Exposure of PostgreSQL

Databases
77
exposure score
10,597
sites use
0
exploited
0
critical

CVEs

111 results
CVE-2022-41862LOWIn PostgreSQL, a modified, unauthenticated server can send an unterminated string during the establishment of Kerberos transport encryption.EPSS 0.6%CVE-2026-15742HIGHPostgreSQL fuzzystrmatch writes effectively-arbitrary addresses, via integer wraparoundEPSS 0.6%CVE-2026-6479HIGHPostgreSQL SSL/GSS init causes denial of service, via uncontrolled recursionEPSS 0.6%CVE-2017-12172—PostgreSQL 10.x before 10.1, 9.6.x before 9.6.6, 9.5.x before 9.5.10, 9.4.x before 9.4.15, 9.3.x before 9.3.20, and 9.2.x before 9.2.24 runsEPSS 0.6%CVE-2026-6478MEDIUMPostgreSQL discloses MD5-hashed passwords via covert timing channelEPSS 0.6%CVE-2026-2007HIGHPostgreSQL pg_trgm heap buffer overflow writes pattern onto server memoryEPSS 0.5%CVE-2020-14350—It was found that some PostgreSQL extensions did not use search_path safely in their installation script. An attacker with sufficient privilEPSS 0.5%CVE-2020-10733—The Windows installer for PostgreSQL 9.5 - 12 invokes system-provided executables that do not have fully-qualified paths. Executables in theEPSS 0.5%CVE-2026-6471HIGHPostgreSQL logical decoding can dlopen arbitrary fileEPSS 0.5%CVE-2018-1053—In postgresql 9.3.x before 9.3.21, 9.4.x before 9.4.16, 9.5.x before 9.5.11, 9.6.x before 9.6.7 and 10.x before 10.2, pg_upgrade creates filEPSS 0.5%CVE-2025-8715HIGHPostgreSQL pg_dump newline in object name executes arbitrary code in psql client and in restore target serverEPSS 0.5%CVE-2026-14662HIGHPostgreSQL tsvector and tsquery undersize allocations, via integer wraparoundEPSS 0.5%CVE-2026-6477HIGHPostgreSQL libpq lo_* functions let server superuser overwrite client stack memoryEPSS 0.5%CVE-2019-10128—A vulnerability was found in postgresql versions 11.x prior to 11.3. The Windows installer for EnterpriseDB-supplied PostgreSQL does not locEPSS 0.4%CVE-2026-14676HIGHPostgreSQL pg_stat_statements heap buffer overflow executes arbitrary codeEPSS 0.4%CVE-2026-14670HIGHPostgreSQL plperl tied object heap buffer overflow executes arbitrary codeEPSS 0.4%CVE-2026-14664HIGHPostgreSQL regexp heap buffer overflow executes arbitrary codeEPSS 0.4%CVE-2026-15741HIGHPostgreSQL expression deparse allows SQL injection via EXTRACT argumentEPSS 0.4%CVE-2026-19385HIGHPostgreSQL pg_dump heap buffer overflow executes arbitrary codeEPSS 0.4%CVE-2026-14680HIGHPostgreSQL type confusion via "internal" argumentsEPSS 0.4%