agentprime: postgresqlEvery new CVE for postgresql.https://agentprime.io/CVE-2026-14671: PostgreSQL refint plan cache type confusion executes arbitrary codehttps://agentprime.io/advisories/CVE-2026-14671/https://agentprime.io/advisories/CVE-2026-14671/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 13 Aug 2026 13:00:18 GMTCVECVE-2026-6471: PostgreSQL logical decoding can dlopen arbitrary filehttps://agentprime.io/advisories/CVE-2026-6471/https://agentprime.io/advisories/CVE-2026-6471/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 13 Aug 2026 13:00:18 GMTCVECVE-2026-6470: PostgreSQL fails to check type USAGE privilegehttps://agentprime.io/advisories/CVE-2026-6470/https://agentprime.io/advisories/CVE-2026-6470/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 13 Aug 2026 13:00:17 GMTCVECVE-2026-6469: PostgreSQL ALTER TABLE ALTER TYPE resets extended statistics ownershiphttps://agentprime.io/advisories/CVE-2026-6469/https://agentprime.io/advisories/CVE-2026-6469/CVSS 3.8 (Low). Published by the CVE Program. Not analysed by agentprime yet.Thu, 13 Aug 2026 13:00:16 GMTCVECVE-2026-6464: PostgreSQL psql COPY FROM STDIN early failure processes data lines as psql commandshttps://agentprime.io/advisories/CVE-2026-6464/https://agentprime.io/advisories/CVE-2026-6464/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 13 Aug 2026 13:00:16 GMTCVECVE-2026-19385: PostgreSQL pg_dump heap buffer overflow executes arbitrary codehttps://agentprime.io/advisories/CVE-2026-19385/https://agentprime.io/advisories/CVE-2026-19385/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 13 Aug 2026 13:00:15 GMTCVECVE-2026-18408: PostgreSQL psql \unrestrict lets superuser of pg_dump origin server execute arbitrary code in psql clienthttps://agentprime.io/advisories/CVE-2026-18408/https://agentprime.io/advisories/CVE-2026-18408/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 13 Aug 2026 13:00:14 GMTCVECVE-2026-18024: PostgreSQL ascii() function reads past end of bufferhttps://agentprime.io/advisories/CVE-2026-18024/https://agentprime.io/advisories/CVE-2026-18024/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 13 Aug 2026 13:00:14 GMTCVECVE-2026-16241: PostgreSQL ECPG integer underflow can crash the clienthttps://agentprime.io/advisories/CVE-2026-16241/https://agentprime.io/advisories/CVE-2026-16241/CVSS 3.8 (Low). Published by the CVE Program. Not analysed by agentprime yet.Thu, 13 Aug 2026 13:00:13 GMTCVECVE-2026-16239: PostgreSQL type confusion in cursor CLOSE + DECLARE executes arbitrary codehttps://agentprime.io/advisories/CVE-2026-16239/https://agentprime.io/advisories/CVE-2026-16239/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 13 Aug 2026 13:00:13 GMTCVECVE-2026-16238: PostgreSQL type confusion in pg_restore_attribute_stats() executes arbitrary codehttps://agentprime.io/advisories/CVE-2026-16238/https://agentprime.io/advisories/CVE-2026-16238/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 13 Aug 2026 13:00:12 GMTCVECVE-2026-15742: PostgreSQL fuzzystrmatch writes effectively-arbitrary addresses, via integer wraparoundhttps://agentprime.io/advisories/CVE-2026-15742/https://agentprime.io/advisories/CVE-2026-15742/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 13 Aug 2026 13:00:11 GMTCVECVE-2026-15741: PostgreSQL expression deparse allows SQL injection via EXTRACT argumenthttps://agentprime.io/advisories/CVE-2026-15741/https://agentprime.io/advisories/CVE-2026-15741/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 13 Aug 2026 13:00:11 GMTCVECVE-2026-14681: PostgreSQL improper enforcement of GSSAPI encryption when coupled with SSLhttps://agentprime.io/advisories/CVE-2026-14681/https://agentprime.io/advisories/CVE-2026-14681/CVSS 4.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 13 Aug 2026 13:00:10 GMTCVECVE-2026-14680: PostgreSQL type confusion via "internal" argumentshttps://agentprime.io/advisories/CVE-2026-14680/https://agentprime.io/advisories/CVE-2026-14680/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 13 Aug 2026 13:00:10 GMTCVECVE-2026-14679: PostgreSQL stack buffer overflow in argument match writes 0x0 and 0x1 to server memoryhttps://agentprime.io/advisories/CVE-2026-14679/https://agentprime.io/advisories/CVE-2026-14679/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 13 Aug 2026 13:00:09 GMTCVECVE-2026-14678: PostgreSQL pg_trgm picksplit reads past end of bufferhttps://agentprime.io/advisories/CVE-2026-14678/https://agentprime.io/advisories/CVE-2026-14678/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 