{"kind": "product", "path": "vulns/ubuntu-18.04-lts/postgresql-10", "name": "postgresql-10", "product": "postgresql-10", "ecosystem": "Ubuntu:18.04:LTS", "items": [{"id": "CVE-2023-2455", "noindex": false, "published": "2023-06-09T00:00:00.000Z", "modified": "2025-01-06T17:13:23.297Z", "cvss": 5.4, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N", "severity": "medium", "epss": 0.007, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2023-2455", "title": "CVE-2023-2455", "description": "Row security policies disregard user ID changes after inlining; PostgreSQL could permit incorrect policies to be applied in certain cases where role-specific policies are used and a given query is planned under one role and then executed under other roles. This scenario can happen under security definer functions or when a common user and query is planned initially and then re-used across multiple SET ROLEs. Applying an incorrect policy may permit a user to complete otherwise-forbidden reads and modifications. This affects only databases that have used CREATE POLICY to define a row security policy.", "references": ["https://access.redhat.com/security/cve/CVE-2023-2455", "https://www.postgresql.org/support/security/CVE-2023-2455/", "https://security.netapp.com/advisory/ntap-20230706-0006/"], "fixes": ["10.23-0ubuntu0.18.04.2"], "products": [{"name": "postgresql-10", "path": "vulns/ubuntu-18.04-lts/postgresql-10", "ecosystem": "Ubuntu:18.04:LTS"}]}, {"id": "CVE-2023-2454", "noindex": false, "published": "2023-06-09T00:00:00.000Z", "modified": "2025-06-04T03:56:06.743Z", "cvss": 7.2, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "severity": "high", "epss": 0.01199, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2023-2454", "title": "CVE-2023-2454", "description": "schema_element defeats protective search_path changes; It was found that certain database calls in PostgreSQL could permit an authed attacker with elevated database-level privileges to execute arbitrary code.", "references": ["https://access.redhat.com/security/cve/CVE-2023-2454", "https://www.postgresql.org/support/security/CVE-2023-2454/", "https://security.netapp.com/advisory/ntap-20230706-0006/"], "fixes": ["10.23-0ubuntu0.18.04.2"], "products": [{"name": "postgresql-10", "path": "vulns/ubuntu-18.04-lts/postgresql-10", "ecosystem": "Ubuntu:18.04:LTS"}]}, {"id": "CVE-2022-1552", "noindex": false, "published": "2022-08-31T00:00:00.000Z", "modified": "2024-08-03T00:10:03.498Z", "cvss": 8.8, "cvss_vector": "", "severity": "high", "epss": 0.16981, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2022-1552", "title": "CVE-2022-1552", "description": "A flaw was found in PostgreSQL. There is an issue with incomplete efforts to operate safely when a privileged user is maintaining another user's objects. The Autovacuum, REINDEX, CREATE INDEX, REFRESH MATERIALIZED VIEW, CLUSTER, and pg_amcheck commands activated relevant protections too late or not at all during the process. This flaw allows an attacker with permission to create non-temporary objects in at least one schema to execute arbitrary SQL functions under a superuser identity.", "references": ["https://bugzilla.redhat.com/show_bug.cgi?id=2081126", "https://www.postgresql.org/about/news/postgresql-143-137-1211-1116-and-1021-released-2449/", "https://www.postgresql.org/support/security/CVE-2022-1552/"], "fixes": ["10.21-0ubuntu0.18.04.1"], "products": [{"name": "postgresql-10", "path": "vulns/ubuntu-18.04-lts/postgresql-10", "ecosystem": "Ubuntu:18.04:LTS"}]}, {"id": "CVE-2022-2625", "noindex": false, "published": "2022-08-18T00:00:00.000Z", "modified": "2024-08-03T00:46:03.361Z", "cvss": 8, "cvss_vector": "", "severity": "high", "epss": 0.02035, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2022-2625", "title": "CVE-2022-2625", "description": "A vulnerability was found in PostgreSQL. This attack requires permission to create non-temporary objects in at least one schema, the ability to lure or wait for an administrator to create or update an affected extension in that schema, and the ability to lure or wait for a victim to use the object targeted in CREATE