https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 14 Nov 2026 19:58:32 +0000 https://db.gcve.eu/vuln/certfr-2026-avi-1530 certfr-2026-avi-1530 https://db.gcve.eu/vuln/certfr-2026-avi-1530 https://db.gcve.eu/vuln/fkie_cve-2026-116329 <p>Type confusion in PostgreSQL statistics import allows a table maintainer to execute arbitrary code as the operating system user running the database, via nested SET DATA TYPE during conversion of values to import. Within major version 18, minor versions before PostgreSQL 18.7 are affected. Versions before PostgreSQL 18 are unaffected.</p> <p>Type confusion in PostgreSQL statistics import allows a table maintainer to execute arbitrary code as the operating system user running the database, via nested SET DATA TYPE during conversion of values to import. Within major version 18, minor versions before PostgreSQL 18.7 are affected. Versions before PostgreSQL 18 are unaffected.</p> https://db.gcve.eu/vuln/fkie_cve-2026-116329 https://db.gcve.eu/vuln/ghsa-vrcm-258p-8vpg <p>Type confusion in PostgreSQL statistics import allows a table maintainer to execute arbitrary code as the operating system user running the database, via nested SET DATA TYPE during conversion of values to import. Within major version 18, minor versions before PostgreSQL 18.7 are affected. Versions before PostgreSQL 18 are unaffected.</p> <p>Type confusion in PostgreSQL statistics import allows a table maintainer to execute arbitrary code as the operating system user running the database, via nested SET DATA TYPE during conversion of values to import. Within major version 18, minor versions before PostgreSQL 18.7 are affected. Versions before PostgreSQL 18 are unaffected.</p> https://db.gcve.eu/vuln/ghsa-vrcm-258p-8vpg https://db.gcve.eu/vuln/msrc_cve-2026-116329 msrc_CVE-2026-116329 https://db.gcve.eu/vuln/msrc_cve-2026-116329 https://db.gcve.eu/vuln/rhsa-2026:80584 <p>postgresql: postgresql: Privilege escalation via untrusted search path in vacuumdb postgresql: postgresql: Arbitrary SQL execution via improper constraint quoting in pg_dump postgresql: postgresql: Denial of Service via improper locking during startup processing postgresql: postgresql: arbitrary code execution via nested SET DATA TYPE during statistics import postgresql: PostgreSQL: Arbitrary code execution via incomplete type-cache invalidation</p> <p>postgresql: postgresql: Privilege escalation via untrusted search path in vacuumdb postgresql: postgresql: Arbitrary SQL execution via improper constraint quoting in pg_dump postgresql: postgresql: Denial of Service via improper locking during startup processing postgresql: postgresql: arbitrary code execution via nested SET DATA TYPE during statistics import postgresql: PostgreSQL: Arbitrary code execution via incomplete type-cache invalidation</p> https://db.gcve.eu/vuln/rhsa-2026:80584 https://db.gcve.eu/vuln/ubuntu-cve-2026-116329 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: postgresql-9.3, Ubuntu:Pro:16.04:LTS: postgresql-9.5, Ubuntu:Pro:18.04:LTS: postgresql-10, Ubuntu:20.04:LTS: postgresql-12, Ubuntu:22.04:LTS: postgresql-14, Ubuntu:24.04:LTS: postgresql-16, Ubuntu:26.10: postgresql-18, Ubuntu:26.04:LTS: postgresql-18</p> <p>Type confusion in PostgreSQL statistics import allows a table maintainer to execute arbitrary code as the operating system user running the database, via nested SET DATA TYPE during conversion of values to import. Within major version 18, minor versions before PostgreSQL 18.7 are affected. Versions before PostgreSQL 18 are unaffected.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: postgresql-9.3, Ubuntu:Pro:16.04:LTS: postgresql-9.5, Ubuntu:Pro:18.04:LTS: postgresql-10, Ubuntu:20.04:LTS: postgresql-12, Ubuntu:22.04:LTS: postgresql-14, Ubuntu:24.04:LTS: postgresql-16, Ubuntu:26.10: postgresql-18, Ubuntu:26.04:LTS: postgresql-18</p> <p>Type confusion in PostgreSQL statistics import allows a table maintainer to execute arbitrary code as the operating system user running the database, via nested SET DATA TYPE during conversion of values to import. Within major version 18, minor versions before PostgreSQL 18.7 are affected. Versions before PostgreSQL 18 are unaffected.</p> https://db.gcve.eu/vuln/ubuntu-cve-2026-116329 https://db.gcve.eu/vuln/wid-sec-w-2026-4571 <p>Ein Angreifer kann mehrere Schwachstellen in PostgreSQL ausnutzen, um beliebigen Code auszuführen, Berechtigungen zu erweitern, Sicherheitsmaßnahmen zu umgehen, SQL-Injection durchzuführen, Daten zu manipulieren und offenzulegen oder einen Denial-of-Service-Zustand zu verursachen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in PostgreSQL ausnutzen, um beliebigen Code auszuführen, Berechtigungen zu erweitern, Sicherheitsmaßnahmen zu umgehen, SQL-Injection durchzuführen, Daten zu manipulieren und offenzulegen oder einen Denial-of-Service-Zustand zu verursachen.</p> https://db.gcve.eu/vuln/wid-sec-w-2026-4571