Approved changes feed: RSS · Atom

cpe:2.3:a:postgresql:postgresql:9.1.1:*:*:*:*:*:*:*

part: a version: 9.1.1 update: *

VendorPostgresql (17ae1743-f0f5-50ae-b0e9-670248233cae)
ProductPostgresql (cce58cf9-95f4-56e0-85d7-e79aa6a78bc7)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/postgresql purl2cpe 2026-06-01 10:12:17.143299
pkg:deb/ubuntu/postgresql purl2cpe 2026-06-01 10:12:17.143301
pkg:docker/postgres purl2cpe 2026-06-01 10:12:17.143302
pkg:github/postgres/postgres purl2cpe 2026-06-01 10:12:17.143303
pkg:gitlab/redhat/postgresql purl2cpe 2026-06-01 10:12:17.143305
pkg:rpm/fedora/postgresql purl2cpe 2026-06-01 10:12:17.143306

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-7486 vulnerable 2026-06-08 05:09:56.117857 Details available
PostgreSQL versions 8.4 - 9.6 are vulnerable to information leak in pg_user_mappings view which discloses foreign server passwords to any user having USAGE privilege on the associated foreign server.
Published: 2017-05-12T19:00:00.000Z
Updated: 2024-08-05T16:04:11.547Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-5288 vulnerable 2026-06-08 05:06:49.451577 Details available
The crypt function in contrib/pgcrypto in PostgreSQL before 9.0.23, 9.1.x before 9.1.19, 9.2.x before 9.2.14, 9.3.x before 9.3.10, and 9.4.x before 9.4.5 allows attackers to cause a denial of service (server crash) or read arbitrary server memory via a "too-short" salt.
Published: 2015-10-26T14:00:00.000Z
Updated: 2024-08-06T06:41:09.339Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-3165 vulnerable 2026-06-08 05:06:37.345658 Details available
Double free vulnerability in PostgreSQL before 9.0.20, 9.1.x before 9.1.16, 9.2.x before 9.2.11, 9.3.x before 9.3.7, and 9.4.x before 9.4.2 allows remote attackers to cause a denial of service (crash) by closing an SSL session at a time when the authentication timeout will expire during the session shutdown sequence.
Published: 2015-05-28T14:00:00.000Z
Updated: 2024-08-06T05:39:31.273Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-2669 vulnerable 2026-06-08 05:05:29.526325 Details available
Multiple integer overflows in contrib/hstore/hstore_io.c in PostgreSQL 9.0.x before 9.0.16, 9.1.x before 9.1.12, 9.2.x before 9.2.7, and 9.3.x before 9.3.3 allow remote authenticated users to have unspecified impact via vectors related to the (1) hstore_recv, (2) hstore_from_arrays, and (3) hstore_from_array functions in contrib/hstore/hstore_io.c; and the (4) hstoreArrayToPairs function in contrib/hstore/hstore_op.c, which triggers a buffer overflow. NOTE: this issue was SPLIT from CVE-2014-0064 because it has a different set of affected versions.
Published: 2014-03-28T17:00:00.000Z
Updated: 2024-08-06T10:21:35.930Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0067 vulnerable 2026-06-08 05:05:11.124574 Details available
The "make check" command for the test suites in PostgreSQL 9.3.3 and earlier does not properly invoke initdb to specify the authentication requirements for a database cluster to be used for the tests, which allows local users to gain privileges by leveraging access to this cluster.
Published: 2014-03-28T17:00:00.000Z
Updated: 2024-08-06T09:05:38.915Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0066 vulnerable 2026-06-08 05:05:11.083230 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0065 vulnerable 2026-06-08 05:05:11.080995 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0064 vulnerable 2026-06-08 05:05:11.078804 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0063 vulnerable 2026-06-08 05:05:11.076658 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0062 vulnerable 2026-06-08 05:05:11.074482 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0061 vulnerable 2026-06-08 05:05:11.071933 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0060 vulnerable 2026-06-08 05:05:11.056722 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-4422 not_vulnerable 2026-06-08 05:04:36.135213 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1903 vulnerable 2026-06-08 05:03:57.159690 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1902 vulnerable 2026-06-08 05:03:57.157934 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1901 vulnerable 2026-06-08 05:03:57.157025 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1900 vulnerable 2026-06-08 05:03:57.150331 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1899 vulnerable 2026-06-08 05:03:57.145534 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0255 vulnerable 2026-06-08 05:03:46.554677 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-3488 vulnerable 2026-06-08 05:02:10.165558 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-2655 vulnerable 2026-06-08 05:02:05.213618 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-0868 vulnerable 2026-06-08 05:00:46.065757 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-0867 vulnerable 2026-06-08 05:00:46.064461 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-0866 vulnerable 2026-06-08 05:00:46.055713 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.