DALIBO

Records24All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high7CVSS 7.0–8.9

Exploited now

DALIBO records in CISA KEV

No DALIBO vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Anonymizer 3 records MEDIUM Postgresql Anonymizer 2 records LOW

Records

3 records in Anonymizer · all components

TI-2024-02174 CVE-2024-2339 · GHSA-fvc5-hrmq-8hx4

Improper Input Validation in PostgreSQL Anonymizer 1.2 allows table owner to gain superuser privileges via masking rule

MEDIUM 41

PostgreSQL Anonymizer v1.2 contains a vulnerability that allows a user who owns a table to elevate to superuser.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00552 Published 2024-03-08 Fixed in 1.3.0 CWE-20

TI-2026-08447 CVE-2026-9617 · GHSA-2qfw-46cx-cgv6

PostgreSQL Anonymizer: malicious column name allows SQL injection via anon.k_anonymity() function

MEDIUM 40

PostgreSQL Anonymizer contains a vulnerability that allows a user to gain superuser privileges by creating a table and placing malicious code inside a column identifier.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0025 Published 2026-05-27 Fixed in 3.1.0 CWE-89

TI-2024-02173 CVE-2024-2338 · GHSA-vc6j-mx82-hrhh

SQL Injection in PostgreSQL Anonymizer 1.2 allows table owner to gain superuser privileges via masking rule

LOW 37

PostgreSQL Anonymizer v1.2 contains a SQL injection vulnerability that allows a user who owns a table to elevate to superuser when dynamic masking is enabled.

CVSS 3.1HIGH 8.0 Network High privileges No interaction EPSS 0.00461 Published 2024-03-08 Fixed in 1.3.0 CWE-89

Open these records in search →

Critical	0
High	7
Medium	15
Low	2
No CVSS	0