https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 10:16:46 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-51992 <p>Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. ClickHouse&#39;s PostgreSQL integration intentionally allows users with valid PostgreSQL credentials to execute queries against a remote PostgreSQL server. No vulnerability in ClickHouse is exploited; code execution occurs on the downstream PostgreSQL server using credentials explicitly provided by the user with specific pg_execute_server_program permission, exploiting a feature that was wrongly reported as CVE-2019-9193 in PostgreSQL (https://www.postgresql.org/about/news/cve-2019-9193-not-a-security-vulnerability-1935/).</p> <p>Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. ClickHouse&#39;s PostgreSQL integration intentionally allows users with valid PostgreSQL credentials to execute queries against a remote PostgreSQL server. No vulnerability in ClickHouse is exploited; code execution occurs on the downstream PostgreSQL server using credentials explicitly provided by the user with specific pg_execute_server_program permission, exploiting a feature that was wrongly reported as CVE-2019-9193 in PostgreSQL (https://www.postgresql.org/about/news/cve-2019-9193-not-a-security-vulnerability-1935/).</p> https://db.gcve.eu/vuln/fkie_cve-2026-51992 https://db.gcve.eu/vuln/ghsa-vh7m-4w88-p24f <p>SQL Injection vulnerability in ClickHouse Server Versions &lt;= 26.3.9.8 allows a remote attacker to execute arbitrary code via the create dictionaries function.</p> <p>SQL Injection vulnerability in ClickHouse Server Versions &lt;= 26.3.9.8 allows a remote attacker to execute arbitrary code via the create dictionaries function.</p> https://db.gcve.eu/vuln/ghsa-vh7m-4w88-p24f