13 Aug 2026 13:00:08 GMTCVECVE-2026-14677: PostgreSQL 32-bit pltcl and plperl undersize allocations, via integer wraparoundhttps://agentprime.io/advisories/CVE-2026-14677/https://agentprime.io/advisories/CVE-2026-14677/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 13 Aug 2026 13:00:08 GMTCVECVE-2026-14676: PostgreSQL pg_stat_statements heap buffer overflow executes arbitrary codehttps://agentprime.io/advisories/CVE-2026-14676/https://agentprime.io/advisories/CVE-2026-14676/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 13 Aug 2026 13:00:07 GMTCVECVE-2026-14673: PostgreSQL amcheck does not clear untrusted search pathhttps://agentprime.io/advisories/CVE-2026-14673/https://agentprime.io/advisories/CVE-2026-14673/CVSS 3.8 (Low). Published by the CVE Program. Not analysed by agentprime yet.Thu, 13 Aug 2026 13:00:06 GMTCVECVE-2026-14672: PostgreSQL observable response discrepancy with non-default scram_iterations provides user existence oraclehttps://agentprime.io/advisories/CVE-2026-14672/https://agentprime.io/advisories/CVE-2026-14672/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 13 Aug 2026 13:00:06 GMTCVECVE-2026-14670: PostgreSQL plperl tied object heap buffer overflow executes arbitrary codehttps://agentprime.io/advisories/CVE-2026-14670/https://agentprime.io/advisories/CVE-2026-14670/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 13 Aug 2026 13:00:05 GMTCVECVE-2026-14669: PostgreSQL to_char heap buffer overflow executes arbitrary codehttps://agentprime.io/advisories/CVE-2026-14669/https://agentprime.io/advisories/CVE-2026-14669/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 13 Aug 2026 13:00:04 GMTCVECVE-2026-14668: PostgreSQL ctid type confusion in selectivity estimator discloses derivative of arbitrary readhttps://agentprime.io/advisories/CVE-2026-14668/https://agentprime.io/advisories/CVE-2026-14668/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 13 Aug 2026 13:00:04 GMTCVECVE-2026-14666: PostgreSQL row security caching disregards role modificationshttps://agentprime.io/advisories/CVE-2026-14666/https://agentprime.io/advisories/CVE-2026-14666/CVSS 4.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 13 Aug 2026 13:00:03 GMTCVECVE-2026-14664: PostgreSQL regexp heap buffer overflow executes arbitrary codehttps://agentprime.io/advisories/CVE-2026-14664/https://agentprime.io/advisories/CVE-2026-14664/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 13 Aug 2026 13:00:03 GMTCVECVE-2026-14663: PostgreSQL pgcrypto, for OpenSSL-disabled ciphers, silently encrypts to and decrypts from cleartexthttps://agentprime.io/advisories/CVE-2026-14663/https://agentprime.io/advisories/CVE-2026-14663/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 13 Aug 2026 13:00:02 GMTCVECVE-2026-14662: PostgreSQL tsvector and tsquery undersize allocations, via integer wraparoundhttps://agentprime.io/advisories/CVE-2026-14662/https://agentprime.io/advisories/CVE-2026-14662/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 13 Aug 2026 13:00:01 GMTCVECVE-2026-6638: PostgreSQL REFRESH PUBLICATION allows SQL injection via table namehttps://agentprime.io/advisories/CVE-2026-6638/https://agentprime.io/advisories/CVE-2026-6638/CVSS 3.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.Thu, 14 May 2026 13:00:15 GMTCVECVE-2026-6637: PostgreSQL refint allows stack buffer overflow and SQL injectionhttps://agentprime.io/advisories/CVE-2026-6637/https://agentprime.io/advisories/CVE-2026-6637/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 14 May 2026 13:00:15 GMTCVECVE-2026-6575: PostgreSQL pg_restore_attribute_stats accepts values that cause query planning to read past end of stats arrayhttps://agentprime.io/advisories/CVE-2026-6575/https://agentprime.io/advisories/CVE-2026-6575/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 14 May 2026 13:00:14 GMTCVECVE-2026-6479: PostgreSQL SSL/GSS init causes denial of service, via uncontrolled recursionhttps://agentprime.io/advisories/CVE-2026-6479/https://agentprime.io/advisories/CVE-2026-6479/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 14 May 2026 13:00:13 GMTCVECVE-2026-6478: PostgreSQL discloses MD5-hashed passwords via covert timing channelhttps://agentprime.io/advisories/CVE-2026-6478/https://agentprime.io/advisories/CVE-2026-6478/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 14 May 2026 13:00:13 GMTCVECVE-2026-6477: PostgreSQL libpq lo_* functions let server superuser overwrite client stack