OR REPLACE or CREATE IF NOT EXISTS. Given all three prerequisites, this flaw allows an attacker to run arbitrary code as the victim role, which may be a superuser.", "references": ["https://bugzilla.redhat.com/show_bug.cgi?id=2113825", "https://www.postgresql.org/about/news/postgresql-145-138-1212-1117-1022-and-15-beta-3-released-2496/", "https://security.gentoo.org/glsa/202211-04"], "fixes": ["10.22-0ubuntu0.18.04.1"], "products": [{"name": "postgresql-10", "path": "vulns/ubuntu-18.04-lts/postgresql-10", "ecosystem": "Ubuntu:18.04:LTS"}]}, {"id": "CVE-2021-23214", "noindex": false, "published": "2022-03-04T00:00:00.000Z", "modified": "2024-08-03T19:05:55.443Z", "cvss": 8.1, "cvss_vector": "", "severity": "high", "epss": 0.01901, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2021-23214", "title": "CVE-2021-23214", "description": "When the server is configured to use trust authentication with a clientcert requirement or to use cert authentication, a man-in-the-middle attacker can inject arbitrary SQL queries when a connection is first established, despite the use of SSL certificate verification and encryption.", "references": ["https://bugzilla.redhat.com/show_bug.cgi?id=2022666", "https://www.postgresql.org/support/security/CVE-2021-23214/", "https://git.postgresql.org/gitweb/?p=postgresql.git%3Ba=commit%3Bh=28e24125541545483093819efae9bca603441951"], "fixes": ["10.19-0ubuntu0.18.04.1"], "products": [{"name": "postgresql-10", "path": "vulns/ubuntu-18.04-lts/postgresql-10", "ecosystem": "Ubuntu:18.04:LTS"}]}, {"id": "CVE-2021-23222", "noindex": false, "published": "2022-03-02T00:00:00.000Z", "modified": "2024-08-03T19:05:54.487Z", "cvss": 5.9, "cvss_vector": "", "severity": "medium", "epss": 0.01501, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2021-23222", "title": "CVE-2021-23222", "description": "A man-in-the-middle attacker can inject false responses to the client's first few queries, despite the use of SSL certificate verification and encryption.", "references": ["https://bugzilla.redhat.com/show_bug.cgi?id=2022675", "https://www.postgresql.org/support/security/CVE-2021-23222/", "https://git.postgresql.org/gitweb/?p=postgresql.git%3Ba=commitdiff%3Bh=d83cdfdca9d918bbbd6bb209139b94c954da7228"], "fixes": ["10.19-0ubuntu0.18.04.1"], "products": [{"name": "postgresql-10", "path": "vulns/ubuntu-18.04-lts/postgresql-10", "ecosystem": "Ubuntu:18.04:LTS"}]}, {"id": "CVE-2021-32028", "noindex": false, "published": "2021-10-11T00:00:00.000Z", "modified": "2024-08-03T23:17:28.199Z", "cvss": 6.5, "cvss_vector": "", "severity": "medium", "epss": 0.01558, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2021-32028", "title": "CVE-2021-32028", "description": "A flaw was found in postgresql. Using an INSERT ... ON CONFLICT ... DO UPDATE command on a purpose-crafted table, an authenticated database user could read arbitrary bytes of server memory. The highest threat from this vulnerability is to data confidentiality.", "references": ["https://bugzilla.redhat.com/show_bug.cgi?id=1956877", "https://www.postgresql.org/support/security/CVE-2021-32028", "https://security.netapp.com/advisory/ntap-20211112-0003/"], "fixes": ["10.17-0ubuntu0.18.04.1"], "products": [{"name": "postgresql-10", "path": "vulns/ubuntu-18.04-lts/postgresql-10", "ecosystem": "Ubuntu:18.04:LTS"}]}, {"id": "CVE-2021-32027", "noindex": false, "published": "2021-06-01T00:00:00.000Z", "modified": "2024-08-03T23:17:27.885Z", "cvss": 8.8, "cvss_vector": "", "severity": "high", "epss": 0.0199, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2021-32027", "title": "CVE-2021-32027", "description": "A flaw was found in postgresql in versions before 13.3, before 12.7, before 11.12, before 10.17 and before 9.6.22. While modifying certain SQL array values, missing bounds checks let authenticated database users write arbitrary bytes to a wide area of server memory. