Improper neutralization of quoting syntax in PostgreSQL libpq functions PQescapeLiteral(), PQes…

Incorrect control of environment variables in PostgreSQL PL/Perl allows an unprivileged databas…

Incomplete tracking in PostgreSQL of tables with row security allows a reused query to view or …

Untrusted data inclusion in pg_dump in PostgreSQL allows a malicious superuser of the origin se…

Incorrect privilege assignment in PostgreSQL allows a less-privileged application user to view …

Heap buffer overflow in PostgreSQL pgcrypto allows a ciphertext provider to execute arbitrary c…

Missing validation of multibyte character length in PostgreSQL text manipulation allows a datab…

Buffer over-read in PostgreSQL GB18030 encoding validation allows a database input provider to …

Missing validation of type of input in PostgreSQL intarray extension selectivity estimator func…

Uncontrolled recursion in PostgreSQL SSL and GSS negotiation allows an attacker able to connect…

Integer wraparound in multiple PostgreSQL server features allows an unprivileged database user …

Improper neutralization of newlines in pg_dump in PostgreSQL allows a user of the origin server…

Client use of server error message in PostgreSQL allows a server not trusted under current SSL …

Stack buffer overflow in PostgreSQL module "refint" allows an unprivileged database user to exe…

Heap buffer overflow in PostgreSQL pg_trgm allows a database user to achieve unknown impacts vi…

Symlink following in PostgreSQL pg_basebackup plain format and in pg_rewind allows an origin su…

Integer wraparound in multiple PostgreSQL libpq client library functions allows an application …

SQL injection in PostgreSQL pg_createsubscriber allows an attacker with pg_create_subscription …

Use of inherently dangerous function PQfn(..., result_is_int=0, ...) in PostgreSQL libpq lo_exp…

Improper validation of type "oidvector" in PostgreSQL allows a database user to disclose a few …

Covert timing channel in comparison of MD5-hashed password in PostgreSQL authentication allows …

Externally-controlled format string in PostgreSQL timeofday() function allows an attacker to re…

PostgreSQL optimizer statistics allow a user to read sampled data within a view that the user c…

Missing authorization in PostgreSQL CREATE STATISTICS command allows a table owner to achieve d…

SQL injection in PostgreSQL logical replication ALTER SUBSCRIPTION ... REFRESH PUBLICATION allo…

Missing authorization in PostgreSQL CREATE TYPE allows an object creator to hijack other querie…