memoryhttps://agentprime.io/advisories/CVE-2026-6477/https://agentprime.io/advisories/CVE-2026-6477/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 14 May 2026 13:00:12 GMTCVECVE-2026-6476: PostgreSQL pg_createsubscriber allows SQL injection via subscription namehttps://agentprime.io/advisories/CVE-2026-6476/https://agentprime.io/advisories/CVE-2026-6476/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 14 May 2026 13:00:11 GMTCVECVE-2026-6475: PostgreSQL pg_basebackup and pg_rewind can overwrite unrelated files of origin superuser choicehttps://agentprime.io/advisories/CVE-2026-6475/https://agentprime.io/advisories/CVE-2026-6475/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 14 May 2026 13:00:11 GMTCVECVE-2026-6474: PostgreSQL timeofday() can disclose portions of server memoryhttps://agentprime.io/advisories/CVE-2026-6474/https://agentprime.io/advisories/CVE-2026-6474/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 14 May 2026 13:00:10 GMTCVECVE-2026-6473: PostgreSQL server undersizes allocations, via integer wraparoundhttps://agentprime.io/advisories/CVE-2026-6473/https://agentprime.io/advisories/CVE-2026-6473/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 14 May 2026 13:00:09 GMTCVECVE-2026-6472: PostgreSQL CREATE TYPE does not check multirange schema CREATE privilegehttps://agentprime.io/advisories/CVE-2026-6472/https://agentprime.io/advisories/CVE-2026-6472/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 14 May 2026 13:00:02 GMTCVECVE-2026-2007: PostgreSQL pg_trgm heap buffer overflow writes pattern onto server memoryhttps://agentprime.io/advisories/CVE-2026-2007/https://agentprime.io/advisories/CVE-2026-2007/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 12 Feb 2026 13:00:11 GMTCVECVE-2026-2006: PostgreSQL missing validation of multibyte character length executes arbitrary codehttps://agentprime.io/advisories/CVE-2026-2006/https://agentprime.io/advisories/CVE-2026-2006/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 12 Feb 2026 13:00:10 GMTCVECVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow executes arbitrary codehttps://agentprime.io/advisories/CVE-2026-2005/https://agentprime.io/advisories/CVE-2026-2005/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 12 Feb 2026 13:00:09 GMTCVECVE-2026-2004: PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary codehttps://agentprime.io/advisories/CVE-2026-2004/https://agentprime.io/advisories/CVE-2026-2004/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 12 Feb 2026 13:00:08 GMTCVECVE-2026-2003: PostgreSQL oidvector discloses a few bytes of memoryhttps://agentprime.io/advisories/CVE-2026-2003/https://agentprime.io/advisories/CVE-2026-2003/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 12 Feb 2026 13:00:06 GMTCVECVE-2025-12818: PostgreSQL libpq undersizes allocations, via integer wraparoundhttps://agentprime.io/advisories/CVE-2025-12818/https://agentprime.io/advisories/CVE-2025-12818/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 13 Nov 2025 13:00:12 GMTCVECVE-2025-12817: PostgreSQL CREATE STATISTICS does not check for schema CREATE privilegehttps://agentprime.io/advisories/CVE-2025-12817/https://agentprime.io/advisories/CVE-2025-12817/CVSS 3.1 (Low). Published by the CVE Program. Not analysed by agentprime yet.Thu, 13 Nov 2025 13:00:12 GMTCVECVE-2025-8715: PostgreSQL pg_dump newline in object name executes arbitrary code in psql client and in restore target serverhttps://agentprime.io/advisories/CVE-2025-8715/https://agentprime.io/advisories/CVE-2025-8715/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 14 Aug 2025 13:00:07 GMTCVECVE-2025-8714: PostgreSQL pg_dump lets superuser of origin server execute arbitrary code in psql clienthttps://agentprime.io/advisories/CVE-2025-8714/https://agentprime.io/advisories/CVE-2025-8714/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 14 Aug 2025 13:00:07 GMTCVECVE-2025-8713: PostgreSQL optimizer statistics can expose sampled data within a view, partition, or child tablehttps://agentprime.io/advisories/CVE-2025-8713/https://agentprime.io/advisories/CVE-2025-8713/CVSS 3.1 (Low). Published by the CVE Program. Not analysed by agentprime yet.Thu, 14 Aug 2025 13:00:05 GMTCVECVE-2025-4207: PostgreSQL GB18030 encoding validation can read one byte past end of allocation for text that fails validationhttps://agentprime.io/advisories/CVE-2025-4207/https://agentprime.io/advisories/CVE-2025-4207/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 08 May 2025 14:22:45 GMTCVE