PostgreSQL.

PostgreSQL refint plan cache type confusion executes arbitrary code

• PostgreSQL
• Memory corruption

PostgreSQL logical decoding can dlopen arbitrary file

• PostgreSQL
• Broken access control

PostgreSQL fails to check type USAGE privilege

• PostgreSQL
• Broken access control

PostgreSQL ALTER TABLE ALTER TYPE resets extended statistics ownership

• PostgreSQL
• CWE-708

PostgreSQL psql COPY FROM STDIN early failure processes data lines as psql commands

• PostgreSQL
• CWE-829

PostgreSQL pg_dump heap buffer overflow executes arbitrary code

• PostgreSQL
• Memory corruption

PostgreSQL psql \unrestrict lets superuser of pg_dump origin server execute arbitrary code in psql client

• PostgreSQL
• CWE-829

PostgreSQL ascii() function reads past end of buffer

• PostgreSQL
• CWE-126

PostgreSQL ECPG integer underflow can crash the client

• PostgreSQL
• Memory corruption

PostgreSQL type confusion in cursor CLOSE + DECLARE executes arbitrary code

• PostgreSQL
• Memory corruption

PostgreSQL type confusion in pg_restore_attribute_stats() executes arbitrary code

• PostgreSQL
• Memory corruption

PostgreSQL fuzzystrmatch writes effectively-arbitrary addresses, via integer wraparound

• PostgreSQL
• Memory corruption

PostgreSQL expression deparse allows SQL injection via EXTRACT argument

• PostgreSQL
• SQL injection

PostgreSQL improper enforcement of GSSAPI encryption when coupled with SSL

• PostgreSQL
• CWE-924

PostgreSQL type confusion via "internal" arguments

• PostgreSQL
• Memory corruption

PostgreSQL stack buffer overflow in argument match writes 0x0 and 0x1 to server memory

• PostgreSQL
• Memory corruption

PostgreSQL pg_trgm picksplit reads past end of buffer

• PostgreSQL
• CWE-126

PostgreSQL 32-bit pltcl and plperl undersize allocations, via integer wraparound

• PostgreSQL
• Memory corruption

PostgreSQL pg_stat_statements heap buffer overflow executes arbitrary code

• PostgreSQL
• Memory corruption

PostgreSQL amcheck does not clear untrusted search path

• PostgreSQL
• CWE-426

PostgreSQL observable response discrepancy with non-default scram_iterations provides user existence oracle

• PostgreSQL
• CWE-204

PostgreSQL plperl tied object heap buffer overflow executes arbitrary code

• PostgreSQL
• Memory corruption

PostgreSQL to_char heap buffer overflow executes arbitrary code

• PostgreSQL
• Memory corruption

PostgreSQL ctid type confusion in selectivity estimator discloses derivative of arbitrary read

• PostgreSQL
• Memory corruption

PostgreSQL row security caching disregards role modifications

• PostgreSQL
• CWE-1250

PostgreSQL regexp heap buffer overflow executes arbitrary code

• PostgreSQL
• Memory corruption

PostgreSQL pgcrypto, for OpenSSL-disabled ciphers, silently encrypts to and decrypts from cleartext

• PostgreSQL
• CWE-313
• CWE-345

PostgreSQL tsvector and tsquery undersize allocations, via integer wraparound

• PostgreSQL
• Memory corruption

PostgreSQL REFRESH PUBLICATION allows SQL injection via table name

• PostgreSQL
• SQL injection

PostgreSQL refint allows stack buffer overflow and SQL injection

• PostgreSQL
• SQL injection
• Memory corruption

PostgreSQL pg_restore_attribute_stats accepts values that cause query planning to read past end of stats array

• PostgreSQL
• CWE-126

PostgreSQL SSL/GSS init causes denial of service, via uncontrolled recursion

• PostgreSQL
• Denial of service

PostgreSQL discloses MD5-hashed passwords via covert timing channel

• PostgreSQL
• CWE-385

PostgreSQL libpq lo_* functions let server superuser overwrite client stack memory

• PostgreSQL
• Memory corruption
• CWE-242

PostgreSQL pg_createsubscriber allows SQL injection via subscription name

• PostgreSQL
• SQL injection

PostgreSQL pg_basebackup and pg_rewind can overwrite unrelated files of origin superuser choice

• PostgreSQL
• CWE-61

PostgreSQL timeofday() can disclose portions of server memory

• PostgreSQL
• Memory corruption

PostgreSQL server undersizes allocations, via integer wraparound

• PostgreSQL
• Memory corruption

PostgreSQL CREATE TYPE does not check multirange schema CREATE privilege

• PostgreSQL
• Broken access control

PostgreSQL pg_trgm heap buffer overflow writes pattern onto server memory

• PostgreSQL
• Memory corruption

PostgreSQL missing validation of multibyte character length executes arbitrary code

• PostgreSQL
• CWE-129
• CWE-1285

PostgreSQL pgcrypto heap buffer overflow executes arbitrary code

• PostgreSQL
• Memory corruption

PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code

• PostgreSQL
• CWE-1287

PostgreSQL oidvector discloses a few bytes of memory

• PostgreSQL
• CWE-1287

PostgreSQL libpq undersizes allocations, via integer wraparound

• PostgreSQL
• Memory corruption

PostgreSQL CREATE STATISTICS does not check for schema CREATE privilege

• PostgreSQL
• Broken access control

PostgreSQL pg_dump newline in object name executes arbitrary code in psql client and in restore target server

• PostgreSQL
• Other injection

PostgreSQL pg_dump lets superuser of origin server execute arbitrary code in psql client

• PostgreSQL
• CWE-829

PostgreSQL optimizer statistics can expose sampled data within a view, partition, or child table

• PostgreSQL
• CWE-1230

PostgreSQL GB18030 encoding validation can read one byte past end of allocation for text that fails validation

• PostgreSQL
• CWE-126

PostgreSQL quoting APIs miss neutralizing quoting syntax in text that fails encoding validation

• PostgreSQL
• CWE-149

PostgreSQL PL/Perl environment variable changes execute arbitrary code

• PostgreSQL
• CWE-15

PostgreSQL SET ROLE, SET SESSION AUTHORIZATION reset to wrong user ID

• PostgreSQL
• Privilege escalation

PostgreSQL libpq retains an error message from man-in-the-middle

• PostgreSQL
• CWE-348

PostgreSQL row security below e.g. subqueries disregards user ID changes

• PostgreSQL
• CWE-1250

PostgreSQL relation replacement during pg_dump executes arbitrary SQL

• PostgreSQL
• Race condition

PostgreSQL pg_stats_ext and pg_stats_ext_exprs lack authorization checks

• PostgreSQL
• Broken access control

PostgreSQL non-owner REFRESH MATERIALIZED VIEW CONCURRENTLY executes arbitrary SQL

• PostgreSQL
• CWE-271

Improper input validation in postgresql

• postgresql
• CWE-20

Improper input validation in postgresql

• postgresql
• CWE-20