Поиск уязвимостей
Количество 63
Количество 63
CVE-2026-15741
SQL injection in PostgreSQL EXTRACT() deparse allows an object owner to execute arbitrary SQL as a superuser via a hostile object definition. Attacks affect expression deparse consumers broadly, including pg_dump, psql commands like \sf, and any similar usage in non-core tools. Versions before PostgreSQL 18.6, 17.11, 16.15, 15.19, and 14.24 are affected.
CVE-2026-15741
SQL injection in PostgreSQL EXTRACT() deparse allows an object owner to execute arbitrary SQL as a superuser via a hostile object definition. Attacks affect expression deparse consumers broadly, including pg_dump, psql commands like \sf, and any similar usage in non-core tools. Versions before PostgreSQL 18.5, 17.11, 16.15, 15.19, and 14.24 are affected.
CVE-2026-15741
SQL injection in PostgreSQL EXTRACT() deparse allows an object owner to execute arbitrary SQL as a superuser via a hostile object definition. Attacks affect expression deparse consumers broadly, including pg_dump, psql commands like \sf, and any similar usage in non-core tools. Versions before PostgreSQL 18.6, 17.11, 16.15, 15.19, and 14.24 are affected.
CVE-2026-15741
PostgreSQL expression deparse allows SQL injection via EXTRACT argument
CVE-2026-15741
SQL injection in PostgreSQL EXTRACT() deparse allows an object owner t ...
GHSA-3v2h-jgrj-9jmm
SQL injection in PostgreSQL EXTRACT() deparse allows an object owner to execute arbitrary SQL as a superuser via a hostile object definition. Attacks affect expression deparse consumers broadly, including pg_dump, psql commands like \sf, and any similar usage in non-core tools. Versions before PostgreSQL 18.5, 17.11, 16.15, 15.19, and 14.24 are affected.
BDU:2026-11966
Уязвимость функции EXTRACT() системы управления базами данных PostgreSQL, позволяющая нарушителю выполнить произвольный код
ROS-20261002-80-0043
Уязвимость postgresql18
ROS-20261002-80-0042
Уязвимость postgresql17
ROS-20261002-80-0041
Уязвимость postgresql16
ROS-20261002-80-0040
Уязвимость postgresql15
ROS-20261002-80-0039
Уязвимость postgresql14
ROS-20261002-80-0038
Уязвимость postgresql
ROS-20261002-73-0035
Уязвимость postgresql18
ROS-20261002-73-0034
Уязвимость postgresql17
ROS-20261002-73-0033
Уязвимость postgresql16
ROS-20261002-73-0032
Уязвимость postgresql15
ROS-20261002-73-0031
Уязвимость postgresql14
RLSA-2026:70186
Important: postgresql16 security update
RLSA-2026:69923
Important: postgresql:15 security update
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-15741 SQL injection in PostgreSQL EXTRACT() deparse allows an object owner to execute arbitrary SQL as a superuser via a hostile object definition. Attacks affect expression deparse consumers broadly, including pg_dump, psql commands like \sf, and any similar usage in non-core tools. Versions before PostgreSQL 18.6, 17.11, 16.15, 15.19, and 14.24 are affected. | CVSS3: 8.8 | 0% Низкий | 3 месяца назад |
 | CVE-2026-15741 SQL injection in PostgreSQL EXTRACT() deparse allows an object owner to execute arbitrary SQL as a superuser via a hostile object definition. Attacks affect expression deparse consumers broadly, including pg_dump, psql commands like \sf, and any similar usage in non-core tools. Versions before PostgreSQL 18.5, 17.11, 16.15, 15.19, and 14.24 are affected. | CVSS3: 8 | 0% Низкий | 3 месяца назад |
 | CVE-2026-15741 SQL injection in PostgreSQL EXTRACT() deparse allows an object owner to execute arbitrary SQL as a superuser via a hostile object definition. Attacks affect expression deparse consumers broadly, including pg_dump, psql commands like \sf, and any similar usage in non-core tools. Versions before PostgreSQL 18.6, 17.11, 16.15, 15.19, and 14.24 are affected. | CVSS3: 8.8 | 0% Низкий | 3 месяца назад |
 | CVE-2026-15741 PostgreSQL expression deparse allows SQL injection via EXTRACT argument | CVSS3: 8.8 | 0% Низкий | 3 месяца назад |
| CVE-2026-15741 SQL injection in PostgreSQL EXTRACT() deparse allows an object owner t ... | CVSS3: 8.8 | 0% Низкий | 3 месяца назад |
| GHSA-3v2h-jgrj-9jmm SQL injection in PostgreSQL EXTRACT() deparse allows an object owner to execute arbitrary SQL as a superuser via a hostile object definition. Attacks affect expression deparse consumers broadly, including pg_dump, psql commands like \sf, and any similar usage in non-core tools. Versions before PostgreSQL 18.5, 17.11, 16.15, 15.19, and 14.24 are affected. | CVSS3: 8.8 | 0% Низкий | 3 месяца назад |
 | BDU:2026-11966 Уязвимость функции EXTRACT() системы управления базами данных PostgreSQL, позволяющая нарушителю выполнить произвольный код | CVSS3: 8.8 | 0% Низкий | 3 месяца назад |
 | ROS-20261002-80-0043 Уязвимость postgresql18 | CVSS3: 8.8 | 0% Низкий | около 1 месяца назад |
| ROS-20261002-80-0042 Уязвимость postgresql17 | CVSS3: 8.8 | 0% Низкий | около 1 месяца назад |
| ROS-20261002-80-0041 Уязвимость postgresql16 | CVSS3: 8.8 | 0% Низкий | около 1 месяца назад |
| ROS-20261002-80-0040 Уязвимость postgresql15 | CVSS3: 8.8 | 0% Низкий | около 1 месяца назад |
| ROS-20261002-80-0039 Уязвимость postgresql14 | CVSS3: 8.8 | 0% Низкий | около 1 месяца назад |
| ROS-20261002-80-0038 Уязвимость postgresql | CVSS3: 8.8 | 0% Низкий | около 1 месяца назад |
| ROS-20261002-73-0035 Уязвимость postgresql18 | CVSS3: 8.8 | 0% Низкий | около 1 месяца назад |
| ROS-20261002-73-0034 Уязвимость postgresql17 | CVSS3: 8.8 | 0% Низкий | около 1 месяца назад |
| ROS-20261002-73-0033 Уязвимость postgresql16 | CVSS3: 8.8 | 0% Низкий | около 1 месяца назад |
| ROS-20261002-73-0032 Уязвимость postgresql15 | CVSS3: 8.8 | 0% Низкий | около 1 месяца назад |
| ROS-20261002-73-0031 Уязвимость postgresql14 | CVSS3: 8.8 | 0% Низкий | около 1 месяца назад |
 | RLSA-2026:70186 Important: postgresql16 security update | около 2 месяцев назад | ||
| RLSA-2026:69923 Important: postgresql:15 security update | около 2 месяцев назад |
Уязвимостей на страницу