVE-2023-39417
Postgresql: extension script @substitutions@ within quoting allow sql injection
CVE-2023-39417
IN THE EXTENSION SCRIPT, a SQL Injection vulnerability was found in Po ...
SUSE-SU-2023:3384-1
Security update for postgresql15
SUSE-SU-2023:3348-1
Security update for postgresql15
SUSE-SU-2023:3346-1
Security update for postgresql12
SUSE-SU-2023:3345-1
Security update for postgresql15
SUSE-SU-2023:3344-1
Security update for postgresql15
SUSE-SU-2023:3343-1
Security update for postgresql15
SUSE-SU-2023:3341-1
Security update for postgresql12
GHSA-jx3x-j983-74m3
IN THE EXTENSION SCRIPT, a SQL Injection vulnerability was found in PostgreSQL if it uses @extowner@, @extschema@, or @extschema:...@ inside a quoting construct (dollar quoting, '', or ""). If an administrator has installed files of a vulnerable, trusted, non-bundled extension, an attacker with database-level CREATE privilege can execute arbitrary code as the bootstrap superuser.
SUSE-SU-2023:3347-1
Security update for postgresql15
SUSE-SU-2023:3342-1
Security update for postgresql15
RLSA-2023:7714
Important: postgresql:12 security update
RLSA-2023:7581
Important: postgresql:13 security update
ELSA-2023-7784
ELSA-2023-7784: postgresql security update (IMPORTANT)
ELSA-2023-7714
ELSA-2023-7714: postgresql:12 security update (IMPORTANT)
ELSA-2023-7581
ELSA-2023-7581: postgresql:13 security update (IMPORTANT)
RLSA-2023:7884
Important: postgresql:15 security update
RLSA-2023:7785
Important: postgresql:15 security update
ELSA-2023-7884
ELSA-2023-7884: postgresql:15 security update (IMPORTANT)
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2023-39417 Postgresql: extension script @substitutions@ within quoting allow sql injection | CVSS3: 8.8 | 2% Низкий | около 3 лет назад |
| CVE-2023-39417 IN THE EXTENSION SCRIPT, a SQL Injection vulnerability was found in Po ... | CVSS3: 8.8 | 2% Низкий | около 3 лет назад |
 | SUSE-SU-2023:3384-1 Security update for postgresql15 | 2% Низкий | около 3 лет назад | |
| SUSE-SU-2023:3348-1 Security update for postgresql15 | 2% Низкий | около 3 лет назад | |
| SUSE-SU-2023:3346-1 Security update for postgresql12 | 2% Низкий | около 3 лет назад | |
| SUSE-SU-2023:3345-1 Security update for postgresql15 | 2% Низкий | около 3 лет назад | |
| SUSE-SU-2023:3344-1 Security update for postgresql15 | 2% Низкий | около 3 лет назад | |
| SUSE-SU-2023:3343-1 Security update for postgresql15 | 2% Низкий | около 3 лет назад | |
| SUSE-SU-2023:3341-1 Security update for postgresql12 | 2% Низкий | около 3 лет назад | |
| GHSA-jx3x-j983-74m3 IN THE EXTENSION SCRIPT, a SQL Injection vulnerability was found in PostgreSQL if it uses @extowner@, @extschema@, or @extschema:...@ inside a quoting construct (dollar quoting, '', or ""). If an administrator has installed files of a vulnerable, trusted, non-bundled extension, an attacker with database-level CREATE privilege can execute arbitrary code as the bootstrap superuser. | CVSS3: 7.5 | 2% Низкий | около 3 лет назад |
| SUSE-SU-2023:3347-1 Security update for postgresql15 | около 3 лет назад | ||
| SUSE-SU-2023:3342-1 Security update for postgresql15 | около 3 лет назад | ||
 | RLSA-2023:7714 Important: postgresql:12 security update | почти 3 года назад | ||
| RLSA-2023:7581 Important: postgresql:13 security update | почти 3 года назад | ||
| ELSA-2023-7784 ELSA-2023-7784: postgresql security update (IMPORTANT) | почти 3 года назад | ||
| ELSA-2023-7714 ELSA-2023-7714: postgresql:12 security update (IMPORTANT) | почти 3 года назад | ||
| ELSA-2023-7581 ELSA-2023-7581: postgresql:13 security update (IMPORTANT) | почти 3 года назад | ||
| RLSA-2023:7884 Important: postgresql:15 security update | 9 месяцев назад | ||
| RLSA-2023:7785 Important: postgresql:15 security update | почти 3 года назад | ||
| ELSA-2023-7884 ELSA-2023-7884: postgresql:15 security update (IMPORTANT) | почти 3 года назад |
Уязвимостей на страницу