Postgresql
Approved changes feed: RSS · Atom
cpe:2.3:a:postgresql_project:postgresql:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Postgresql Project (9d4645e3-224e-52cc-826e-33845004e3c1) |
|---|---|
| Product | Postgresql (b2c965fa-66e6-5357-9ef4-d80c7952ba5a) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2019-10130 |
vulnerable | 2026-06-08 05:12:22.300509 |
Details available
LOW (3.1)
A vulnerability was found in PostgreSQL versions 11.x up to excluding 11.3, 10.x up to excluding 10.8, 9.6.x up to, excluding 9.6.13, 9.5.x up to, excluding 9.5.17. PostgreSQL maintains column statistics for tables. Certain statistics, such as histograms and lists of most common values, contain values taken from the column. PostgreSQL does not evaluate row security policies before consulting those statistics during query planning; an attacker can exploit this to read the most common values of certain columns. Affected columns are those for which the attacker has SELECT privilege and for which, in an ordinary query, row-level security prunes the set of rows visible to the attacker.
Published: 2019-07-30T16:13:46.000Z
Updated: 2024-08-04T22:10:09.927Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-10129 |
vulnerable | 2026-06-08 05:12:22.299976 |
Details available
MEDIUM (6.5)
A vulnerability was found in postgresql versions 11.x prior to 11.3. Using a purpose-crafted insert to a partitioned table, an attacker can read arbitrary bytes of server memory. In the default configuration, any user can create a partitioned table suitable for this attack. (Exploit prerequisites are the same as for CVE-2018-1052).
Published: 2019-07-30T16:10:04.000Z
Updated: 2024-08-04T22:10:09.985Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.