Поиск уязвимостей
Количество 37
Количество 37
BDU:2026-11958
Уязвимость подсистемы аутентификации SCRAM системы управления базами данных PostgreSQL, позволяющая нарушителю раскрыть защищаемую информацию
ROS-20261002-80-0134
Уязвимость postgresql18
ROS-20261002-80-0133
Уязвимость postgresql17
ROS-20261002-80-0132
Уязвимость postgresql16
ROS-20261002-80-0131
Уязвимость postgresql
ROS-20261002-73-0111
Уязвимость postgresql18
ROS-20261002-73-0110
Уязвимость postgresql17
ROS-20261002-73-0109
Уязвимость postgresql16
CVE-2026-14672
Observable response discrepancy in PostgreSQL SCRAM authentication allows an unauthenticated user to test the existence of a user via observing the SCRAM iteration count. This requires the probed user to have a non-default scram_iterations count, because the authentication challenge for a nonexistent user reports the default scram_iterations. Within major versions 16-18, minor versions before PostgreSQL 18.6, 17.11, and 16.15 are affected. Versions before PostgreSQL 16 are unaffected.
CVE-2026-14672
Observable response discrepancy in PostgreSQL SCRAM authentication allows an unauthenticated user to test the existence of a user via observing the SCRAM iteration count. This requires the probed user to have a non-default scram_iterations count, because the authentication challenge for a nonexistent user reports the default scram_iterations. Within major versions 16-18, minor versions before PostgreSQL 18.5, 17.11, and 16.15 are affected. Versions before PostgreSQL 16 are unaffected.
CVE-2026-14672
Observable response discrepancy in PostgreSQL SCRAM authentication allows an unauthenticated user to test the existence of a user via observing the SCRAM iteration count. This requires the probed user to have a non-default scram_iterations count, because the authentication challenge for a nonexistent user reports the default scram_iterations. Within major versions 16-18, minor versions before PostgreSQL 18.6, 17.11, and 16.15 are affected. Versions before PostgreSQL 16 are unaffected.
CVE-2026-14672
PostgreSQL observable response discrepancy with non-default scram_iterations provides user existence oracle
CVE-2026-14672
Observable response discrepancy in PostgreSQL SCRAM authentication all ...
GHSA-hp2m-55fj-8mw5
Observable response discrepancy in PostgreSQL SCRAM authentication allows an unauthenticated user to test the existence of a user via observing the SCRAM iteration count. This requires the probed user to have a non-default scram_iterations count, because the authentication challenge for a nonexistent user reports the default scram_iterations. Within major versions 16-18, minor versions before PostgreSQL 18.5, 17.11, and 16.15 are affected. Versions before PostgreSQL 16 are unaffected.
ALT-PU-2026-13836
ALT-PU-2026-13836: package `postgresql15-1C` update to version 15.18-alt0.p10.2
ALT-PU-2026-13504
ALT-PU-2026-13504: package `postgresql15` update to version 15.19-alt0.p10.1
ALT-PU-2026-13503
ALT-PU-2026-13503: package `postgresql16` update to version 16.15-alt0.p10.1
ALT-PU-2026-13502
ALT-PU-2026-13502: package `postgresql14` update to version 14.24-alt0.p10.1
ALT-PU-2026-13500
ALT-PU-2026-13500: package `postgresql17` update to version 17.11-alt0.p10.1
ALT-PU-2026-13497
ALT-PU-2026-13497: package `postgresql18-1C` update to version 18.4-alt5
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2026-11958 Уязвимость подсистемы аутентификации SCRAM системы управления базами данных PostgreSQL, позволяющая нарушителю раскрыть защищаемую информацию | CVSS3: 5.3 | 0% Низкий | 3 месяца назад |
 | ROS-20261002-80-0134 Уязвимость postgresql18 | CVSS3: 5.3 | 0% Низкий | около 1 месяца назад |
| ROS-20261002-80-0133 Уязвимость postgresql17 | CVSS3: 5.3 | 0% Низкий | около 1 месяца назад |
