SQL Injection

Every one of the 7 is a mark on the map. Named now: 1 to 7, most at risk first.

1. postgresql before versions 11.1, 10.6 is vulnerable to a to SQL injection in pg_upgrade and pg_dump via CREATE TRIGGER ... REFERENCING. Using a purpose-crafted trigger definition,…CVE-2018-16850The PostgreSQL Project · CVSS 8 · 5.1% likely

   CWE-89

2. A flaw was discovered in postgresql versions 9.4.x before 9.4.24, 9.5.x before 9.5.19, 9.6.x before 9.6.15, 10.x before 10.10 and 11.x before 11.5 where arbitrary SQL statements c…CVE-2019-10208PostgreSQL · CVSS 7.5 · 2.2% likely

   CWE-89

3. PostgreSQL expression deparse allows SQL injection via EXTRACT argumentCVE-2026-15741Postgresql · CVSS 8.8 · 0.4% likely

   CWE-89

4. psqlODBC SQL injection through SQLSpecialColumns table and schema namesCVE-2026-120062PostgreSQL · CVSS 7.5 · 0.4% likely

   CWE-89

5. psqlODBC does not escape a server-supplied column name in its updatable-cursor queriesCVE-2026-120065PostgreSQL · CVSS 7.1 · 0.3% likely

   CWE-89

6. PostgreSQL pg_createsubscriber allows SQL injection via subscription nameCVE-2026-6476Postgresql · CVSS 7.2 · 0.3% likely

   CWE-89

7. PostgreSQL REFRESH PUBLICATION allows SQL injection via table nameCVE-2026-6638Postgresql · CVSS 3.7 · 0.2% likely

   CWE-89

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.