PostgreSQL Global Development Group PostgreSQL vulnerabilities

CVEs per yearBy the year they were published

1. 20182
2. 20196
3. 20201

Newest CVEs

• CVE-2015-0241

  The to_char function in PostgreSQL before 9.0.19, 9.1.x before 9.1.15, 9.2.x before 9.2.10, 9.3.x before 9.3.6, and 9.4.x before 9.4.1 allows remote…

  PostgreSQL Global Development Group · PostgreSQL

  High8.8
• CVE-2015-0242

  Stack-based buffer overflow in the *printf function implementations in PostgreSQL before 9.0.19, 9.1.x before 9.1.15, 9.2.x before 9.2.10, 9.3.x before 9.3.6,…

  PostgreSQL Global Development Group · PostgreSQL

  High8.8
• CVE-2015-0243

  Multiple buffer overflows in contrib/pgcrypto in PostgreSQL before 9.0.19, 9.1.x before 9.1.15, 9.2.x before 9.2.10, 9.3.x before 9.3.6, and 9.4.x before 9.4.1…

  PostgreSQL Global Development Group · PostgreSQL

  High8.8
• CVE-2015-0244

  PostgreSQL before 9.0.19, 9.1.x before 9.1.15, 9.2.x before 9.2.10, 9.3.x before 9.3.6, and 9.4.x before 9.4.1 does not properly handle errors while reading a…

  PostgreSQL Global Development Group · PostgreSQL

  Critical9.8
• CVE-2014-8161

  PostgreSQL before 9.0.19, 9.1.x before 9.1.15, 9.2.x before 9.2.10, 9.3.x before 9.3.6, and 9.4.x before 9.4.1 allows remote authenticated users to obtain…

  PostgreSQL Global Development Group · PostgreSQL

  Medium4.3
• CVE-2015-3166

  The snprintf implementation in PostgreSQL before 9.0.20, 9.1.x before 9.1.16, 9.2.x before 9.2.11, 9.3.x before 9.3.7, and 9.4.x before 9.4.2 does not properly…

  PostgreSQL Global Development Group · PostgreSQL

  Critical9.8
• CVE-2015-3167

  contrib/pgcrypto in PostgreSQL before 9.0.20, 9.1.x before 9.1.16, 9.2.x before 9.2.11, 9.3.x before 9.3.7, and 9.4.x before 9.4.2 uses different error…

  PostgreSQL Global Development Group · PostgreSQL

  High7.5
• CVE-2018-10925

  It was discovered that PostgreSQL versions before 10.5, 9.6.10, 9.5.14, 9.4.19, and 9.3.24 failed to properly check authorization on certain statements…

  PostgreSQL Global Development Group · postgresql

  High7.1
• CVE-2018-10915

  A vulnerability was found in libpq, the default PostgreSQL client library where libpq failed to properly reset its internal state between connections. If an…

  PostgreSQL Global Development Group · postgresql

  High8.5