Поиск уязвимостей
Количество 58
Количество 58
ALT-PU-2026-8091
ALT-PU-2026-8091: package `postgresql15-1C` update to version 15.15-alt0.p10.5
ALT-PU-2026-7952
ALT-PU-2026-7952: package `postgresql14` update to version 14.23-alt0.p10.1
ALT-PU-2026-7949
ALT-PU-2026-7949: package `postgresql15` update to version 15.18-alt0.p10.1
ALT-PU-2026-7738
ALT-PU-2026-7738: package `postgresql14` update to version 14.23-alt1
ALT-PU-2026-7736
ALT-PU-2026-7736: package `postgresql15` update to version 15.18-alt1
CVE-2026-6472
Missing authorization in PostgreSQL CREATE TYPE allows an object creator to hijack other queries that use search_path to find user-defined types, including extension-defined types. That is to say, the victim will execute arbitrary SQL functions of the attacker's choice. Versions before PostgreSQL 18.4, 17.10, 16.14, 15.18, and 14.23 are affected.
CVE-2026-6472
Missing authorization in PostgreSQL CREATE TYPE allows an object creator to hijack other queries that use search_path to find user-defined types, including extension-defined types. That is to say, the victim will execute arbitrary SQL functions of the attacker's choice. Versions before PostgreSQL 18.4, 17.10, 16.14, 15.18, and 14.23 are affected.
CVE-2026-6472
Missing authorization in PostgreSQL CREATE TYPE allows an object creator to hijack other queries that use search_path to find user-defined types, including extension-defined types. That is to say, the victim will execute arbitrary SQL functions of the attacker's choice. Versions before PostgreSQL 18.4, 17.10, 16.14, 15.18, and 14.23 are affected.
CVE-2026-6472
PostgreSQL CREATE TYPE does not check multirange schema CREATE privilege
CVE-2026-6472
Missing authorization in PostgreSQL CREATE TYPE allows an object creat ...
ALT-PU-2026-7951
ALT-PU-2026-7951: package `postgresql16` update to version 16.14-alt0.p10.1
ALT-PU-2026-7740
ALT-PU-2026-7740: package `postgresql16` update to version 16.14-alt1
ALT-PU-2026-7953
ALT-PU-2026-7953: package `postgresql17` update to version 17.10-alt0.p10.1
ALT-PU-2026-7948
ALT-PU-2026-7948: package `postgresql17-1C` update to version 17.7-alt0.p11.7
ALT-PU-2026-7741
ALT-PU-2026-7741: package `postgresql17` update to version 17.10-alt1
ALT-PU-2026-7946
ALT-PU-2026-7946: package `postgresql18-1C` update to version 18.4-alt1
ALT-PU-2026-7739
ALT-PU-2026-7739: package `postgresql18` update to version 18.4-alt1
GHSA-3276-f9jg-jf2x
Missing authorization in PostgreSQL CREATE TYPE allows an object creator to hijack other queries that use search_path to find user-defined types, including extension-defined types. That is to say, the victim will execute arbitrary SQL functions of the attacker's choice. Versions before PostgreSQL 18.4, 17.10, 16.14, 15.18, and 14.23 are affected.
