Количество 12
Количество 12
GHSA-9crw-q654-rwgr
SQL injection in PostgreSQL pg_createsubscriber allows an attacker with pg_create_subscription rights to execute arbitrary SQL as a superuser. The attack takes effect when pg_createsubscriber next runs. Within major versions 17 and 18, minor versions before PostgreSQL 18.4 and 17.10 are affected. Versions before PostgreSQL 17 are unaffected.
CVE-2026-6476
SQL injection in PostgreSQL pg_createsubscriber allows an attacker with pg_create_subscription rights to execute arbitrary SQL as a superuser. The attack takes effect when pg_createsubscriber next runs. Within major versions 17 and 18, minor versions before PostgreSQL 18.4 and 17.10 are affected. Versions before PostgreSQL 17 are unaffected.
CVE-2026-6476
SQL injection in PostgreSQL pg_createsubscriber allows an attacker with pg_create_subscription rights to execute arbitrary SQL as a superuser. The attack takes effect when pg_createsubscriber next runs. Within major versions 17 and 18, minor versions before PostgreSQL 18.4 and 17.10 are affected. Versions before PostgreSQL 17 are unaffected.
CVE-2026-6476
SQL injection in PostgreSQL pg_createsubscriber allows an attacker wit ...
BDU:2026-07099
Уязвимость функции pg_createsubscriber системы управления базами данных PostgreSQL, позволяющая нарушителю выполнять произвольные SQL-запросы
openSUSE-SU-2026:20970-1
Security update for postgresql17
SUSE-SU-2026:2303-1
Security update for postgresql17
SUSE-SU-2026:1943-1
Security update for postgresql17
openSUSE-SU-2026:20901-1
Security update for postgresql18
SUSE-SU-2026:1946-1
Security update for postgresql18
SUSE-SU-2026:1945-1
Security update for postgresql18
SUSE-SU-2026:1944-1
Security update for postgresql18
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-9crw-q654-rwgr SQL injection in PostgreSQL pg_createsubscriber allows an attacker with pg_create_subscription rights to execute arbitrary SQL as a superuser. The attack takes effect when pg_createsubscriber next runs. Within major versions 17 and 18, minor versions before PostgreSQL 18.4 and 17.10 are affected. Versions before PostgreSQL 17 are unaffected. | CVSS3: 7.2 | 0% Низкий | 3 месяца назад |
 | CVE-2026-6476 SQL injection in PostgreSQL pg_createsubscriber allows an attacker with pg_create_subscription rights to execute arbitrary SQL as a superuser. The attack takes effect when pg_createsubscriber next runs. Within major versions 17 and 18, minor versions before PostgreSQL 18.4 and 17.10 are affected. Versions before PostgreSQL 17 are unaffected. | CVSS3: 7.2 | 0% Низкий | 3 месяца назад |
 | CVE-2026-6476 SQL injection in PostgreSQL pg_createsubscriber allows an attacker with pg_create_subscription rights to execute arbitrary SQL as a superuser. The attack takes effect when pg_createsubscriber next runs. Within major versions 17 and 18, minor versions before PostgreSQL 18.4 and 17.10 are affected. Versions before PostgreSQL 17 are unaffected. | CVSS3: 7.2 | 0% Низкий | 3 месяца назад |
| CVE-2026-6476 SQL injection in PostgreSQL pg_createsubscriber allows an attacker wit ... | CVSS3: 7.2 | 0% Низкий | 3 месяца назад |
 | BDU:2026-07099 Уязвимость функции pg_createsubscriber системы управления базами данных PostgreSQL, позволяющая нарушителю выполнять произвольные SQL-запросы | CVSS3: 7.2 | 0% Низкий | 3 месяца назад |
 | openSUSE-SU-2026:20970-1 Security update for postgresql17 | около 1 месяца назад | ||
| SUSE-SU-2026:2303-1 Security update for postgresql17 | около 2 месяцев назад | ||
| SUSE-SU-2026:1943-1 Security update for postgresql17 | 2 месяца назад | ||
| openSUSE-SU-2026:20901-1 Security update for postgresql18 | около 2 месяцев назад | ||
| SUSE-SU-2026:1946-1 Security update for postgresql18 | 2 месяца назад | ||
| SUSE-SU-2026:1945-1 Security update for postgresql18 | 2 месяца назад | ||
| SUSE-SU-2026:1944-1 Security update for postgresql18 | 2 месяца назад |
Уязвимостей на страницу