https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 14 Nov 2026 20:34:13 +0000 https://db.gcve.eu/vuln/certfr-2026-avi-1530 certfr-2026-avi-1530 https://db.gcve.eu/vuln/certfr-2026-avi-1530 https://db.gcve.eu/vuln/fkie_cve-2026-116317 <p>Heap-based buffer overflow in PostgreSQL ts_rank_cd() may allow a database user to execute arbitrary code as the operating system user running the database, via an invalid tsvector containing duplicate positions. Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected.</p> <p>Heap-based buffer overflow in PostgreSQL ts_rank_cd() may allow a database user to execute arbitrary code as the operating system user running the database, via an invalid tsvector containing duplicate positions. Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected.</p> https://db.gcve.eu/vuln/fkie_cve-2026-116317 https://db.gcve.eu/vuln/ghsa-ccpf-r36p-xpv9 <p>Heap-based buffer overflow in PostgreSQL ts_rank_cd() may allow a database user to execute arbitrary code as the operating system user running the database, via an invalid tsvector containing duplicate positions. Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected.</p> <p>Heap-based buffer overflow in PostgreSQL ts_rank_cd() may allow a database user to execute arbitrary code as the operating system user running the database, via an invalid tsvector containing duplicate positions. Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected.</p> https://db.gcve.eu/vuln/ghsa-ccpf-r36p-xpv9 https://db.gcve.eu/vuln/msrc_cve-2026-116317 msrc_CVE-2026-116317 https://db.gcve.eu/vuln/msrc_cve-2026-116317 https://db.gcve.eu/vuln/opensuse-su-2026:12550-1 <p>postgresql14-14.25-1.1 on GA media</p> <p>postgresql14-14.25-1.1 on GA media</p> https://db.gcve.eu/vuln/opensuse-su-2026:12550-1 https://db.gcve.eu/vuln/rhsa-2026:99821 <p>postgresql: postgresql: Arbitrary code execution via type confusion in data definition commands postgresql: postgresql: Privilege escalation via uncontrolled search path in extension management postgresql: postgresql: Persistent Denial of Service via arbitrary file append in sslkeylogfile parameter postgresql: postgresql: Security restriction bypass via INSERT ON CONFLICT on auto-updatable views postgresql: postgresql: Information disclosure in pg_basebackup via crafted backup manifest postgresql: postgresql: Arbitrary code execution via type confusion in SQL-language functions postgresql: PostgreSQL: Unauthorized execution of restricted cast functions via type conversion operations postgresql: postgresql: Arbitrary code execution via use-after-free in parallel worker coordination postgresql: postgresql: Arbitrary code execution via composite-value field assignment type confusion postgresql: postgresql: Arbitrary code execution via use-after-free in plperl postgresql: postgresql: Information disclosure via zero-length token in dict_int postgresql: postgresql: Arbitrary code execution via type confusion in PL/Perl postgresql: postgresql: Information disclosure via use-after-free in COPY FROM error reporting postgresql: postgresql: row-level security bypass via DROP OWNED postgresql: postgresql: Incorrect trigger row processing via partitioned table MERGE postgresql: postgresql: Privilege escalation via untrusted search path in vacuumdb postgresql: postgresql: Arbitrary code e…</p> <p>postgresql: postgresql: Arbitrary code execution via type confusion in data definition commands postgresql: postgresql: Privilege escalation via uncontrolled search path in extension management postgresql: postgresql: Persistent Denial of Service via arbitrary file append in sslkeylogfile parameter postgresql: postgresql: Security restriction bypass via INSERT ON CONFLICT on auto-updatable views postgresql: postgresql: Information disclosure in pg_basebackup via crafted backup manifest postgresql: postgresql: Arbitrary code execution via type confusion in SQL-language functions postgresql: PostgreSQL: Unauthorized execution of restricted cast functions via type conversion operations postgresql: postgresql: Arbitrary code execution via use-after-free in parallel worker coordination postgresql: postgresql: Arbitrary code execution via composite-value field assignment type confusion postgresql: postgresql: Arbitrary code execution via use-after-free in plperl postgresql: postgresql: Information disclosure via zero-length token in dict_int postgresql: postgresql: Arbitrary code execution via type confusion in PL/Perl postgresql: postgresql: Information disclosure via use-after-free in COPY FROM error reporting postgresql: postgresql: row-level security bypass via DROP OWNED postgresql: postgresql: Incorrect trigger row processing via partitioned table MERGE postgresql: postgresql: Privilege escalation via untrusted search path in vacuumdb postgresql: postgresql: Arbitrary code e…</p> https://db.gcve.eu/vuln/rhsa-2026:99821 https://db.gcve.eu/vuln/ubuntu-cve-2026-116317 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: postgresql-9.3, Ubuntu:Pro:16.04:LTS: postgresql-9.5, Ubuntu:Pro:18.04:LTS: postgresql-10, Ubuntu:20.04:LTS: postgresql-12, Ubuntu:22.04:LTS: postgresql-14, Ubuntu:24.04:LTS: postgresql-16, Ubuntu:26.10: postgresql-18, Ubuntu:26.04:LTS: postgresql-18</p> <p>Heap-based buffer overflow in PostgreSQL ts_rank_cd() may allow a database user to execute arbitrary code as the operating system user running the database, via an invalid tsvector containing duplicate positions. Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: postgresql-9.3, Ubuntu:Pro:16.04:LTS: postgresql-9.5, Ubuntu:Pro:18.04:LTS: postgresql-10, Ubuntu:20.04:LTS: postgresql-12, Ubuntu:22.04:LTS: postgresql-14, Ubuntu:24.04:LTS: postgresql-16, Ubuntu:26.10: postgresql-18, Ubuntu:26.04:LTS: postgresql-18</p> <p>Heap-based buffer overflow in PostgreSQL ts_rank_cd() may allow a database user to execute arbitrary code as the operating system user running the database, via an invalid tsvector containing duplicate positions. Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected.</p> https://db.gcve.eu/vuln/ubuntu-cve-2026-116317 https://db.gcve.eu/vuln/wid-sec-w-2026-4571 <p>Ein Angreifer kann mehrere Schwachstellen in PostgreSQL ausnutzen, um beliebigen Code auszuführen, Berechtigungen zu erweitern, Sicherheitsmaßnahmen zu umgehen, SQL-Injection durchzuführen, Daten zu manipulieren und offenzulegen oder einen Denial-of-Service-Zustand zu verursachen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in PostgreSQL ausnutzen, um beliebigen Code auszuführen, Berechtigungen zu erweitern, Sicherheitsmaßnahmen zu umgehen, SQL-Injection durchzuführen, Daten zu manipulieren und offenzulegen oder einen Denial-of-Service-Zustand zu verursachen.</p> https://db.gcve.eu/vuln/wid-sec-w-2026-4571