Поиск уязвимостей
Количество 33
Количество 33
BDU:2020-05465
Уязвимость компонента core server системы управления базами данных PostgreSQL, позволяющая нарушителю оказать влияние на целостность, доступность и конфиденциальность данных
ALT-PU-2020-3316
ALT-PU-2020-3316: package `postgresql12` update to version 12.5-alt1
ALT-PU-2020-3315
ALT-PU-2020-3315: package `postgresql11` update to version 11.10-alt1
ALT-PU-2020-3314
ALT-PU-2020-3314: package `postgresql10` update to version 10.15-alt1
ALT-PU-2020-3313
ALT-PU-2020-3313: package `postgresql9.6` update to version 9.6.20-alt1
ALT-PU-2020-3312
ALT-PU-2020-3312: package `postgresql9.5` update to version 9.5.24-alt1
ALT-PU-2020-3311
ALT-PU-2020-3311: package `postgresql13` update to version 13.1-alt1
CVE-2020-25695
A flaw was found in PostgreSQL versions before 13.1, before 12.5, before 11.10, before 10.15, before 9.6.20 and before 9.5.24. An attacker having permission to create non-temporary objects in at least one schema can execute arbitrary SQL functions under the identity of a superuser. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
CVE-2020-25695
A flaw was found in PostgreSQL versions before 13.1, before 12.5, before 11.10, before 10.15, before 9.6.20 and before 9.5.24. An attacker having permission to create non-temporary objects in at least one schema can execute arbitrary SQL functions under the identity of a superuser. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
CVE-2020-25695
A flaw was found in PostgreSQL versions before 13.1, before 12.5, before 11.10, before 10.15, before 9.6.20 and before 9.5.24. An attacker having permission to create non-temporary objects in at least one schema can execute arbitrary SQL functions under the identity of a superuser. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
CVE-2020-25695
A flaw was found in PostgreSQL versions before 13.1 before 12.5 before 11.10 before 10.15 before 9.6.20 and before 9.5.24. An attacker having permission to create non-temporary objects in at least one schema can execute arbitrary SQL functions under the identity of a superuser. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
CVE-2020-25695
A flaw was found in PostgreSQL versions before 13.1, before 12.5, befo ...
GHSA-xgxp-9x8p-gcw4
SQL Injection
openSUSE-SU-2021:0337-1
Security update for postgresql, postgresql13
openSUSE-SU-2020:2029-1
Security update for postgresql12
openSUSE-SU-2020:2028-1
Security update for postgresql10
openSUSE-SU-2020:2019-1
Security update for postgresql10
openSUSE-SU-2020:2018-1
Security update for postgresql12
SUSE-SU-2021:0217-1
Security update for postgresql, postgresql12, postgresql13
SUSE-SU-2021:0175-1
Security update for postgresql, postgresql13
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2020-05465 Уязвимость компонента core server системы управления базами данных PostgreSQL, позволяющая нарушителю оказать влияние на целостность, доступность и конфиденциальность данных | CVSS3: 9.8 | 46% Средний | почти 6 лет назад |
| ALT-PU-2020-3316 ALT-PU-2020-3316: package `postgresql12` update to version 12.5-alt1 | CVSS3: 9.8 | почти 6 лет назад | |
| ALT-PU-2020-3315 ALT-PU-2020-3315: package `postgresql11` update to version 11.10-alt1 | CVSS3: 9.8 | почти 6 лет назад | |
| ALT-PU-2020-3314 ALT-PU-2020-3314: package `postgresql10` update to version 10.15-alt1 | CVSS3: 9.8 | почти 6 лет назад | |
| ALT-PU-2020-3313 ALT-PU-2020-3313: package `postgresql9.6` update to version 9.6.20-alt1 | CVSS3: 9.8 | почти 6 лет назад | |
| ALT-PU-2020-3312 ALT-PU-2020-3312: package `postgresql9.5` update to version 9.5.24-alt1 | CVSS3: 9.8 | почти 6 лет назад | |
| ALT-PU-2020-3311 ALT-PU-2020-3311: package `postgresql13` update to version 13.1-alt1 | CVSS3: 9.8 | почти 6 лет назад | |
 | CVE-2020-25695 A flaw was found in PostgreSQL versions before 13.1, before 12.5, before 11.10, before 10.15, before 9.6.20 and before 9.5.24. An attacker having permission to create non-temporary objects in at least one schema can execute arbitrary SQL functions under the identity of a superuser. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. | CVSS3: 8.8 | 46% Средний | почти 6 лет назад |
 | CVE-2020-25695 A flaw was found in PostgreSQL versions before 13.1, before 12.5, before 11.10, before 10.15, before 9.6.20 and before 9.5.24. An attacker having permission to create non-temporary objects in at least one schema can execute arbitrary SQL functions under the identity of a superuser. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. | CVSS3: 8.8 | 46% Средний | почти 6 лет назад |
 | CVE-2020-25695 A flaw was found in PostgreSQL versions before 13.1, before 12.5, before 11.10, before 10.15, before 9.6.20 and before 9.5.24. An attacker having permission to create non-temporary objects in at least one schema can execute arbitrary SQL functions under the identity of a superuser. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. | CVSS3: 8.8 | 46% Средний | почти 6 лет назад |
 | CVE-2020-25695 A flaw was found in PostgreSQL versions before 13.1 before 12.5 before 11.10 before 10.15 before 9.6.20 and before 9.5.24. An attacker having permission to create non-temporary objects in at least one schema can execute arbitrary SQL functions under the identity of a superuser. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. | CVSS3: 8.8 | 46% Средний | почти 6 лет назад |
| CVE-2020-25695 A flaw was found in PostgreSQL versions before 13.1, before 12.5, befo ... | CVSS3: 8.8 | 46% Средний | почти 6 лет назад |
| GHSA-xgxp-9x8p-gcw4 SQL Injection | CVSS3: 8.8 | 46% Средний | больше 4 лет назад |
 | openSUSE-SU-2021:0337-1 Security update for postgresql, postgresql13 | больше 5 лет назад | ||
| openSUSE-SU-2020:2029-1 Security update for postgresql12 | почти 6 лет назад | ||
| openSUSE-SU-2020:2028-1 Security update for postgresql10 | почти 6 лет назад | ||
| openSUSE-SU-2020:2019-1 Security update for postgresql10 | почти 6 лет назад | ||
| openSUSE-SU-2020:2018-1 Security update for postgresql12 | почти 6 лет назад | ||
| SUSE-SU-2021:0217-1 Security update for postgresql, postgresql12, postgresql13 | почти 6 лет назад | ||
| SUSE-SU-2021:0175-1 Security update for postgresql, postgresql13 | почти 6 лет назад |
Уязвимостей на страницу