Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

Filtering: Tag: postgresql Clear

ID	Title	Severity	Tags	Detected
CVE-2026-11400	CVE-2026-11400 and CVE-2026-11401 Bulletin ID: 2026-039-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 06/025/2026 12:15 PM PDT Description: Amazon Aurora PostgreSQL a fully managed relational database engine that's compatible with PostgreSQL. We identified CVE-2026-11400(JDBC) and CVE-2026-11401(Go), an issue in AWS Wrappers for Amazon Aurora PostgreSQL will allow for privilege escalation to rds_superuser role. A low privilege authenticated user can create a crafted function that could be executed with permissions of other Amazon Relational Database Service (RDS) users. Impacted versions: - AWS Advanced JDBC Wrapper >=3.0.0 and < 4.0.1 - AWS Advanced Go Wrapper release 2026-04-06 Please refer to the article below for the most up-to-date and complete information related to this AWS Security Bulletin.	High	AWS Amazon Cloud Cwe 426 +4	1 month ago
CVE-2026-6638	SQL Injection in postgresql (CVE-2026-6638) SQL injection in postgresql (CVE-2026-6638). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `16.14.0, 17.10.0, 18.4.0` or later.	Low	SQL Injection Cwe 89 PostgreSQL	1 month ago
CVE-2026-6476	SQL Injection in postgresql (CVE-2026-6476) SQL injection in postgresql (CVE-2026-6476). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `17.10.0, 18.4.0` or later.	High	SQL Injection Cwe 89 PostgreSQL	1 month ago
CVE-2026-6472	Vulnerability in postgresql (CVE-2026-6472) vulnerability in postgresql (CVE-2026-6472). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `14.23.0, 15.18.0, 16.14.0, 17.10.0, 18.4.0` or later.	Medium	Cwe 862 PostgreSQL	1 month ago
CVE-2026-6473	Vulnerability in postgresql (CVE-2026-6473) vulnerability in postgresql (CVE-2026-6473). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `14.23.0, 15.18.0, 16.14.0, 17.10.0, 18.4.0` or later.	High	Cwe 190 PostgreSQL	1 month ago
CVE-2026-6479	Vulnerability in postgresql (CVE-2026-6479) vulnerability in postgresql (CVE-2026-6479). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `14.23.0, 15.18.0, 16.14.0, 17.10.0, 18.4.0` or later.	High	Denial of Service Cwe 674 PostgreSQL	1 month ago
CVE-2026-6478	Vulnerability in postgresql (CVE-2026-6478) vulnerability in postgresql (CVE-2026-6478). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `14.23.0, 15.18.0, 16.14.0, 17.10.0, 18.4.0` or later.	Medium	Cwe 385 PostgreSQL	1 month ago
CVE-2026-6474	Vulnerability in postgresql (CVE-2026-6474) vulnerability in postgresql (CVE-2026-6474). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `14.23.0, 15.18.0, 16.14.0, 17.10.0, 18.4.0` or later.	Medium	Cwe 134 PostgreSQL	1 month ago
CVE-2026-6475	Vulnerability in postgresql (CVE-2026-6475) vulnerability in postgresql (CVE-2026-6475). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `14.23.0, 15.18.0, 16.14.0, 17.10.0, 18.4.0` or later.	High	Cwe 61 PostgreSQL	1 month ago
CVE-2026-6477	Vulnerability in postgresql (CVE-2026-6477) vulnerability in postgresql (CVE-2026-6477). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `14.23.0, 15.18.0, 16.14.0, 17.10.0, 18.4.0` or later.	High	Cwe 242 PostgreSQL Cwe 120	1 month ago
CVE-2026-6637	SQL Injection in postgresql (CVE-2026-6637) SQL injection in postgresql (CVE-2026-6637). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `14.23.0, 15.18.0, 16.14.0, 17.10.0, 18.4.0` or later.	High	SQL Injection Cwe 89 Cwe 121 PostgreSQL	1 month ago
CVE-2026-6575	Vulnerability in postgresql (CVE-2026-6575) vulnerability in postgresql (CVE-2026-6575). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `18.4.0` or later.	Medium	Cwe 126 PostgreSQL	1 month ago
CVE-2026-46445	SOGo before 5.12.7, when PostgreSQL is used, allows SQL injection. SOGo before 5.12.7, when PostgreSQL is used, allows SQL injection.	High	SQL Injection Cwe 89 PostgreSQL	1 month ago
