CVE Browser

PostgreSQL refint plan cache type confusion executes arbitrary code

PostgreSQL logical decoding can dlopen arbitrary file

PostgreSQL fails to check type USAGE privilege

PostgreSQL ALTER TABLE ALTER TYPE resets extended statistics ownership

PostgreSQL psql COPY FROM STDIN early failure processes data lines as psql commands

PostgreSQL pg_dump heap buffer overflow executes arbitrary code

PostgreSQL psql \unrestrict lets superuser of pg_dump origin server execute arbitrary code in psql client

PostgreSQL ascii() function reads past end of buffer

PostgreSQL ECPG integer underflow can crash the client

PostgreSQL type confusion in cursor CLOSE + DECLARE executes arbitrary code

PostgreSQL type confusion in pg_restore_attribute_stats() executes arbitrary code

PostgreSQL fuzzystrmatch writes effectively-arbitrary addresses, via integer wraparound

PostgreSQL expression deparse allows SQL injection via EXTRACT argument

PostgreSQL improper enforcement of GSSAPI encryption when coupled with SSL

PostgreSQL type confusion via "internal" arguments

PostgreSQL stack buffer overflow in argument match writes 0x0 and 0x1 to server memory

PostgreSQL pg_trgm picksplit reads past end of buffer

PostgreSQL 32-bit pltcl and plperl undersize allocations, via integer wraparound

PostgreSQL pg_stat_statements heap buffer overflow executes arbitrary code

PostgreSQL amcheck does not clear untrusted search path

PostgreSQL observable response discrepancy with non-default scram_iterations provides user existence oracle

PostgreSQL plperl tied object heap buffer overflow executes arbitrary code

PostgreSQL to_char heap buffer overflow executes arbitrary code

PostgreSQL ctid type confusion in selectivity estimator discloses derivative of arbitrary read

PostgreSQL row security caching disregards role modifications