{"metadata": {"vulnerability": "CVE-2016-2193", "count": 63, "kinds": {"milestone": 24, "sighting": 4, "kev": 0, "other": 35}}, "data": [{"timestamp": "2016-01-29T00:00:00Z", "date_only": false, "value": "2016-01-29T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2016-2193", "field": "cveMetadata.dateReserved"}, {"timestamp": "2016-03-31T00:00:00Z", "date_only": false, "value": "2016-03-31T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / redhat", "record": "CVE-2016-2193", "field": "containers.cna.datePublic"}, {"timestamp": "2016-04-03T22:00:00Z", "date_only": false, "value": "2016-04-03T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2489", "record": "WID-SEC-W-2023-2489", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2016-04-03T22:00:00Z", "date_only": false, "value": "2016-04-03T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2489", "record": "WID-SEC-W-2023-2489", "field": "document.tracking.initial_release_date"}, {"timestamp": "2016-04-03T22:00:00Z", "date_only": false, "value": "2016-04-03T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2489", "record": "WID-SEC-W-2023-2489", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2016-04-11T15:00:00Z", "date_only": false, "value": "2016-04-11T15:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2016-2193", "field": "cveMetadata.datePublished"}, {"timestamp": "2016-04-11T15:59:00Z", "date_only": false, "value": "2016-04-11T15:59:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-V26H-59P8-6X7C", "record": "GHSA-V26H-59P8-6X7C", "field": "database_specific.nvd_published_at"}, {"timestamp": "2016-04-11T15:59:00Z", "date_only": false, "value": "2016-04-11T15:59Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2016-2193", "record": "GSD-2016-2193", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2016-04-11T15:59:04.500Z", "date_only": false, "value": "2016-04-11T15:59:04.500", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2016-2193", "record": "FKIE_CVE-2016-2193", "field": "published"}, {"timestamp": "2016-04-12T00:00:00Z", "date_only": true, "value": "2016-04-12", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2016-02169", "record": "CNVD-2016-02169", "field": "submitTime"}, {"timestamp": "2016-04-13T00:00:00Z", "date_only": true, "value": "2016-04-13", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2016-02169", "record": "CNVD-2016-02169", "field": "openTime"}, {"timestamp": "2017-09-02T09:57:01Z", "date_only": false, "value": "2017-09-02T09:57:01.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / redhat", "record": "CVE-2016-2193", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2017-09-03T01:29:00Z", "date_only": false, "value": "2017-09-03T01:29Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2016-2193", "record": "GSD-2016-2193", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2022-05-17T01:18:15Z", "date_only": false, "value": "2022-05-17T01:18:15Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-V26H-59P8-6X7C", "record": "GHSA-V26H-59P8-6X7C", "field": "published"}, {"timestamp": "2023-09-27T22:00:00Z", "date_only": false, "value": "2023-09-27T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2489", "record": "WID-SEC-W-2023-2489", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2023-12-12T23:00:00Z", "date_only": false, "value": "2023-12-12T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2489", "record": "WID-SEC-W-2023-2489", "field": "document.tracking.revision_history.3.date"}, {"timestamp": "2023-12-13T01:21:19.279Z", "date_only": false, "value": "2023-12-13T01:21:19.279450Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2016-2193", "record": "GSD-2016-2193", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:10273-1", "record": "OPENSUSE-SU-2024:10273-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:10273-1", "record": "OPENSUSE-SU-2024:10273-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:10273-1", "record": "OPENSUSE-SU-2024:10273-1", "field": "document.tracking.generator.date"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:10273-1", "record": "OPENSUSE-SU-2024:10273-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-08-05T23:24:48.639Z", "date_only": false, "value": "2024-08-05T23:24:48.639Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2016-2193", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-05T23:24:48.639Z", "date_only": false, "value": "2024-08-05T23:24:48.639Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2016-2193", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-11-14T13:05:05.005Z", "date_only": false, "value": "2024-11-14T13:05:05.005170Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/113481449755283145", "record": "CVE-2016-2193", "field": "creation_timestamp", "uuid": "cef1c036-ee70-46ad-8aa4-2b07709674fa", "url": "https://infosec.exchange/users/cve/statuses/113481449755283145"}, {"timestamp": "2024-11-14T14:59:09Z", "date_only": false, "value": "2024-11-14T14:59:09.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/10948", "record": "CVE-2016-2193", "field": "creation_timestamp", "uuid": "fd4a5f32-41b1-4053-8209-3337c4bc8b06", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-10976 - PostgreSQL Row Security Policy Reuse Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-10976 \nPublished : Nov. 14, 2024, 1:15 p.m. | 39\u00a0minutes ago \nDescription : Incomplete tracking in PostgreSQL of tables with row security allows a reused query to view or change different rows from those intended.  