Command and Code Injection

Every one of the 6 is a mark on the map. Named now: 1 to 6, most at risk first.

1. PostgreSQL 9.3-12.3 Authenticated Remote Code ExecutionCVE-2019-9193Postgresql · 92% likely

   CWE-78

2. Argument injection vulnerability in PostgreSQL 9.2.x before 9.2.4, 9.1.x before 9.1.9, and 9.0.x before 9.0.13 allows remote attackers to cause a denial of service (file corruptio…CVE-2013-1899Postgresql · 54% likely

   CWE-94

3. PostgreSQL before 9.1.23, 9.2.x before 9.2.18, 9.3.x before 9.3.14, 9.4.x before 9.4.9, and 9.5.x before 9.5.4 might allow remote authenticated users with the CREATEDB or CREATERO…CVE-2016-5424Postgresql · 4.6% likely

   CWE-94

4. PostgreSQL 7.4 before 7.4.29, 8.0 before 8.0.25, 8.1 before 8.1.21, 8.2 before 8.2.17, 8.3 before 8.3.11, 8.4 before 8.4.4, and 9.0 Beta before 9.0 Beta 2 does not properly restri…CVE-2010-1169Postgresql · 4.1% likely

   CWE-94

5. Postgresql Windows installer before versions 11.5, 10.10, 9.6.15, 9.5.19, 9.4.24 is vulnerable via bundled OpenSSL executing code from unprotected directory.CVE-2019-10211PostgreSQL · CVSS 7.8 · 1.8% likely

   CWE-941 bounty report

6. PostgreSQL (pgsql) 7.4.x, 7.2.x, and other versions allows local users to load arbitrary shared libraries and execute code via the LOAD extension.CVE-2005-0227Postgresql · 0.5% likely

   CWE-94

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.