| ROS-20261002-80-0132 Уязвимость postgresql16 | CVSS3: 5.3 | 0% Низкий | около 1 месяца назад |
| ROS-20261002-80-0131 Уязвимость postgresql | CVSS3: 5.3 | 0% Низкий | около 1 месяца назад |
| ROS-20261002-73-0111 Уязвимость postgresql18 | CVSS3: 5.3 | 0% Низкий | около 1 месяца назад |
| ROS-20261002-73-0110 Уязвимость postgresql17 | CVSS3: 5.3 | 0% Низкий | около 1 месяца назад |
| ROS-20261002-73-0109 Уязвимость postgresql16 | CVSS3: 5.3 | 0% Низкий | около 1 месяца назад |
 | CVE-2026-14672 Observable response discrepancy in PostgreSQL SCRAM authentication allows an unauthenticated user to test the existence of a user via observing the SCRAM iteration count. This requires the probed user to have a non-default scram_iterations count, because the authentication challenge for a nonexistent user reports the default scram_iterations. Within major versions 16-18, minor versions before PostgreSQL 18.6, 17.11, and 16.15 are affected. Versions before PostgreSQL 16 are unaffected. | CVSS3: 5.3 | 0% Низкий | 3 месяца назад |
 | CVE-2026-14672 Observable response discrepancy in PostgreSQL SCRAM authentication allows an unauthenticated user to test the existence of a user via observing the SCRAM iteration count. This requires the probed user to have a non-default scram_iterations count, because the authentication challenge for a nonexistent user reports the default scram_iterations. Within major versions 16-18, minor versions before PostgreSQL 18.5, 17.11, and 16.15 are affected. Versions before PostgreSQL 16 are unaffected. | CVSS3: 5.3 | 0% Низкий | 3 месяца назад |
 | CVE-2026-14672 Observable response discrepancy in PostgreSQL SCRAM authentication allows an unauthenticated user to test the existence of a user via observing the SCRAM iteration count. This requires the probed user to have a non-default scram_iterations count, because the authentication challenge for a nonexistent user reports the default scram_iterations. Within major versions 16-18, minor versions before PostgreSQL 18.6, 17.11, and 16.15 are affected. Versions before PostgreSQL 16 are unaffected. | CVSS3: 5.3 | 0% Низкий | 3 месяца назад |
 | CVE-2026-14672 PostgreSQL observable response discrepancy with non-default scram_iterations provides user existence oracle | CVSS3: 5.3 | 0% Низкий | 3 месяца назад |
| CVE-2026-14672 Observable response discrepancy in PostgreSQL SCRAM authentication all ... | CVSS3: 5.3 | 0% Низкий | 3 месяца назад |
| GHSA-hp2m-55fj-8mw5 Observable response discrepancy in PostgreSQL SCRAM authentication allows an unauthenticated user to test the existence of a user via observing the SCRAM iteration count. This requires the probed user to have a non-default scram_iterations count, because the authentication challenge for a nonexistent user reports the default scram_iterations. Within major versions 16-18, minor versions before PostgreSQL 18.5, 17.11, and 16.15 are affected. Versions before PostgreSQL 16 are unaffected. | CVSS3: 5.3 | 0% Низкий | 3 месяца назад |
| ALT-PU-2026-13836 ALT-PU-2026-13836: package `postgresql15-1C` update to version 15.18-alt0.p10.2 | CVSS3: 8.8 | 2 месяца назад | |
| ALT-PU-2026-13504 ALT-PU-2026-13504: package `postgresql15` update to version 15.19-alt0.p10.1 | CVSS3: 8.8 | 3 месяца назад | |
| ALT-PU-2026-13503 ALT-PU-2026-13503: package `postgresql16` update to version 16.15-alt0.p10.1 | CVSS3: 8.8 | 3 месяца назад | |
| ALT-PU-2026-13502 ALT-PU-2026-13502: package `postgresql14` update to version 14.24-alt0.p10.1 | CVSS3: 8.8 | 3 месяца назад | |
| ALT-PU-2026-13500 ALT-PU-2026-13500: package `postgresql17` update to version 17.11-alt0.p10.1 | CVSS3: 8.8 | 3 месяца назад | |
| ALT-PU-2026-13497 ALT-PU-2026-13497: package `postgresql18-1C` update to version 18.4-alt5 | CVSS3: 8.8 | 3 месяца назад |
Уязвимостей на страницу