Поиск уязвимостей
Количество 67
Количество 67
BDU:2026-11967
Уязвимость функций levenshtein() и levenshtein_less_equal() расширения fuzzystrmatch системы управления базами данных PostgreSQL, позволяющая нарушителю выполнить произвольный код
ROS-20261002-80-0037
Уязвимость postgresql18
ROS-20261002-80-0036
Уязвимость postgresql17
ROS-20261002-80-0035
Уязвимость postgresql16
ROS-20261002-80-0034
Уязвимость postgresql15
ROS-20261002-80-0033
Уязвимость postgresql14
ROS-20261002-80-0032
Уязвимость postgresql
ROS-20261002-73-0030
Уязвимость postgresql18
ROS-20261002-73-0029
Уязвимость postgresql17
ROS-20261002-73-0028
Уязвимость postgresql16
ROS-20261002-73-0027
Уязвимость postgresql15
ROS-20261002-73-0026
Уязвимость postgresql14
CVE-2026-15742
Integer wraparound in PostgreSQL fuzzystrmatch allows a user to direct writes to a huge range of addresses, executing arbitrary code as the operating system user running the database, via extreme inputs to SQL function levenshtein() or levenshtein_less_equal(). Versions before PostgreSQL 18.6, 17.11, 16.15, 15.19, and 14.24 are affected.
CVE-2026-15742
Integer wraparound in PostgreSQL fuzzystrmatch allows a user to direct writes to a huge range of addresses, executing arbitrary code as the operating system user running the database, via extreme inputs to SQL function levenshtein() or levenshtein_less_equal(). Versions before PostgreSQL 18.5, 17.11, 16.15, 15.19, and 14.24 are affected.
CVE-2026-15742
Integer wraparound in PostgreSQL fuzzystrmatch allows a user to direct writes to a huge range of addresses, executing arbitrary code as the operating system user running the database, via extreme inputs to SQL function levenshtein() or levenshtein_less_equal(). Versions before PostgreSQL 18.6, 17.11, 16.15, 15.19, and 14.24 are affected.
CVE-2026-15742
PostgreSQL fuzzystrmatch writes effectively-arbitrary addresses, via integer wraparound
CVE-2026-15742
Integer wraparound in PostgreSQL fuzzystrmatch allows a user to direct ...
GHSA-rvq6-xp6x-5575
Integer wraparound in PostgreSQL fuzzystrmatch allows a user to direct writes to a huge range of addresses, executing arbitrary code as the operating system user running the database, via extreme inputs to SQL function levenshtein() or levenshtein_less_equal(). Versions before PostgreSQL 18.5, 17.11, 16.15, 15.19, and 14.24 are affected.
ALT-PU-2026-13836
ALT-PU-2026-13836: package `postgresql15-1C` update to version 15.18-alt0.p10.2
ALT-PU-2026-13504
ALT-PU-2026-13504: package `postgresql15` update to version 15.19-alt0.p10.1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2026-11967 Уязвимость функций levenshtein() и levenshtein_less_equal() расширения fuzzystrmatch системы управления базами данных PostgreSQL, позволяющая нарушителю выполнить произвольный код | CVSS3: 8.8 | 1% Низкий | 3 месяца назад |
 | ROS-20261002-80-0037 Уязвимость postgresql18 | CVSS3: 8.8 | 1% Низкий | около 1 месяца назад |
| ROS-20261002-80-0036 Уязвимость postgresql17 | CVSS3: 8.8 | 1% Низкий | около 1 месяца назад |
| ROS-20261002-80-0035 Уязвимость postgresql16 | CVSS3: 8.8 | 1% Низкий | около 1 месяца назад |
| ROS-20261002-80-0034 Уязвимость postgresql15 | CVSS3: 8.8 | 1% Низкий | около 1 месяца назад |
| ROS-20261002-80-0033 Уязвимость postgresql14 | CVSS3: 8.8 | 1% Низкий | около 1 месяца назад |
| ROS-20261002-80-0032 Уязвимость postgresql | CVSS3: 8.8 | 1% Низкий | около 1 месяца назад |
| ROS-20261002-73-0030 Уязвимость postgresql18 | CVSS3: 8.8 | 1% Низкий | около 1 месяца назад |
| ROS-20261002-73-0029 Уязвимость postgresql17 | CVSS3: 8.8 | 1% Низкий | около 1 месяца назад |
| ROS-20261002-73-0028 Уязвимость postgresql16 | CVSS3: 8.8 | 1% Низкий | около 1 месяца назад |
| ROS-20261002-73-0027 Уязвимость postgresql15 | CVSS3: 8.8 | 1% Низкий | около 1 месяца назад |
| ROS-20261002-73-0026 Уязвимость postgresql14 | CVSS3: 8.8 | 1% Низкий | около 1 месяца назад |
 | CVE-2026-15742 Integer wraparound in PostgreSQL fuzzystrmatch allows a user to direct writes to a huge range of addresses, executing arbitrary code as the operating system user running the database, via extreme inputs to SQL function levenshtein() or levenshtein_less_equal(). Versions before PostgreSQL 18.6, 17.11, 16.15, 15.19, and 14.24 are affected. | CVSS3: 8.8 | 1% Низкий | 3 месяца назад |
 | CVE-2026-15742 Integer wraparound in PostgreSQL fuzzystrmatch allows a user to direct writes to a huge range of addresses, executing arbitrary code as the operating system user running the database, via extreme inputs to SQL function levenshtein() or levenshtein_less_equal(). Versions before PostgreSQL 18.5, 17.11, 16.15, 15.19, and 14.24 are affected. | CVSS3: 7.5 | 1% Низкий | 3 месяца назад |
 | CVE-2026-15742 Integer wraparound in PostgreSQL fuzzystrmatch allows a user to direct writes to a huge range of addresses, executing arbitrary code as the operating system user running the database, via extreme inputs to SQL function levenshtein() or levenshtein_less_equal(). Versions before PostgreSQL 18.6, 17.11, 16.15, 15.19, and 14.24 are affected. | CVSS3: 8.8 | 1% Низкий | 3 месяца назад |
 | CVE-2026-15742 PostgreSQL fuzzystrmatch writes effectively-arbitrary addresses, via integer wraparound | CVSS3: 8.8 | 1% Низкий | 3 месяца назад |
| CVE-2026-15742 Integer wraparound in PostgreSQL fuzzystrmatch allows a user to direct ... | CVSS3: 8.8 | 1% Низкий | 3 месяца назад |
| GHSA-rvq6-xp6x-5575 Integer wraparound in PostgreSQL fuzzystrmatch allows a user to direct writes to a huge range of addresses, executing arbitrary code as the operating system user running the database, via extreme inputs to SQL function levenshtein() or levenshtein_less_equal(). Versions before PostgreSQL 18.5, 17.11, 16.15, 15.19, and 14.24 are affected. | CVSS3: 8.8 | 1% Низкий | 3 месяца назад |
| ALT-PU-2026-13836 ALT-PU-2026-13836: package `postgresql15-1C` update to version 15.18-alt0.p10.2 | CVSS3: 8.8 | 3 месяца назад | |
| ALT-PU-2026-13504 ALT-PU-2026-13504: package `postgresql15` update to version 15.19-alt0.p10.1 | CVSS3: 8.8 | 3 месяца назад |
Уязвимостей на страницу