Поиск уязвимостей
Количество 79
Количество 79
CVE-2026-6478
Covert timing channel in comparison of MD5-hashed password in PostgreSQL authentication allows an attacker to recover user credentials sufficient to authenticate. This does not affect scram-sha-256 passwords, the default in all supported releases. However, current databases may have MD5-hashed passwords originating in upgrades from PostgreSQL 13 or earlier. Versions before PostgreSQL 18.4, 17.10, 16.14, 15.18, and 14.23 are affected.
CVE-2026-6478
Covert timing channel in comparison of MD5-hashed password in PostgreSQL authentication allows an attacker to recover user credentials sufficient to authenticate. This does not affect scram-sha-256 passwords, the default in all supported releases. However, current databases may have MD5-hashed passwords originating in upgrades from PostgreSQL 13 or earlier. Versions before PostgreSQL 18.4, 17.10, 16.14, 15.18, and 14.23 are affected.
CVE-2026-6478
Covert timing channel in comparison of MD5-hashed password in PostgreSQL authentication allows an attacker to recover user credentials sufficient to authenticate. This does not affect scram-sha-256 passwords, the default in all supported releases. However, current databases may have MD5-hashed passwords originating in upgrades from PostgreSQL 13 or earlier. Versions before PostgreSQL 18.4, 17.10, 16.14, 15.18, and 14.23 are affected.
CVE-2026-6478
PostgreSQL discloses MD5-hashed passwords via covert timing channel
CVE-2026-6478
Covert timing channel in comparison of MD5-hashed password in PostgreS ...
RLSA-2026:28208
Important: postgresql:13 security update
GHSA-r6v6-v5r9-3ggh
Covert timing channel in comparison of MD5-hashed password in PostgreSQL authentication allows an attacker to recover user credentials sufficient to authenticate. This does not affect scram-sha-256 passwords, the default in all supported releases. However, current databases may have MD5-hashed passwords originating in upgrades from PostgreSQL 13 or earlier. Versions before PostgreSQL 18.4, 17.10, 16.14, 15.18, and 14.23 are affected.
ELSA-2026-28208
ELSA-2026-28208: postgresql:13 security update (IMPORTANT)
BDU:2026-07097
Уязвимость системы управления базами данных PostgreSQL, связанная с раскрытием информации на основании временных расхождений, позволяющая нарушителю раскрыть защищаемую информацию
ROS-20260708-80-0031
Уязвимость postgresql18-1c
ROS-20260708-80-0030
Уязвимость postgresql18
ROS-20260708-80-0029
Уязвимость postgresql17-1c
ROS-20260708-80-0028
Уязвимость postgresql17
ROS-20260708-80-0027
Уязвимость postgresql
ROS-20260708-80-0026
Уязвимость postgresql16
ROS-20260708-80-0025
Уязвимость postgresql15-1c
ROS-20260708-80-0024
Уязвимость postgresql15
ROS-20260708-80-0023
Уязвимость postgresql-1c
ROS-20260708-80-0022
Уязвимость postgresql14
ROS-20260708-73-0080
Уязвимость postgresql16
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-6478 Covert timing channel in comparison of MD5-hashed password in PostgreSQL authentication allows an attacker to recover user credentials sufficient to authenticate. This does not affect scram-sha-256 passwords, the default in all supported releases. However, current databases may have MD5-hashed passwords originating in upgrades from PostgreSQL 13 or earlier. Versions before PostgreSQL 18.4, 17.10, 16.14, 15.18, and 14.23 are affected. | CVSS3: 8.2 | 1% Низкий | 6 месяцев назад |
 | CVE-2026-6478 Covert timing channel in comparison of MD5-hashed password in PostgreSQL authentication allows an attacker to recover user credentials sufficient to authenticate. This does not affect scram-sha-256 passwords, the default in all supported releases. However, current databases may have MD5-hashed passwords originating in upgrades from PostgreSQL 13 or earlier. Versions before PostgreSQL 18.4, 17.10, 16.14, 15.18, and 14.23 are affected. | CVSS3: 8.2 | 1% Низкий | 6 месяцев назад |
 | CVE-2026-6478 Covert timing channel in comparison of MD5-hashed password in PostgreSQL authentication allows an attacker to recover user credentials sufficient to authenticate. This does not affect scram-sha-256 passwords, the default in all supported releases. However, current databases may have MD5-hashed passwords originating in upgrades from PostgreSQL 13 or earlier. Versions before PostgreSQL 18.4, 17.10, 16.14, 15.18, and 14.23 are affected. | CVSS3: 8.2 | 1% Низкий | 6 месяцев назад |
 | CVE-2026-6478 PostgreSQL discloses MD5-hashed passwords via covert timing channel | CVSS3: 6.5 | 1% Низкий | 6 месяцев назад |
| CVE-2026-6478 Covert timing channel in comparison of MD5-hashed password in PostgreS ... | CVSS3: 8.2 | 1% Низкий | 6 месяцев назад |
 | RLSA-2026:28208 Important: postgresql:13 security update | 1% Низкий | 5 месяцев назад | |
| GHSA-r6v6-v5r9-3ggh Covert timing channel in comparison of MD5-hashed password in PostgreSQL authentication allows an attacker to recover user credentials sufficient to authenticate. This does not affect scram-sha-256 passwords, the default in all supported releases. However, current databases may have MD5-hashed passwords originating in upgrades from PostgreSQL 13 or earlier. Versions before PostgreSQL 18.4, 17.10, 16.14, 15.18, and 14.23 are affected. | CVSS3: 6.5 | 1% Низкий | 6 месяцев назад |
| ELSA-2026-28208 ELSA-2026-28208: postgresql:13 security update (IMPORTANT) | 1% Низкий | 5 месяцев назад | |
 | BDU:2026-07097 Уязвимость системы управления базами данных PostgreSQL, связанная с раскрытием информации на основании временных расхождений, позволяющая нарушителю раскрыть защищаемую информацию | CVSS3: 6.5 | 1% Низкий | 6 месяцев назад |
 | ROS-20260708-80-0031 Уязвимость postgresql18-1c | CVSS3: 6.5 | 1% Низкий | 4 месяца назад |
| ROS-20260708-80-0030 Уязвимость postgresql18 | CVSS3: 6.5 | 1% Низкий | 4 месяца назад |
| ROS-20260708-80-0029 Уязвимость postgresql17-1c | CVSS3: 6.5 | 1% Низкий | 4 месяца назад |
| ROS-20260708-80-0028 Уязвимость postgresql17 | CVSS3: 6.5 | 1% Низкий | 4 месяца назад |
| ROS-20260708-80-0027 Уязвимость postgresql | CVSS3: 6.5 | 1% Низкий | 4 месяца назад |
| ROS-20260708-80-0026 Уязвимость postgresql16 | CVSS3: 6.5 | 1% Низкий | 4 месяца назад |
| ROS-20260708-80-0025 Уязвимость postgresql15-1c | CVSS3: 6.5 | 1% Низкий | 4 месяца назад |
| ROS-20260708-80-0024 Уязвимость postgresql15 | CVSS3: 6.5 | 1% Низкий | 4 месяца назад |
| ROS-20260708-80-0023 Уязвимость postgresql-1c | CVSS3: 6.5 | 1% Низкий | 4 месяца назад |
| ROS-20260708-80-0022 Уязвимость postgresql14 | CVSS3: 6.5 | 1% Низкий | 4 месяца назад |
| ROS-20260708-73-0080 Уязвимость postgresql16 | CVSS3: 6.5 | 1% Низкий | 4 месяца назад |
Уязвимостей на страницу