Exposure of PostgreSQL

Databases
77
exposure score
10,597
sites use
0
exploited
0
critical

CVEs

111 results
CVE-2026-14671HIGHPostgreSQL refint plan cache type confusion executes arbitrary codeEPSS 0.4%CVE-2026-14677HIGHPostgreSQL 32-bit pltcl and plperl undersize allocations, via integer wraparoundEPSS 0.4%CVE-2026-16238HIGHPostgreSQL type confusion in pg_restore_attribute_stats() executes arbitrary codeEPSS 0.4%CVE-2026-6475HIGHPostgreSQL pg_basebackup and pg_rewind can overwrite unrelated files of origin superuser choiceEPSS 0.4%CVE-2024-10977LOWPostgreSQL libpq retains an error message from man-in-the-middleEPSS 0.4%CVE-2026-14672MEDIUMPostgreSQL observable response discrepancy with non-default scram_iterations provides user existence oracleEPSS 0.4%CVE-2019-10210MEDIUMPostgresql Windows installer before versions 11.5, 10.10, 9.6.15, 9.5.19, 9.4.24 is vulnerable via superuser writing password to unprotectedEPSS 0.4%CVE-2026-6637HIGHPostgreSQL refint allows stack buffer overflow and SQL injectionEPSS 0.4%CVE-2025-12818MEDIUMPostgreSQL libpq undersizes allocations, via integer wraparoundEPSS 0.4%CVE-2026-6464HIGHPostgreSQL psql COPY FROM STDIN early failure processes data lines as psql commandsEPSS 0.4%CVE-2026-18408HIGHPostgreSQL psql \unrestrict lets superuser of pg_dump origin server execute arbitrary code in psql clientEPSS 0.4%CVE-2026-16241LOWPostgreSQL ECPG integer underflow can crash the clientEPSS 0.3%CVE-2026-14668HIGHPostgreSQL ctid type confusion in selectivity estimator discloses derivative of arbitrary readEPSS 0.3%CVE-2026-6470MEDIUMPostgreSQL fails to check type USAGE privilegeEPSS 0.3%CVE-2019-10127—A vulnerability was found in postgresql versions 11.x prior to 11.3. The Windows installer for BigSQL-supplied PostgreSQL does not lock downEPSS 0.3%CVE-2026-2003MEDIUMPostgreSQL oidvector discloses a few bytes of memoryEPSS 0.3%CVE-2026-6469LOWPostgreSQL ALTER TABLE ALTER TYPE resets extended statistics ownershipEPSS 0.3%CVE-2026-14678MEDIUMPostgreSQL pg_trgm picksplit reads past end of bufferEPSS 0.3%CVE-2026-18024MEDIUMPostgreSQL ascii() function reads past end of bufferEPSS 0.3%CVE-2026-14679HIGHPostgreSQL stack buffer overflow in argument match writes 0x0 and 0x1 to server memoryEPSS 0.3%