CVE-2023-2455 and CVE-2016-2193 fixed most interaction between row security and user ID changes.  They missed cases where a subquery, WITH query, security invoker view, or SQL-language function references a table with a row-level security policy.  This has the same consequences as the two earlier CVEs.  That is to say, it leads to potentially incorrect policies being applied in cases where role-specific policies are used and a given query is planned under one role and then executed under other roles.  This scenario can happen under security definer functions or when a common user and query is planned initially and then re-used across multiple SET ROLEs.  Applying an incorrect policy may permit a user to complete otherwise-forbidden reads and modifications.  This affects only databases that have used CREATE POLICY to define a row security policy.  An attacker must tailor an attack to a particular application's pattern of query plan reuse, user ID changes, and role-specific row security policies.  Versions before PostgreSQL 17.1, 16.5, 15.9, 14.14, 13.17, and 12.21 are affected. \nSeverity: 4.2 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/10948"}, {"timestamp": "2024-12-19T23:00:00Z", "date_only": false, "value": "2024-12-19T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2489", "record": "WID-SEC-W-2023-2489", "field": "document.tracking.revision_history.4.date"}, {"timestamp": "2025-01-28T00:00:00Z", "date_only": true, "value": "2025-01-28", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0086", "record": "CERTFR-2025-AVI-0086", "field": "vendor_advisories.3.published_at"}, {"timestamp": "2025-01-28T23:00:00Z", "date_only": false, "value": "2025-01-28T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2489", "record": "WID-SEC-W-2023-2489", "field": "document.tracking.revision_history.5.date"}, {"timestamp": "2025-01-29T00:00:00Z", "date_only": true, "value": "2025-01-29", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0086", "record": "CERTFR-2025-AVI-0086", "field": "vendor_advisories.5.published_at"}, {"timestamp": "2025-01-30T00:00:00Z", "date_only": true, "value": "2025-01-30", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0086", "record": "CERTFR-2025-AVI-0086", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2025-01-31T00:00:00Z", "date_only": false, "value": "2025-01-31T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0086", "record": "CERTFR-2025-AVI-0086", "field": "last_revision_date"}, {"timestamp": "2025-01-31T00:00:00Z", "date_only": false, "value": "2025-01-31T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0086", "record": "CERTFR-2025-AVI-0086", "field": "initial_release_date"}, {"timestamp": "2025-01-31T00:00:00Z", "date_only": false, "value": "2025-01-31T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0086", "record": "CERTFR-2025-AVI-0086", "field": "revisions.0.revision_date"}, {"timestamp": "2025-02-02T00:00:00Z", "date_only": true, "value": "2025-02-02", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0106", "record": "CERTFR-2025-AVI-0106", "field": "vendor_advisories.2.published_at"}, {"timestamp": "2025-02-03T00:00:00Z", "date_only": true, "value": "2025-02-03", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0106", "record": "CERTFR-2025-AVI-0106", "field": "vendor_advisories.1.published_at"}, {"timestamp": "2025-02-03T23:00:00Z", "date_only": false, "value": "2025-02-03T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2489", "record": "WID-SEC-W-2023-2489", "field": "document.tracking.revision_history.6.date"}, {"timestamp": "2025-02-03T23:00:00Z", "date_only": false, "value": "2025-02-03T23:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2489", "record": "WID-SEC-W-2023-2489", "field": "document.tracking.current_release_date"}, {"timestamp": "2025-02-04T00:00:00Z", "date_only": true, "value": "2025-02-04", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0106", "record": "CERTFR-2025-AVI-0106", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2025-02-04T09:24:11.883Z", "date_only": false, "value": "2025-02-04T09:24:11.883+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2489", "record": "WID-SEC-W-2023-2489", "field": "document.tracking.generator.date"}, {"timestamp": "2025-02-05T00:00:00Z", "date_only": true, "value": "2025-02-05", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0106", "record": "CERTFR-2025-AVI-0106", "field": "vendor_advisories.4.published_at"}, {"timestamp": "2025-02-07T00:00:00Z", "date_only": false, "value": "2025-02-07T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0106", "record": "CERTFR-2025-AVI-0106", "field": "last_revision_date"}, {"timestamp": "2025-02-07T00:00:00Z", "date_only": false, "value": "2025-02-07T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0106", "record": "CERTFR-2025-AVI-0106", "field": "initial_release_date"}, {"timestamp": "2025-02-07T00:00:00Z", "date_only": false, "value": "2025-02-07T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0106", "record": "CERTFR-2025-AVI-0106", "field": "revisions.0.revision_date"}, {"timestamp": "2025-02-14T10:03:10Z", "date_only": false, "value": "2025-02-14T10:03:10.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/T7bmhZyyY3q44NdwHtBlh__0uklY8nk4hbekeMxCZg_wv81B", "record": "CVE-2016-2193", "field": "creation_timestamp", "uuid": "a5bf0c2e-d706-4f01-9db4-46a73fc60395"}, {"timestamp": "2025-04-12T12:58:18Z", "date_only": false, "value": "2025-04-12T12:58:18Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-V26H-59P8-6X7C", "record": "GHSA-V26H-59P8-6X7C", "field": "modified"}, {"timestamp": "2025-05-09T20:26:17Z", "date_only": false, "value": "2025-05-09T20:26:17.