Information Disclosure

Every one of the 7 is a mark on the map. Named now: 1 to 7, most at risk first.

1. The crypt function in contrib/pgcrypto in PostgreSQL before 9.0.23, 9.1.x before 9.1.19, 9.2.x before 9.2.14, 9.3.x before 9.3.10, and 9.4.x before 9.4.5 allows attackers to cause…CVE-2015-5288Postgresql · 4.5% likely

   CWE-200

2. A flaw was found in postgresql. Using an INSERT ... ON CONFLICT ... DO UPDATE command on a purpose-crafted table, an authenticated database user could read arbitrary bytes of serv…CVE-2021-32028Postgresql · 1.6% likely

   CWE-200

3. A flaw was found in postgresql. Using an UPDATE ... RETURNING command on a purpose-crafted table, an authenticated database user could read arbitrary bytes of server memory. The h…CVE-2021-32029Postgresql · 1.5% likely

   CWE-200

4. A flaw was found in postgresql. A purpose-crafted query can read arbitrary bytes of server memory. In the default configuration, any authenticated database user can complete this…CVE-2021-3677Postgresql · 1.4% likely

   CWE-200

5. An information leak was discovered in postgresql in versions before 13.2, before 12.6 and before 11.11. A user having UPDATE permission but not SELECT permission to a particular c…CVE-2021-3393Postgresql · 1.2% likely

   CWE-209

6. In PostgreSQL, a modified, unauthenticated server can send an unterminated string during the establishment of Kerberos transport encryption. In certain conditions a server can cau…CVE-2022-41862Postgresql · CVSS 3.7 · 0.6% likely

   CWE-200

7. PostgreSQL observable response discrepancy with non-default scram_iterations provides user existence oracleCVE-2026-14672Postgresql · CVSS 5.3 · 0.4% likely

   CWE-204

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.