Поиск уязвимостей
Количество 64
Количество 64
GHSA-f47v-jjrp-x56x
A flaw was found in postgresql. Using an UPDATE ... RETURNING command on a purpose-crafted table, an authenticated database user could read arbitrary bytes of server memory. The highest threat from this vulnerability is to data confidentiality.
BDU:2021-02774
Уязвимость реализации команды UPDATE ... RETURNING системы управления базами данных PostgreSQL, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации
openSUSE-SU-2021:1970-1
Security update for postgresql10
openSUSE-SU-2021:0894-1
Security update for postgresql10
SUSE-SU-2021:3481-1
Security update for postgresql10
SUSE-SU-2021:2777-1
Security update for postgresql10
SUSE-SU-2021:1970-1
Security update for postgresql10
SUSE-SU-2021:1782-1
Security update for postgresql10
RLSA-2021:2361
Important: postgresql:10 security update
RLSA-2021:2360
Important: postgresql:9.6 security update
ELSA-2021-9428
ELSA-2021-9428: rh-postgresql10-postgresql security update (IMPORTANT)
ELSA-2021-2361
ELSA-2021-2361: postgresql:10 security update (IMPORTANT)
ELSA-2021-2360
ELSA-2021-2360: postgresql:9.6 security update (IMPORTANT)
CVE-2021-3393
An information leak was discovered in postgresql in versions before 13.2, before 12.6 and before 11.11. A user having UPDATE permission but not SELECT permission to a particular column could craft queries which, under some circumstances, might disclose values from that column in error messages. An attacker could use this flaw to obtain information stored in a column they are allowed to write but not read.
CVE-2021-3393
An information leak was discovered in postgresql in versions before 13.2, before 12.6 and before 11.11. A user having UPDATE permission but not SELECT permission to a particular column could craft queries which, under some circumstances, might disclose values from that column in error messages. An attacker could use this flaw to obtain information stored in a column they are allowed to write but not read.
CVE-2021-3393
An information leak was discovered in postgresql in versions before 13.2, before 12.6 and before 11.11. A user having UPDATE permission but not SELECT permission to a particular column could craft queries which, under some circumstances, might disclose values from that column in error messages. An attacker could use this flaw to obtain information stored in a column they are allowed to write but not read.
CVE-2021-3393
An information leak was discovered in postgresql in versions before 13 ...
ALT-PU-2021-1822
ALT-PU-2021-1822: package `postgresql10` update to version 10.17-alt1
ALT-PU-2021-1821
ALT-PU-2021-1821: package `postgresql9.6` update to version 9.6.22-alt1
openSUSE-SU-2021:0423-1
Security update for postgresql12
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-f47v-jjrp-x56x A flaw was found in postgresql. Using an UPDATE ... RETURNING command on a purpose-crafted table, an authenticated database user could read arbitrary bytes of server memory. The highest threat from this vulnerability is to data confidentiality. | CVSS3: 6.5 | 2% Низкий | больше 4 лет назад |
 | BDU:2021-02774 Уязвимость реализации команды UPDATE ... RETURNING системы управления базами данных PostgreSQL, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации | CVSS3: 7.7 | 2% Низкий | больше 5 лет назад |
 | openSUSE-SU-2021:1970-1 Security update for postgresql10 | больше 5 лет назад | ||
| openSUSE-SU-2021:0894-1 Security update for postgresql10 | больше 5 лет назад | ||
| SUSE-SU-2021:3481-1 Security update for postgresql10 | около 5 лет назад | ||
| SUSE-SU-2021:2777-1 Security update for postgresql10 | около 5 лет назад | ||
| SUSE-SU-2021:1970-1 Security update for postgresql10 | больше 5 лет назад | ||
| SUSE-SU-2021:1782-1 Security update for postgresql10 | больше 5 лет назад | ||
 | RLSA-2021:2361 Important: postgresql:10 security update | больше 5 лет назад | ||
| RLSA-2021:2360 Important: postgresql:9.6 security update | больше 5 лет назад | ||
| ELSA-2021-9428 ELSA-2021-9428: rh-postgresql10-postgresql security update (IMPORTANT) | около 5 лет назад | ||
| ELSA-2021-2361 ELSA-2021-2361: postgresql:10 security update (IMPORTANT) | больше 5 лет назад | ||
| ELSA-2021-2360 ELSA-2021-2360: postgresql:9.6 security update (IMPORTANT) | больше 5 лет назад | ||
 | CVE-2021-3393 An information leak was discovered in postgresql in versions before 13.2, before 12.6 and before 11.11. A user having UPDATE permission but not SELECT permission to a particular column could craft queries which, under some circumstances, might disclose values from that column in error messages. An attacker could use this flaw to obtain information stored in a column they are allowed to write but not read. | CVSS3: 4.3 | 1% Низкий | больше 5 лет назад |
 | CVE-2021-3393 An information leak was discovered in postgresql in versions before 13.2, before 12.6 and before 11.11. A user having UPDATE permission but not SELECT permission to a particular column could craft queries which, under some circumstances, might disclose values from that column in error messages. An attacker could use this flaw to obtain information stored in a column they are allowed to write but not read. | CVSS3: 3.1 | 1% Низкий | больше 5 лет назад |
 | CVE-2021-3393 An information leak was discovered in postgresql in versions before 13.2, before 12.6 and before 11.11. A user having UPDATE permission but not SELECT permission to a particular column could craft queries which, under some circumstances, might disclose values from that column in error messages. An attacker could use this flaw to obtain information stored in a column they are allowed to write but not read. | CVSS3: 4.3 | 1% Низкий | больше 5 лет назад |
| CVE-2021-3393 An information leak was discovered in postgresql in versions before 13 ... | CVSS3: 4.3 | 1% Низкий | больше 5 лет назад |
| ALT-PU-2021-1822 ALT-PU-2021-1822: package `postgresql10` update to version 10.17-alt1 | CVSS3: 8.8 | больше 5 лет назад | |
| ALT-PU-2021-1821 ALT-PU-2021-1821: package `postgresql9.6` update to version 9.6.22-alt1 | CVSS3: 8.8 | больше 5 лет назад | |
| openSUSE-SU-2021:0423-1 Security update for postgresql12 | 1% Низкий | больше 5 лет назад |
Уязвимостей на страницу