openSUSE-SU-2026:21103-1
Security update for postgresql15
openSUSE-SU-2026:21102-1
Security update for postgresql14
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| ALT-PU-2026-8091 ALT-PU-2026-8091: package `postgresql15-1C` update to version 15.15-alt0.p10.5 | CVSS3: 8.8 | 5 месяцев назад | |
| ALT-PU-2026-7952 ALT-PU-2026-7952: package `postgresql14` update to version 14.23-alt0.p10.1 | CVSS3: 8.8 | 6 месяцев назад | |
| ALT-PU-2026-7949 ALT-PU-2026-7949: package `postgresql15` update to version 15.18-alt0.p10.1 | CVSS3: 8.8 | 6 месяцев назад | |
| ALT-PU-2026-7738 ALT-PU-2026-7738: package `postgresql14` update to version 14.23-alt1 | CVSS3: 8.8 | 6 месяцев назад | |
| ALT-PU-2026-7736 ALT-PU-2026-7736: package `postgresql15` update to version 15.18-alt1 | CVSS3: 8.8 | 6 месяцев назад | |
 | CVE-2026-6472 Missing authorization in PostgreSQL CREATE TYPE allows an object creator to hijack other queries that use search_path to find user-defined types, including extension-defined types. That is to say, the victim will execute arbitrary SQL functions of the attacker's choice. Versions before PostgreSQL 18.4, 17.10, 16.14, 15.18, and 14.23 are affected. | CVSS3: 5.4 | 0% Низкий | 6 месяцев назад |
 | CVE-2026-6472 Missing authorization in PostgreSQL CREATE TYPE allows an object creator to hijack other queries that use search_path to find user-defined types, including extension-defined types. That is to say, the victim will execute arbitrary SQL functions of the attacker's choice. Versions before PostgreSQL 18.4, 17.10, 16.14, 15.18, and 14.23 are affected. | CVSS3: 5.4 | 0% Низкий | 6 месяцев назад |
 | CVE-2026-6472 Missing authorization in PostgreSQL CREATE TYPE allows an object creator to hijack other queries that use search_path to find user-defined types, including extension-defined types. That is to say, the victim will execute arbitrary SQL functions of the attacker's choice. Versions before PostgreSQL 18.4, 17.10, 16.14, 15.18, and 14.23 are affected. | CVSS3: 5.4 | 0% Низкий | 6 месяцев назад |
 | CVE-2026-6472 PostgreSQL CREATE TYPE does not check multirange schema CREATE privilege | CVSS3: 5.4 | 0% Низкий | 6 месяцев назад |
| CVE-2026-6472 Missing authorization in PostgreSQL CREATE TYPE allows an object creat ... | CVSS3: 5.4 | 0% Низкий | 6 месяцев назад |
| ALT-PU-2026-7951 ALT-PU-2026-7951: package `postgresql16` update to version 16.14-alt0.p10.1 | CVSS3: 8.8 | 6 месяцев назад | |
| ALT-PU-2026-7740 ALT-PU-2026-7740: package `postgresql16` update to version 16.14-alt1 | CVSS3: 8.8 | 6 месяцев назад | |
| ALT-PU-2026-7953 ALT-PU-2026-7953: package `postgresql17` update to version 17.10-alt0.p10.1 | CVSS3: 8.8 | 6 месяцев назад | |
| ALT-PU-2026-7948 ALT-PU-2026-7948: package `postgresql17-1C` update to version 17.7-alt0.p11.7 | CVSS3: 8.8 | 6 месяцев назад | |
| ALT-PU-2026-7741 ALT-PU-2026-7741: package `postgresql17` update to version 17.10-alt1 | CVSS3: 8.8 | 6 месяцев назад | |
| ALT-PU-2026-7946 ALT-PU-2026-7946: package `postgresql18-1C` update to version 18.4-alt1 | CVSS3: 8.8 | 6 месяцев назад | |
| ALT-PU-2026-7739 ALT-PU-2026-7739: package `postgresql18` update to version 18.4-alt1 | CVSS3: 8.8 | 6 месяцев назад | |
| GHSA-3276-f9jg-jf2x Missing authorization in PostgreSQL CREATE TYPE allows an object creator to hijack other queries that use search_path to find user-defined types, including extension-defined types. That is to say, the victim will execute arbitrary SQL functions of the attacker's choice. Versions before PostgreSQL 18.4, 17.10, 16.14, 15.18, and 14.23 are affected. | CVSS3: 5.4 | 0% Низкий | 6 месяцев назад |
 | openSUSE-SU-2026:21103-1 Security update for postgresql15 | 5 месяцев назад | ||
| openSUSE-SU-2026:21102-1 Security update for postgresql14 | 5 месяцев назад |
Уязвимостей на страницу