Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Advisory: Red Hat postgresql — DSA-4028 Clear all filters
TI-2017-11073 CVE-2017-15099 · GHSA-pcph-v7q2-77cx

Information disclosure in Red Hat postgresql

Priority LOW 38

INSERT ... ON CONFLICT DO UPDATE commands in PostgreSQL 10.x before 10.1, 9.6.x before 9.6.6, and 9.5.x before 9.5.10 disclose table contents that the invoker lacks privilege to read.

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.06324 Published 2017-11-22 Fixed CWE-200
TI-2017-11072 CVE-2017-15098 · GHSA-4r9v-fq66-c5gx

Information disclosure in Red Hat postgresql

Priority MEDIUM 42

Invalid json_populate_recordset or jsonb_populate_recordset function calls in PostgreSQL 10.x before 10.1, 9.6.x before 9.6.6, 9.5.x before 9.5.10, 9.4.x before 9.4.15, and 9.3.x before 9.3.20 can crash the server or dis…

CVSS 3.0HIGH 8.1 Network Low privileges No interaction EPSS 0.03723 Published 2017-11-22 Partial fix CWE-200