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.", "references": ["https://bugzilla.redhat.com/show_bug.cgi?id=1956876", "https://www.postgresql.org/support/security/CVE-2021-32027/", "https://security.netapp.com/advisory/ntap-20210713-0004/"], "fixes": ["10.17-0ubuntu0.18.04.1"], "products": [{"name": "postgresql-10", "path": "vulns/ubuntu-18.04-lts/postgresql-10", "ecosystem": "Ubuntu:18.04:LTS"}]}, {"id": "CVE-2021-3449", "noindex": false, "published": "2021-03-25T14:25:13.659Z", "modified": "2026-10-08T21:13:50.095Z", "cvss": 5.9, "cvss_vector": "", "severity": "medium", "epss": 0.63542, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2021-3449", "title": "NULL pointer deref in signature_algorithms processing", "description": "An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renegotiation ClientHello omits the signature_algorithms extension (where it was present in the initial ClientHello), but includes a signature_algorithms_cert extension then a NULL pointer dereference will result, leading to a crash and a denial of service attack. A server is only vulnerable if it has TLSv1.2 and renegotiation enabled (which is the default configuration). OpenSSL TLS clients are not impacted by this issue. All OpenSSL 1.1.1 versions are affected by this issue. Users of these versions should upgrade to Op", "references": ["https://www.openssl.org/news/secadv/20210325.txt", "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=fb9fa6b51defd48157eeb207f52181f735d96148", "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-openssl-2021-GHY28dJd"], "fixes": ["10.18-0ubuntu0.18.04.1"], "products": [{"name": "postgresql-10", "path": "vulns/ubuntu-18.04-lts/postgresql-10", "ecosystem": "Ubuntu:18.04:LTS"}]}, {"id": "CVE-2020-25696", "noindex": false, "published": "2020-11-23T21:15:47.000Z", "modified": "2024-08-04T15:40:36.672Z", "cvss": 7.5, "cvss_vector": "", "severity": "high", "epss": 0.02698, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2020-25696", "title": "CVE-2020-25696", "description": "A flaw was found in the psql interactive terminal of PostgreSQL in versions before 13.1, before 12.5, before 11.10, before 10.15, before 9.6.20 and before 9.5.24. If an interactive psql session uses \\gset when querying a compromised server, the attacker can execute arbitrary code as the operating system account running psql. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.", "references": ["https://bugzilla.redhat.com/show_bug.cgi?id=1894430", "https://www.postgresql.org/about/news/postgresql-131-125-1110-1015-9620-and-9524-released-2111/", "https://lists.debian.org/debian-lts-announce/2020/12/msg00005.html"], "fixes": ["10.15-0ubuntu0.18.04.1"], "products": [{"name": "postgresql-10", "path": "vulns/ubuntu-18.04-lts/postgresql-10", "ecosystem": "Ubuntu:18.04:LTS"}]}, {"id": "CVE-2020-25695", "noindex": false, "published": "2020-11-16T00:40:36.000Z", "modified": "2024-08-04T15:40:36.702Z", "cvss": 8.8, "cvss_vector": "", "severity": "high", "epss": 0.4644, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2020-25695", "title": "CVE-2020-25695", "description": "A flaw was found in PostgreSQL versions before 13.1, before 12.5, before 11.10, before 10.15, before 9.6.20 and before 9.5.24. An attacker having permission to create non-temporary objects in at least one schema can execute arbitrary SQL functions under the identity of a superuser. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.", "references": ["https://www.postgresql.org/support/security/", "https://bugzilla.redhat.com/show_bug.cgi?id=1894425", "https://security.netapp.com/advisory/ntap-20201202-0003/"], "fixes": ["10.15-0ubuntu0.18.04.1"], "products": [{"name": "postgresql-10", "path": "vulns/ubuntu-18.04-lts/postgresql-10", "ecosystem": "Ubuntu:18.04:LTS"}]}, {"id": "CVE-2020-25694", "noindex": false, "published": "2020-11-16T00:38:53.000Z", "modified": "2024-08-04T15:40:36.685Z", "cvss": 8.1, "cvss_vector": "", "severity": "high", "epss": 0.01593, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2020-25694", "title": "CVE-2020-25694", "description": "A flaw was found in PostgreSQL versions before 13.1, before 12.5, before 11.10, before 10.15, before 9.6.20 and before 9.5.24. If a client application that creates additional database connections only reuses the basic connection parameters while dropping security-relevant parameters, an opportunity for a man-in-the-middle attack, or the ability to observe clear-text transmissions, could exist. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.", "references": ["https://bugzilla.redhat.com/show_bug.cgi?id=1894423", "https://www.postgresql.org/support/security/", "https://lists.debian.org/debian-lts-announce/2020/12/msg00005.html"], "fixes": ["10.15-0ubuntu0.18.04.1"], "products": [{"name": "postgresql-10", "path": "vulns/ubuntu-18.04-lts/postgresql-10", "ecosystem": "Ubuntu:18.04:LTS"}]}, {"id": "CVE-2020-14350", "noindex": false, "published": "2020-08-24T12:42:45.000Z", "modified": "2024-08-04T12:39:36.524Z", "cvss": 7.3, "cvss_vector": "", "severity": "high", "epss": 0.00532, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2020-14350", "title": "CVE-2020-14350", "description": "It was found that some PostgreSQL extensions did not use search_path safely in their installation script. An attacker with sufficient privileges could use this flaw to trick an administrator into executing a specially crafted script, during the installation or update of such extension. This affects PostgreSQL versions before 12.4, before 11.9, before 10.14, before 9.6.19, and before 9.5.23.", "references": ["http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00043.html", "http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00044.html", "http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00049.html"], "fixes": ["10.14-0ubuntu0.18.04.1"], "products": [{"name": "postgresql-10", "path": "vulns/ubuntu-18.04-lts/postgresql-10", "ecosystem": "Ubuntu:18.04:LTS"}]}, {"id": "CVE-2020-14349", "noindex": false, "published": "2020-08-24T12:32:13.000Z", "modified": "2024-08-04T12:39:36.599Z", "cvss": 7.1, "cvss_vector": "", "severity": "high", "epss": 0.02235, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2020-14349", "title": "CVE-2020-14349", "description": "It was found that PostgreSQL versions before 12.4, before 11.9 and before 10.14 did not properly sanitize the search_path during logical replication. An authenticated attacker could use this flaw in an attack similar to CVE-2018-1058, in order to execute arbitrary SQL command in the context of the user used for replication.", "references": ["http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00044.html", "http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00049.html", "http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00050.html"], "fixes": ["10.14-0ubuntu0.18.04.1"], "products": [{"name": "postgresql-10", "path": "vulns/ubuntu-18.04-lts/postgresql-10", "ecosystem": "Ubuntu:18.04:LTS"}]}, {"id": "CVE-2020-1720", "noindex": false, "published": "2020-03-17T15:28:24.000Z", "modified": "2024-08-04T06:46:30.847Z", "cvss": 3.1, "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N", "severity": "low", "epss": 0.01183, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2020-1720", "title": "CVE-2020-1720", "description": "A flaw was found in PostgreSQL's \"ALTER ... DEPENDS ON EXTENSION\", where sub-commands did not perform authorization checks. An authenticated attacker could use this flaw in certain configurations to perform drop objects such as function, triggers, et al., leading to database corruption. This issue affects PostgreSQL versions before 12.2, before 11.7, before 10.12 and before 9.6.17.", "references": ["https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1720", "https://www.postgresql.org/about/news/2011/", "http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00043.html"], "fixes": ["10.12-0ubuntu0.18.04.1"], "products": [{"name": "postgresql-10", "path": "vulns/ubuntu-18.04-lts/postgresql-10", "ecosystem": "Ubuntu:18.04:LTS"}]}, {"id": "CVE-2019-10208", "noindex": false, "published": "2019-10-29T13:13:12.000Z", "modified": "2024-08-04T22:17:18.925Z", "cvss": 7.5, "cvss_vector": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "severity": "high", "epss": 0.02188, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2019-10208", "title": "CVE-2019-10208", "description": "A flaw was discovered in postgresql versions 9.4.x before 9.4.24, 9.5.x before 9.5.19, 9.6.x before 