Количество 25
Количество 25
CVE-2023-39417
IN THE EXTENSION SCRIPT, a SQL Injection vulnerability was found in PostgreSQL if it uses @extowner@, @extschema@, or @extschema:...@ inside a quoting construct (dollar quoting, '', or ""). If an administrator has installed files of a vulnerable, trusted, non-bundled extension, an attacker with database-level CREATE privilege can execute arbitrary code as the bootstrap superuser.
CVE-2023-39417
IN THE EXTENSION SCRIPT, a SQL Injection vulnerability was found in PostgreSQL if it uses @extowner@, @extschema@, or @extschema:...@ inside a quoting construct (dollar quoting, '', or ""). If an administrator has installed files of a vulnerable, trusted, non-bundled extension, an attacker with database-level CREATE privilege can execute arbitrary code as the bootstrap superuser.
CVE-2023-39417
IN THE EXTENSION SCRIPT, a SQL Injection vulnerability was found in PostgreSQL if it uses @extowner@, @extschema@, or @extschema:...@ inside a quoting construct (dollar quoting, '', or ""). If an administrator has installed files of a vulnerable, trusted, non-bundled extension, an attacker with database-level CREATE privilege can execute arbitrary code as the bootstrap superuser.
CVE-2023-39417
Postgresql: extension script @substitutions@ within quoting allow sql injection
CVE-2023-39417
IN THE EXTENSION SCRIPT, a SQL Injection vulnerability was found in Po ...
SUSE-SU-2023:3384-1
Security update for postgresql15
SUSE-SU-2023:3348-1
Security update for postgresql15
SUSE-SU-2023:3346-1
Security update for postgresql12
SUSE-SU-2023:3345-1
Security update for postgresql15
SUSE-SU-2023:3344-1
Security update for postgresql15
SUSE-SU-2023:3343-1
Security update for postgresql15
SUSE-SU-2023:3341-1
Security update for postgresql12
GHSA-jx3x-j983-74m3
IN THE EXTENSION SCRIPT, a SQL Injection vulnerability was found in PostgreSQL if it uses @extowner@, @extschema@, or @extschema:...@ inside a quoting construct (dollar quoting, '', or ""). If an administrator has installed files of a vulnerable, trusted, non-bundled extension, an attacker with database-level CREATE privilege can execute arbitrary code as the bootstrap superuser.
BDU:2023-04767
Уязвимость системы управления базами данных PostgreSQL, связанная с возможностью SQL-инъекций в расширениях, позволяющая нарушителю выполнять произвольный SQL-запрос к базе данных
SUSE-SU-2023:3347-1
Security update for postgresql15
SUSE-SU-2023:3342-1
Security update for postgresql15
ROS-20231009-03
Уязвимость PostgreSQL 15
ROS-20231009-01
Уязвимость PostgreSQL 14
ELSA-2023-7784
ELSA-2023-7784: postgresql security update (IMPORTANT)
ELSA-2023-7714
ELSA-2023-7714: postgresql:12 security update (IMPORTANT)
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2023-39417 IN THE EXTENSION SCRIPT, a SQL Injection vulnerability was found in PostgreSQL if it uses @extowner@, @extschema@, or @extschema:...@ inside a quoting construct (dollar quoting, '', or ""). If an administrator has installed files of a vulnerable, trusted, non-bundled extension, an attacker with database-level CREATE privilege can execute arbitrary code as the bootstrap superuser. | CVSS3: 7.5 | 1% Низкий | около 2 лет назад |
 | CVE-2023-39417 IN THE EXTENSION SCRIPT, a SQL Injection vulnerability was found in PostgreSQL if it uses @extowner@, @extschema@, or @extschema:...@ inside a quoting construct (dollar quoting, '', or ""). If an administrator has installed files of a vulnerable, trusted, non-bundled extension, an attacker with database-level CREATE privilege can execute arbitrary code as the bootstrap superuser. | CVSS3: 7.5 | 1% Низкий | около 2 лет назад |
 | CVE-2023-39417 IN THE EXTENSION SCRIPT, a SQL Injection vulnerability was found in PostgreSQL if it uses @extowner@, @extschema@, or @extschema:...@ inside a quoting construct (dollar quoting, '', or ""). If an administrator has installed files of a vulnerable, trusted, non-bundled extension, an attacker with database-level CREATE privilege can execute arbitrary code as the bootstrap superuser. | CVSS3: 7.5 | 1% Низкий | около 2 лет назад |
 | CVE-2023-39417 Postgresql: extension script @substitutions@ within quoting allow sql injection | CVSS3: 8.8 | 1% Низкий | около 2 лет назад |
| CVE-2023-39417 IN THE EXTENSION SCRIPT, a SQL Injection vulnerability was found in Po ... | CVSS3: 7.5 | 1% Низкий | около 2 лет назад |
 | SUSE-SU-2023:3384-1 Security update for postgresql15 | 1% Низкий | около 2 лет назад | |
| SUSE-SU-2023:3348-1 Security update for postgresql15 | 1% Низкий | около 2 лет назад | |
| SUSE-SU-2023:3346-1 Security update for postgresql12 | 1% Низкий | около 2 лет назад | |
| SUSE-SU-2023:3345-1 Security update for postgresql15 | 1% Низкий | около 2 лет назад | |
| SUSE-SU-2023:3344-1 Security update for postgresql15 | 1% Низкий | около 2 лет назад | |
| SUSE-SU-2023:3343-1 Security update for postgresql15 | 1% Низкий | около 2 лет назад | |
| SUSE-SU-2023:3341-1 Security update for postgresql12 | 1% Низкий | около 2 лет назад | |
| GHSA-jx3x-j983-74m3 IN THE EXTENSION SCRIPT, a SQL Injection vulnerability was found in PostgreSQL if it uses @extowner@, @extschema@, or @extschema:...@ inside a quoting construct (dollar quoting, '', or ""). If an administrator has installed files of a vulnerable, trusted, non-bundled extension, an attacker with database-level CREATE privilege can execute arbitrary code as the bootstrap superuser. | CVSS3: 7.5 | 1% Низкий | около 2 лет назад |
 | BDU:2023-04767 Уязвимость системы управления базами данных PostgreSQL, связанная с возможностью SQL-инъекций в расширениях, позволяющая нарушителю выполнять произвольный SQL-запрос к базе данных | CVSS3: 7.5 | 1% Низкий | больше 2 лет назад |
| SUSE-SU-2023:3347-1 Security update for postgresql15 | около 2 лет назад | ||
| SUSE-SU-2023:3342-1 Security update for postgresql15 | около 2 лет назад | ||
 | ROS-20231009-03 Уязвимость PostgreSQL 15 | CVSS3: 7.5 | 1% Низкий | около 2 лет назад |
| ROS-20231009-01 Уязвимость PostgreSQL 14 | CVSS3: 7.5 | 1% Низкий | около 2 лет назад |
| ELSA-2023-7784 ELSA-2023-7784: postgresql security update (IMPORTANT) | почти 2 года назад | ||
| ELSA-2023-7714 ELSA-2023-7714: postgresql:12 security update (IMPORTANT) | почти 2 года назад |
Уязвимостей на страницу