Поиск уязвимостей
Количество 88
Количество 88
ROS-20240329-13
Множественные уязвимости postgresql14
ALT-PU-2023-7207
ALT-PU-2023-7207: package `postgresql15-1C` update to version 15.5-alt0.p10.2
ALT-PU-2023-7090
ALT-PU-2023-7090: package `postgresql15` update to version 15.5-alt0.p10.1
ALT-PU-2023-7089
ALT-PU-2023-7089: package `postgresql14` update to version 14.10-alt0.p10.1
ALT-PU-2023-7088
ALT-PU-2023-7088: package `postgresql13` update to version 13.13-alt0.p10.1
ALT-PU-2023-7087
ALT-PU-2023-7087: package `postgresql12` update to version 12.17-alt0.p10.1
ALT-PU-2023-7086
ALT-PU-2023-7086: package `postgresql11` update to version 11.22-alt0.p10.1
ALT-PU-2023-7062
ALT-PU-2023-7062: package `postgresql14` update to version 14.10-alt1
ALT-PU-2023-7061
ALT-PU-2023-7061: package `postgresql16` update to version 16.1-alt1
ALT-PU-2023-7060
ALT-PU-2023-7060: package `postgresql15` update to version 15.5-alt1
ALT-PU-2023-7059
ALT-PU-2023-7059: package `postgresql12` update to version 12.17-alt1
ALT-PU-2023-7058
ALT-PU-2023-7058: package `postgresql15-1C` update to version 15.5-alt1
ALT-PU-2023-7057
ALT-PU-2023-7057: package `postgresql13` update to version 13.13-alt1
CVE-2023-39417
IN THE EXTENSION SCRIPT, a SQL Injection vulnerability was found in PostgreSQL if it uses @extowner@, @extschema@, or @extschema:...@ inside a quoting construct (dollar quoting, '', or ""). If an administrator has installed files of a vulnerable, trusted, non-bundled extension, an attacker with database-level CREATE privilege can execute arbitrary code as the bootstrap superuser.
CVE-2023-39417
IN THE EXTENSION SCRIPT, a SQL Injection vulnerability was found in PostgreSQL if it uses @extowner@, @extschema@, or @extschema:...@ inside a quoting construct (dollar quoting, '', or ""). If an administrator has installed files of a vulnerable, trusted, non-bundled extension, an attacker with database-level CREATE privilege can execute arbitrary code as the bootstrap superuser.
CVE-2023-39417
IN THE EXTENSION SCRIPT, a SQL Injection vulnerability was found in PostgreSQL if it uses @extowner@, @extschema@, or @extschema:...@ inside a quoting construct (dollar quoting, '', or ""). If an administrator has installed files of a vulnerable, trusted, non-bundled extension, an attacker with database-level CREATE privilege can execute arbitrary code as the bootstrap superuser.
CVE-2023-39417
Postgresql: extension script @substitutions@ within quoting allow sql injection
CVE-2023-39417
IN THE EXTENSION SCRIPT, a SQL Injection vulnerability was found in Po ...
ROS-20240329-14
Множественные уязвимости postgresql15
SUSE-SU-2023:3384-1
Security update for postgresql15
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | ROS-20240329-13 Множественные уязвимости postgresql14 | CVSS3: 8.8 | больше 2 лет назад | |
| ALT-PU-2023-7207 ALT-PU-2023-7207: package `postgresql15-1C` update to version 15.5-alt0.p10.2 | CVSS3: 8.8 | почти 3 года назад | |
| ALT-PU-2023-7090 ALT-PU-2023-7090: package `postgresql15` update to version 15.5-alt0.p10.1 | CVSS3: 8.8 | почти 3 года назад | |
| ALT-PU-2023-7089 ALT-PU-2023-7089: package `postgresql14` update to version 14.10-alt0.p10.1 | CVSS3: 8.8 | почти 3 года назад | |
| ALT-PU-2023-7088 ALT-PU-2023-7088: package `postgresql13` update to version 13.13-alt0.p10.1 | CVSS3: 8.8 | почти 3 года назад | |
| ALT-PU-2023-7087 ALT-PU-2023-7087: package `postgresql12` update to version 12.17-alt0.p10.1 | CVSS3: 8.8 | почти 3 года назад | |
| ALT-PU-2023-7086 ALT-PU-2023-7086: package `postgresql11` update to version 11.22-alt0.p10.1 | CVSS3: 8.8 | почти 3 года назад | |
| ALT-PU-2023-7062 ALT-PU-2023-7062: package `postgresql14` update to version 14.10-alt1 | CVSS3: 8.8 | около 3 лет назад | |
| ALT-PU-2023-7061 ALT-PU-2023-7061: package `postgresql16` update to version 16.1-alt1 | CVSS3: 8.8 | около 3 лет назад | |
| ALT-PU-2023-7060 ALT-PU-2023-7060: package `postgresql15` update to version 15.5-alt1 | CVSS3: 8.8 | около 3 лет назад | |
| ALT-PU-2023-7059 ALT-PU-2023-7059: package `postgresql12` update to version 12.17-alt1 | CVSS3: 8.8 | около 3 лет назад | |
| ALT-PU-2023-7058 ALT-PU-2023-7058: package `postgresql15-1C` update to version 15.5-alt1 | CVSS3: 8.8 | около 3 лет назад | |
| ALT-PU-2023-7057 ALT-PU-2023-7057: package `postgresql13` update to version 13.13-alt1 | CVSS3: 8.8 | около 3 лет назад | |
 | CVE-2023-39417 IN THE EXTENSION SCRIPT, a SQL Injection vulnerability was found in PostgreSQL if it uses @extowner@, @extschema@, or @extschema:...@ inside a quoting construct (dollar quoting, '', or ""). If an administrator has installed files of a vulnerable, trusted, non-bundled extension, an attacker with database-level CREATE privilege can execute arbitrary code as the bootstrap superuser. | CVSS3: 8.8 | 2% Низкий | около 3 лет назад |
 | CVE-2023-39417 IN THE EXTENSION SCRIPT, a SQL Injection vulnerability was found in PostgreSQL if it uses @extowner@, @extschema@, or @extschema:...@ inside a quoting construct (dollar quoting, '', or ""). If an administrator has installed files of a vulnerable, trusted, non-bundled extension, an attacker with database-level CREATE privilege can execute arbitrary code as the bootstrap superuser. | CVSS3: 7.5 | 2% Низкий | около 3 лет назад |
 | CVE-2023-39417 IN THE EXTENSION SCRIPT, a SQL Injection vulnerability was found in PostgreSQL if it uses @extowner@, @extschema@, or @extschema:...@ inside a quoting construct (dollar quoting, '', or ""). If an administrator has installed files of a vulnerable, trusted, non-bundled extension, an attacker with database-level CREATE privilege can execute arbitrary code as the bootstrap superuser. | CVSS3: 8.8 | 2% Низкий | около 3 лет назад |
 | CVE-2023-39417 Postgresql: extension script @substitutions@ within quoting allow sql injection | CVSS3: 8.8 | 2% Низкий | около 3 лет назад |
| CVE-2023-39417 IN THE EXTENSION SCRIPT, a SQL Injection vulnerability was found in Po ... | CVSS3: 8.8 | 2% Низкий | около 3 лет назад |
| ROS-20240329-14 Множественные уязвимости postgresql15 | CVSS3: 8.8 | больше 2 лет назад | |
 | SUSE-SU-2023:3384-1 Security update for postgresql15 | 2% Низкий | около 3 лет назад |
Уязвимостей на страницу