9.6.15, 10.x before 10.10 and 11.x before 11.5 where arbitrary SQL statements can be executed given a suitable SECURITY DEFINER function. An attacker, with EXECUTE permission on the function, can execute arbitrary SQL as the owner of the function.", "references": ["https://www.postgresql.org/about/news/1960/", "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10208", "http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00043.html"], "fixes": ["10.10-0ubuntu0.18.04.1"], "products": [{"name": "postgresql-10", "path": "vulns/ubuntu-18.04-lts/postgresql-10", "ecosystem": "Ubuntu:18.04:LTS"}]}, {"id": "CVE-2019-10130", "noindex": false, "published": "2019-07-30T16:13:46.000Z", "modified": "2024-08-04T22:10:09.927Z", "cvss": 3.1, "cvss_vector": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N", "severity": "low", "epss": 0.01085, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2019-10130", "title": "CVE-2019-10130", "description": "A vulnerability was found in PostgreSQL versions 11.x up to excluding 11.3, 10.x up to excluding 10.8, 9.6.x up to, excluding 9.6.13, 9.5.x up to, excluding 9.5.17. PostgreSQL maintains column statistics for tables. Certain statistics, such as histograms and lists of most common values, contain values taken from the column. PostgreSQL does not evaluate row security policies before consulting those statistics during query planning; an attacker can exploit this to read the most common values of certain columns. Affected columns are those for which the attacker has SELECT privilege and for which, in an ordinary query, row-level security prunes t", "references": ["https://www.postgresql.org/about/news/1939/", "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10130", "https://security.gentoo.org/glsa/202003-03"], "fixes": ["10.8-0ubuntu0.18.04.1"], "products": [{"name": "postgresql-10", "path": "vulns/ubuntu-18.04-lts/postgresql-10", "ecosystem": "Ubuntu:18.04:LTS"}]}, {"id": "CVE-2019-10164", "noindex": false, "published": "2019-06-26T15:29:13.000Z", "modified": "2024-08-04T22:10:10.043Z", "cvss": 7.5, "cvss_vector": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "severity": "high", "epss": 0.03643, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2019-10164", "title": "CVE-2019-10164", "description": "PostgreSQL versions 10.x before 10.9 and versions 11.x before 11.4 are vulnerable to a stack-based buffer overflow. Any authenticated user can overflow a stack-based buffer by changing the user's own password to a purpose-crafted value. This often suffices to execute arbitrary code as the PostgreSQL operating system account.", "references": ["https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10164", "https://www.postgresql.org/about/news/1949/", "http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00035.html"], "fixes": ["10.9-0ubuntu0.18.04.1"], "products": [{"name": "postgresql-10", "path": "vulns/ubuntu-18.04-lts/postgresql-10", "ecosystem": "Ubuntu:18.04:LTS"}]}, {"id": "CVE-2018-16850", "noindex": false, "published": "2018-11-13T15:00:00.000Z", "modified": "2024-08-05T10:32:54.106Z", "cvss": 8, "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H", "severity": "high", "epss": 0.0515, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2018-16850", "title": "CVE-2018-16850", "description": "postgresql before versions 11.1, 10.6 is vulnerable to a to SQL injection in pg_upgrade and pg_dump via CREATE TRIGGER ... REFERENCING. Using a purpose-crafted trigger definition, an attacker can cause arbitrary SQL statements to run, with superuser privileges.", "references": ["https://usn.ubuntu.com/3818-1/", "https://access.redhat.com/errata/RHSA-2018:3757", "https://www.postgresql.org/about/news/1905/"], "fixes": ["10.6-0ubuntu0.18.04.1"], "products": [{"name": "postgresql-10", "path": "vulns/ubuntu-18.04-lts/postgresql-10", "ecosystem": "Ubuntu:18.04:LTS"}]}, {"id": "CVE-2018-10925", "noindex": false, "published": "2018-08-09T21:00:00.000Z", "modified": "2024-08-05T07:54:36.061Z", "cvss": 7.1, "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N", "severity": "high", "epss": 