Поиск уязвимостей
Количество 161
Количество 161
ROS-20260708-80-0009
Уязвимость postgresql17-1c
ROS-20260708-80-0008
Уязвимость postgresql17
ROS-20260708-80-0007
Уязвимость postgresql
ROS-20260708-80-0006
Уязвимость postgresql16
ROS-20260708-80-0005
Уязвимость postgresql15-1c
ROS-20260708-80-0004
Уязвимость postgresql15
ROS-20260708-80-0002
Уязвимость postgresql-1c
ROS-20260708-80-0001
Уязвимость postgresql14
ROS-20260708-73-0082
Уязвимость postgresql16
ROS-20260708-73-0009
Уязвимость postgresql18-1c
ROS-20260708-73-0008
Уязвимость postgresql18
ROS-20260708-73-0007
Уязвимость postgresql17-1c
ROS-20260708-73-0006
Уязвимость postgresql17
ROS-20260708-73-0005
Уязвимость postgresql15-1c
ROS-20260708-73-0004
Уязвимость postgresql15
ROS-20260708-73-0003
Уязвимость postgresql-1c
ROS-20260708-73-0002
Уязвимость postgresql14
CVE-2026-6475
Symlink following in PostgreSQL pg_basebackup plain format and in pg_rewind allows an origin superuser to overwrite local files, e.g. /var/lib/postgres/.bashrc, that hijack the operating system account. It will remain the case that starting the server after these commands implicitly trusts the origin superuser, due to features like shared_preload_libraries. Hence, the attack has practical implications only if one takes relevant action between these commands and server start, like moving the files to a different VM or snapshotting the VM. Versions before PostgreSQL 18.4, 17.10, 16.14, 15.18, and 14.23 are affected.
CVE-2026-6475
Symlink following in PostgreSQL pg_basebackup plain format and in pg_rewind allows an origin superuser to overwrite local files, e.g. /var/lib/postgres/.bashrc, that hijack the operating system account. It will remain the case that starting the server after these commands implicitly trusts the origin superuser, due to features like shared_preload_libraries. Hence, the attack has practical implications only if one takes relevant action between these commands and server start, like moving the files to a different VM or snapshotting the VM. Versions before PostgreSQL 18.4, 17.10, 16.14, 15.18, and 14.23 are affected.
CVE-2026-6475
Symlink following in PostgreSQL pg_basebackup plain format and in pg_rewind allows an origin superuser to overwrite local files, e.g. /var/lib/postgres/.bashrc, that hijack the operating system account. It will remain the case that starting the server after these commands implicitly trusts the origin superuser, due to features like shared_preload_libraries. Hence, the attack has practical implications only if one takes relevant action between these commands and server start, like moving the files to a different VM or snapshotting the VM. Versions before PostgreSQL 18.4, 17.10, 16.14, 15.18, and 14.23 are affected.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | ROS-20260708-80-0009 Уязвимость postgresql17-1c | CVSS3: 8.8 | 1% Низкий | 4 месяца назад |
| ROS-20260708-80-0008 Уязвимость postgresql17 | CVSS3: 8.8 | 1% Низкий | 4 месяца назад |
| ROS-20260708-80-0007 Уязвимость postgresql | CVSS3: 8.8 | 1% Низкий | 4 месяца назад |
| ROS-20260708-80-0006 Уязвимость postgresql16 | CVSS3: 8.8 | 1% Низкий | 4 месяца назад |
| ROS-20260708-80-0005 Уязвимость postgresql15-1c | CVSS3: 8.8 | 1% Низкий | 4 месяца назад |
| ROS-20260708-80-0004 Уязвимость postgresql15 | CVSS3: 8.8 | 1% Низкий | 4 месяца назад |
| ROS-20260708-80-0002 Уязвимость postgresql-1c | CVSS3: 8.8 | 1% Низкий | 4 месяца назад |
| ROS-20260708-80-0001 Уязвимость postgresql14 | CVSS3: 8.8 | 1% Низкий | 4 месяца назад |
| ROS-20260708-73-0082 Уязвимость postgresql16 | CVSS3: 8.8 | 1% Низкий | 4 месяца назад |
| ROS-20260708-73-0009 Уязвимость postgresql18-1c | CVSS3: 8.8 | 1% Низкий | 4 месяца назад |
| ROS-20260708-73-0008 Уязвимость postgresql18 | CVSS3: 8.8 | 1% Низкий | 4 месяца назад |
| ROS-20260708-73-0007 Уязвимость postgresql17-1c | CVSS3: 8.8 | 1% Низкий | 4 месяца назад |
| ROS-20260708-73-0006 Уязвимость postgresql17 | CVSS3: 8.8 | 1% Низкий | 4 месяца назад |
| ROS-20260708-73-0005 Уязвимость postgresql15-1c | CVSS3: 8.8 | 1% Низкий | 4 месяца назад |
| ROS-20260708-73-0004 Уязвимость postgresql15 | CVSS3: 8.8 | 1% Низкий | 4 месяца назад |
| ROS-20260708-73-0003 Уязвимость postgresql-1c | CVSS3: 8.8 | 1% Низкий | 4 месяца назад |
| ROS-20260708-73-0002 Уязвимость postgresql14 | CVSS3: 8.8 | 1% Низкий | 4 месяца назад |
 | CVE-2026-6475 Symlink following in PostgreSQL pg_basebackup plain format and in pg_rewind allows an origin superuser to overwrite local files, e.g. /var/lib/postgres/.bashrc, that hijack the operating system account. It will remain the case that starting the server after these commands implicitly trusts the origin superuser, due to features like shared_preload_libraries. Hence, the attack has practical implications only if one takes relevant action between these commands and server start, like moving the files to a different VM or snapshotting the VM. Versions before PostgreSQL 18.4, 17.10, 16.14, 15.18, and 14.23 are affected. | CVSS3: 8.8 | 0% Низкий | 6 месяцев назад |
 | CVE-2026-6475 Symlink following in PostgreSQL pg_basebackup plain format and in pg_rewind allows an origin superuser to overwrite local files, e.g. /var/lib/postgres/.bashrc, that hijack the operating system account. It will remain the case that starting the server after these commands implicitly trusts the origin superuser, due to features like shared_preload_libraries. Hence, the attack has practical implications only if one takes relevant action between these commands and server start, like moving the files to a different VM or snapshotting the VM. Versions before PostgreSQL 18.4, 17.10, 16.14, 15.18, and 14.23 are affected. | CVSS3: 6.7 | 0% Низкий | 6 месяцев назад |
 | CVE-2026-6475 Symlink following in PostgreSQL pg_basebackup plain format and in pg_rewind allows an origin superuser to overwrite local files, e.g. /var/lib/postgres/.bashrc, that hijack the operating system account. It will remain the case that starting the server after these commands implicitly trusts the origin superuser, due to features like shared_preload_libraries. Hence, the attack has practical implications only if one takes relevant action between these commands and server start, like moving the files to a different VM or snapshotting the VM. Versions before PostgreSQL 18.4, 17.10, 16.14, 15.18, and 14.23 are affected. | CVSS3: 8.8 | 0% Низкий | 6 месяцев назад |
Уязвимостей на страницу