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/15841", "record": "CVE-2016-2193", "field": "creation_timestamp", "uuid": "962edaf2-bb3c-43a3-bba0-e1fcfcb61716", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-10976\n\ud83d\udd25 CVSS Score: 4.2 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N)\n\ud83d\udd39 Description: Incomplete tracking in PostgreSQL of tables with row security allows a reused query to view or change different rows from those intended.  CVE-2023-2455 and CVE-2016-2193 fixed most interaction between row security and user ID changes.  They missed cases where a subquery, WITH query, security invoker view, or SQL-language function references a table with a row-level security policy.  This has the same consequences as the two earlier CVEs.  That is to say, it leads to potentially incorrect policies being applied in cases where role-specific policies are used and a given query is planned under one role and then executed under other roles.  This scenario can happen under security definer functions or when a common user and query is planned initially and then re-used across multiple SET ROLEs.  Applying an incorrect policy may permit a user to complete otherwise-forbidden reads and modifications.  This affects only databases that have used CREATE POLICY to define a row security policy.  An attacker must tailor an attack to a particular application's pattern of query plan reuse, user ID changes, and role-specific row security policies.  Versions before PostgreSQL 17.1, 16.5, 15.9, 14.14, 13.17, and 12.21 are affected.\n\ud83d\udccf Published: 2024-11-14T13:00:01.930Z\n\ud83d\udccf Modified: 2025-05-09T20:03:32.584Z\n\ud83d\udd17 References:\n1. https://www.postgresql.org/support/security/CVE-2024-10976/", "url": "https://t.me/DarkWebInformer_CVEAlerts/15841"}, {"timestamp": "2025-05-13T00:00:00Z", "date_only": true, "value": "2025-05-13", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0401", "record": "CERTFR-2025-AVI-0401", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2025-05-14T00:00:00Z", "date_only": false, "value": "2025-05-14T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0401", "record": "CERTFR-2025-AVI-0401", "field": "initial_release_date"}, {"timestamp": "2025-05-14T00:00:00Z", "date_only": false, "value": "2025-05-14T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0401", "record": "CERTFR-2025-AVI-0401", "field": "revisions.0.revision_date"}, {"timestamp": "2025-05-30T00:00:00Z", "date_only": false, "value": "2025-05-30T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0401", "record": "CERTFR-2025-AVI-0401", "field": "last_revision_date"}, {"timestamp": "2025-05-30T00:00:00Z", "date_only": false, "value": "2025-05-30T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0401", "record": "CERTFR-2025-AVI-0401", "field": "revisions.1.revision_date"}, {"timestamp": "2026-01-23T00:00:00Z", "date_only": true, "value": "2026-01-23", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0109", "record": "CERTFR-2026-AVI-0109", "field": "vendor_advisories.4.published_at"}, {"timestamp": "2026-01-25T00:00:00Z", "date_only": true, "value": "2026-01-25", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0109", "record": "CERTFR-2026-AVI-0109", "field": "vendor_advisories.12.published_at"}, {"timestamp": "2026-01-26T00:00:00Z", "date_only": true, "value": "2026-01-26", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0109", "record": "CERTFR-2026-AVI-0109", "field": "vendor_advisories.6.published_at"}, {"timestamp": "2026-01-27T00:00:00Z", "date_only": true, "value": "2026-01-27", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0109", "record": "CERTFR-2026-AVI-0109", "field": "vendor_advisories.1.published_at"}, {"timestamp": "2026-01-28T00:00:00Z", "date_only": true, "value": "2026-01-28", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0109", "record": "CERTFR-2026-AVI-0109", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2026-01-29T00:00:00Z", "date_only": true, "value": "2026-01-29", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0109", "record": "CERTFR-2026-AVI-0109", "field": "vendor_advisories.14.published_at"}, {"timestamp": "2026-01-30T00:00:00Z", "date_only": false, "value": "2026-01-30T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0109", "record": "CERTFR-2026-AVI-0109", "field": "last_revision_date"}, {"timestamp": "2026-01-30T00:00:00Z", "date_only": false, "value": "2026-01-30T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0109", "record": "CERTFR-2026-AVI-0109", "field": "initial_release_date"}, {"timestamp": "2026-01-30T00:00:00Z", "date_only": false, "value": "2026-01-30T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0109", "record": "CERTFR-2026-AVI-0109", "field": "revisions.0.revision_date"}, {"timestamp": "2026-06-17T00:43:38.623Z", "date_only": false, "value": "2026-06-17T00:43:38.623", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2016-2193", "record": "FKIE_CVE-2016-2193", "field": "lastModified"}, {"timestamp": "2026-09-20T19:55:41Z", "date_only": false, "value": "2026-09-20T19:55:41Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:10273-1", "record": "OPENSUSE-SU-2024:10273-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T19:55:41Z", "date_only": false, "value": "2026-09-20T19:55:41Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:10273-1", "record": "OPENSUSE-SU-2024:10273-1", "field": "document.tracking.current_release_date"}]}
