Other weaknesses

Every one of the 12 is a mark on the map. Named now: 1 to 12, most at risk first.

1. The bitsubstr function in backend/utils/adt/varbit.c in PostgreSQL 8.0.23, 8.1.11, and 8.3.8 allows remote authenticated users to cause a denial of service (daemon crash) or have…CVE-2010-0442Postgresql · 13% likely

   CWE-189

2. Integer overflow in src/backend/executor/nodeHash.c in PostgreSQL 8.4.1 and earlier, and 8.5 through 8.5alpha2, allows remote authenticated users to cause a denial of service (dae…CVE-2010-0733Postgresql · 6.8% likely

   CWE-189

3. Multiple integer overflows in the path_in and other unspecified functions in PostgreSQL before 8.4.20, 9.0.x before 9.0.16, 9.1.x before 9.1.12, 9.2.x before 9.2.7, and 9.3.x befo…CVE-2014-0064Postgresql · 5.4% likely

   CWE-189

4. Buffer overflow in the gettoken function in contrib/intarray/_int_bool.c in the intarray array module in PostgreSQL 9.0.x before 9.0.3, 8.4.x before 8.4.7, 8.3.x before 8.3.14, an…CVE-2010-4015Postgresql · 4.6% likely

   CWE-189

5. PostgreSQL 9.2.x before 9.2.4, 9.1.x before 9.1.9, 9.0.x before 9.0.13, and 8.4.x before 8.4.17, when using OpenSSL, generates insufficiently random numbers, which might allow rem…CVE-2013-1900Postgresql · 4.5% likely

   CWE-189

6. Algorithmic complexity vulnerability in the regular expression parser in TCL before 8.4.17, as used in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, and 7.4 b…CVE-2007-6067Postgresql · 3.9% likely

   CWE-189

7. The regular expression parser in TCL before 8.4.17, as used in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, and 7.4 before 7.4.19, allows remote authenticate…CVE-2007-4769Postgresql · 3.6% likely

   CWE-189

8. Multiple integer overflows in contrib/hstore/hstore_io.c in PostgreSQL 9.0.x before 9.0.16, 9.1.x before 9.1.12, 9.2.x before 9.2.7, and 9.3.x before 9.3.3 allow remote authentica…CVE-2014-2669Postgresql · 3.5% likely

   CWE-189

9. PostgreSQL before 9.5.x before 9.5.2 does not properly maintain row-security status in cached plans, which might allow attackers to bypass intended access restrictions by leveragi…CVE-2016-2193Postgresql · 1.8% likely

   CWE-254

10. PostgreSQL row security below e.g. subqueries disregards user ID changesCVE-2024-10976Postgresql · CVSS 4.2 · 0.8% likely

    CWE-1250

11. PostgreSQL discloses MD5-hashed passwords via covert timing channelCVE-2026-6478Postgresql · CVSS 6.5 · 0.6% likely

    CWE-385

12. PostgreSQL row security caching disregards role modificationsCVE-2026-14666Postgresql · CVSS 4.2 · 0.2% likely

    CWE-1250

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.