Advisories · Technology
pgjdbc.
Every CVE that names pgjdbc among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.3 Medium
pgjdbc pads a value shorter than its declared length with bytes of earlier statements (rather than zeros)
- pgjdbc
- Information disclosure
- CWE-226
- CVSS 5.9 Medium
pgjdbc does not enforce requireAuth when the value excludes every authentication method
- pgjdbc
- CWE-636
- CVSS 4.2 Medium
pgjdbc stores bytes of earlier messages in place of a large value on GSS-encrypted connections
- pgjdbc
- Information disclosure