0.02241, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2018-10925", "title": "CVE-2018-10925", "description": "It was discovered that PostgreSQL versions before 10.5, 9.6.10, 9.5.14, 9.4.19, and 9.3.24 failed to properly check authorization on certain statements involved with \"INSERT ... ON CONFLICT DO UPDATE\". An attacker with \"CREATE TABLE\" privileges could exploit this to read arbitrary bytes server memory. If the attacker also had certain \"INSERT\" and limited \"UPDATE\" privileges to a particular table, they could exploit this to update other columns in the same table.", "references": ["https://security.gentoo.org/glsa/201810-08", "https://www.debian.org/security/2018/dsa-4269", "http://www.securityfocus.com/bid/105052"], "fixes": ["10.5-0ubuntu0.18.04"], "products": [{"name": "postgresql-10", "path": "vulns/ubuntu-18.04-lts/postgresql-10", "ecosystem": "Ubuntu:18.04:LTS"}]}], "total": 23, "unknown_count": 0, "release_unconfirmed": false, "page": 1, "pages": 2, "filtered": false, "noindex": false, "filters": {}, "page_size": 20, "products": [{"name": "postgresql-10", "path": "vulns/ubuntu-18.04-lts/postgresql-10", "ecosystem": "Ubuntu:18.04:LTS"}], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}, {"name": "web", "path": "vulns/stack/web", "slug": "web"}, {"name": "php", "path": "vulns/stack/php", "slug": "php"}, {"name": "python", "path": "vulns/stack/python", "slug": "python"}, {"name": "node", "path": "vulns/stack/node", "slug": "node"}, {"name": "database", "path": "vulns/stack/database", "slug": "database"}, {"name": "containers", "path": "vulns/stack/containers", "slug": "containers"}, {"name": "network", "path": "vulns/stack/network", "slug": "network"}, {"name": "applications", "path": "vulns/stack/applications", "slug": "applications"}], "versions": [], "stats": {"recent": 0, "kev": 0}, "lastmod": "2026-10-08T21:13:50.095Z", "early_advisories": [], "license": "You may freely use the PatchFirst selection and our additions (priorities, early warnings, texts, summaries and aggregates) for your own purposes, including internal business use. Resale, commercial distribution and bulk mirroring of this selection or these additions require a written agreement with the operator. Whenever you use or publish the selection or our additions, credit PatchFirst (https://patchfirst.dev/vulns/) with this link to the regional feed page. Original records from open sources remain subject to their respective licenses and terms. These conditions do not restrict your rights to the original data, which you can obtain directly from those sources.", "terms_url": "https://patchfirst.dev/vulns/#feed-terms", "attribution": {"name": "PatchFirst", "url": "https://patchfirst.dev/vulns/"}, "source_changes": "Records are selected, normalized and combined by PatchFirst; summaries and translations may be added. News is credited with a link to the original source in each entry.", "sources": [{"id": "cve", "name": "CVE List / CVE.org", "url": "https://www.cve.org/", "license": "CVE Terms of Use", "terms_url": "https://www.cve.org/Legal/TermsOfUse", "notice": "Copyright © 1999–2021, The MITRE Corporation. LICENSE Submissions : For all materials you submit to the Common Vulnerabilities and Exposures (CVE™), you hereby grant to The MITRE Corporation (MITRE) and all CVE Numbering Authorities (CNAs) a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute such materials and derivative works. Unless required by applicable law or agreed to in writing, you provide such materials on an \"AS IS\" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied, including, without limitation, any warranties or conditions of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A PARTICULAR PURPOSE. CVE Usage : MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE™). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy. DISCLAIMERS ALL DOCUMENTS AND THE INFORMATION CONTAINED THEREIN PROVIDED BY MITRE ARE PROVIDED ON AN \"AS IS\" BASIS AND THE CONTRIBUTOR, THE ORGANIZATION HE/SHE REPRESENTS OR IS SPONSORED BY (IF ANY), THE MITRE CORPORATION, ITS BOARD OF TRUSTEES, OFFICERS, AGENTS, AND EMPLOYEES, DISCLAIM ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTY THAT THE USE OF THE INFORMATION THEREIN WILL NOT INFRINGE ANY RIGHTS OR ANY IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE."}, {"id": "osv", "name": "OSV", "url": "https://osv.dev/", "terms_url": "https://google.github.io/osv.dev/data/", "terms": "Upstream licenses vary; see the source catalog."}, {"id": "kev", "name": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog", "license": "CC0-1.0", "terms_url": "https://github.com/cisagov/kev-data/blob/develop/LICENSE"}, {"id": "epss", "name": "FIRST EPSS", "url": "https://www.first.org/epss/", "terms_url": "https://www.first.org/epss/faq", "terms": "Free public scores; attribution requested (FIRST EPSS, scores generated by Empirical Security)."}, {"id": "github-advisory", "name": "GitHub Advisory Database", "url": "https://github.com/advisories", "license": "CC-BY-4.0", "terms_url": "https://github.com/github/advisory-database/blob/main/LICENSE.md"}, {"id": "exploitdb", "name": "Exploit-DB", "url": "https://www.exploit-db.com/", "license": "GPL-2.0", "terms_url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/LICENSE.md"}, {"id": "metasploit", "name": "Metasploit", "url": "https://github.com/rapid7/metasploit-framework", "license": "BSD-3-Clause", "terms_url": "https://github.com/rapid7/metasploit-framework/blob/master/LICENSE", "notice": "Copyright (c) 2006-2026, Rapid7, Inc.\nLicense: BSD-3-clause\n Redistribution and use in source and binary forms, with or without modification,\n are permitted provided that the following conditions are met:\n .\n * Redistributions of source code must retain the above copyright notice,\n this list of conditions and the following disclaimer.\n .\n * Redistributions in binary form must reproduce the above copyright notice,\n this list of conditions and the following disclaimer in the documentation\n and/or other materials provided with the distribution.\n .\n * Neither the name of Rapid7, Inc. nor the names of its contributors\n may be used to endorse or promote products derived from this software\n without specific prior written permission.\n .\n THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS \"AS IS\" AND\n ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED\n WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE\n DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR\n ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES\n (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;\n LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON\n ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT\n (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS\n SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE."}, {"id": "nuclei", "name": "Nuclei Templates", "url": "https://github.com/projectdiscovery/nuclei-templates", "license": "MIT", "terms_url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/LICENSE.md", "notice": "MIT License\n\nCopyright (c) 2025 ProjectDiscovery, Inc.\n\nPermission is hereby granted, free of charge, to any person obtaining a copy\nof this software and associated documentation files (the \"Software\"), to deal\nin the Software without restriction, including without limitation the rights\nto use, copy, modify, merge, publish, distribute, sublicense, and/or sell\ncopies of the Software, and to permit persons to whom the Software is\nfurnished to do so, subject to the following conditions:\n\nThe above copyright notice and this permission notice shall be included in all\ncopies or substantial portions of the Software.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\nIMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\nFITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE\nAUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\nLIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,\nOUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE\nSOFTWARE."}, {"id": "linux-kernel", "name": "Linux kernel releases", "url": "https://www.kernel.org/", "license": "CC-BY-SA-4.0", "terms_url": "https://www.kernel.org/legal.html", "notice": "Copyright (C) 1997-2014 by The Linux Kernel Organization, Inc."}]}