CVE-2026-46446	SOGo before 5.12.7, when PostgreSQL or MariaDB is used, and cleartext passwords are stored,... SOGo before 5.12.7, when PostgreSQL or MariaDB is used, and cleartext passwords are stored,...	High	SQL Injection Cwe 89 MariaDB PostgreSQL	1 month ago
CVE-2026-38428	SQL Injection in sqli (CVE-2026-38428) SQL injection in sqli (CVE-2026-38428). Successful exploitation can lead to full system takeover. Exploitable via `GET /api/v1/main/flows/search`.	Critical	SQL Injection Cwe 89 Kestra HTTP +15	2 months ago
CVE-2026-42198	Vulnerability in dos (CVE-2026-42198) vulnerability in dos (CVE-2026-42198). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 770 PostgreSQL Postgresql Jdbc Driver	2 months ago
CVE-2026-2007	Vulnerability in privilege-escalation (CVE-2026-2007) vulnerability in privilege-escalation (CVE-2026-2007). Risk of unauthorized operations or information disclosure.	High	Privilege Escalation Cwe 122 Cwe 120 PostgreSQL	4 months ago
CVE-2026-2005	Vulnerability in postgresql (CVE-2026-2005) vulnerability in postgresql (CVE-2026-2005). Successful exploitation can lead to full system takeover.	High	Cwe 122 Cwe 120 PostgreSQL	4 months ago
CVE-2026-2004	Vulnerability in postgresql (CVE-2026-2004) vulnerability in postgresql (CVE-2026-2004). Successful exploitation can lead to full system takeover.	High	Cwe 1287 PostgreSQL	4 months ago
CVE-2026-2006	Vulnerability in postgresql (CVE-2026-2006) vulnerability in postgresql (CVE-2026-2006). Successful exploitation can lead to full system takeover.	High	Cwe 129 Cwe 1285 PostgreSQL	4 months ago
CVE-2023-5868	Vulnerability in postgresql (CVE-2023-5868) vulnerability in postgresql (CVE-2023-5868). Risk of unauthorized operations or information disclosure.	Medium	Cwe 686 PostgreSQL Redhat Codeready Linux Builder Eus +14	2 years ago
CVE-2017-12172	Vulnerability in postgresql (CVE-2017-12172) vulnerability in postgresql (CVE-2017-12172). Successful exploitation can lead to full system takeover.	Medium	Cwe 59 PostgreSQL	8 years ago
CVE-2017-15099	Information Disclosure in postgresql (CVE-2017-15099) vulnerability in postgresql (CVE-2017-15099). Confidential information can be exposed externally.	Medium	Cwe 200 PostgreSQL Debian Debian Linux	8 years ago
CVE-2017-15098	Information Disclosure in postgresql (CVE-2017-15098) vulnerability in postgresql (CVE-2017-15098). Confidential information can be exposed externally.	High	Cwe 200 PostgreSQL Debian Debian Linux	8 years ago
CVE-2017-8806	Vulnerability in dos (CVE-2017-8806) vulnerability in dos (CVE-2017-8806). Data can be tampered with by attackers.	Medium	Denial of Service Cwe 59 PostgreSQL Canonical +3	8 years ago
CVE-2017-7548	Vulnerability in dos (CVE-2017-7548) vulnerability in dos (CVE-2017-7548). Data can be tampered with by attackers.	High	Denial of Service Cwe 862 PostgreSQL Debian +1	8 years ago
CVE-2017-7547	Vulnerability in postgresql (CVE-2017-7547) vulnerability in postgresql (CVE-2017-7547). Successful exploitation can lead to full system takeover.	High	Cwe 522 PostgreSQL	8 years ago
CVE-2017-7546	Authentication Bypass in postgresql (CVE-2017-7546) authentication bypass in postgresql (CVE-2017-7546). Successful exploitation can lead to full system takeover.	Critical	Cwe 287 PostgreSQL Debian Debian Linux	8 years ago
CVE-2016-0768	PostgreSQL PL/Java after 9.0 does not honor access controls on large objects. PostgreSQL PL/Java after 9.0 does not honor access controls on large objects.	High	Java Cwe 284 PostgreSQL	9 years ago
CVE-2017-7486	Vulnerability in postgresql (CVE-2017-7486) vulnerability in postgresql (CVE-2017-7486). Confidential information can be exposed externally.	High	Cwe 522 Cwe 200 PostgreSQL	9 years ago
CVE-2017-7485	Vulnerability in postgresql (CVE-2017-7485) vulnerability in postgresql (CVE-2017-7485). Data can be tampered with by attackers.	Medium	Cwe 390 Cwe 311 PostgreSQL	9 years ago
CVE-2017-7484	Vulnerability in postgresql (CVE-2017-7484) vulnerability in postgresql (CVE-2017-7484). Confidential information can be exposed externally.	High	Cwe 285 Cwe 200 PostgreSQL	9 years ago

Vulnerabilities

🍪 About cookies