postgresql

Every one of the 67 is a mark on the map. Named now: 1 to 26, most at risk first.

1. PostgreSQL versions before 9.2.22, 9.3.18, 9.4.13, 9.5.8 and 9.6.4 are vulnerable to incorrect authentication flaw allowing remote attackers to gain access to database accounts wi…CVE-2017-7546PostgreSQL · 62% likely

   CWE-287

2. A flaw was found in PostgreSQL. There is an issue with incomplete efforts to operate safely when a privileged user is maintaining another user's objects. The Autovacuum, REINDEX,…CVE-2022-1552Postgresql · 17% likely

   CWE-459

3. PostgreSQL versions before 9.2.22, 9.3.18, 9.4.13, 9.5.8 and 9.6.4 are vulnerable to authorization flaw allowing remote authenticated attackers to retrieve passwords from the user…CVE-2017-7547PostgreSQL · 5.6% likely

   CWE-522

4. postgresql before versions 11.1, 10.6 is vulnerable to a to SQL injection in pg_upgrade and pg_dump via CREATE TRIGGER ... REFERENCING. Using a purpose-crafted trigger definition,…CVE-2018-16850The PostgreSQL Project · CVSS 8 · 5.1% likely

   CWE-89

5. PostgreSQL PL/Perl environment variable changes execute arbitrary codeCVE-2024-10979Postgresql · CVSS 8.8 · 4.4% likely

   CWE-15

6. PostgreSQL versions 10.x before 10.9 and versions 11.x before 11.4 are vulnerable to a stack-based buffer overflow. Any authenticated user can overflow a stack-based buffer by cha…CVE-2019-10164PostgreSQL · CVSS 7.5 · 3.6% likely

   CWE-121

7. PostgreSQL versions before 9.4.13, 9.5.8 and 9.6.4 are vulnerable to authorization flaw allowing remote authenticated attackers with no privileges on a large object to overwrite t…CVE-2017-7548PostgreSQL · 3.5% likely

   CWE-862

8. A flaw was discovered in postgresql versions 9.4.x before 9.4.24, 9.5.x before 9.5.19, 9.6.x before 9.6.15, 10.x before 10.10 and 11.x before 11.5 where arbitrary SQL statements c…CVE-2019-10208PostgreSQL · CVSS 7.5 · 2.2% likely

   CWE-89

9. A vulnerability was found in PostgreSQL. This attack requires permission to create non-temporary objects in at least one schema, the ability to lure or wait for an administrator t…CVE-2022-2625Postgresql · 2.2% likely

   CWE-915

10. Postgresql Windows installer before versions 11.5, 10.10, 9.6.15, 9.5.19, 9.4.24 is vulnerable via bundled OpenSSL executing code from unprotected directory.CVE-2019-10211PostgreSQL · CVSS 7.8 · 1.8% likely

    CWE-94

11. PostgreSQL non-owner REFRESH MATERIALIZED VIEW CONCURRENTLY executes arbitrary SQLCVE-2024-0985Postgresql · CVSS 8 · 1.8% likelycovered by CyberSIXT

    CWE-271

12. A vulnerability was found in postgresql versions 11.x prior to 11.3. Using a purpose-crafted insert to a partitioned table, an attacker can read arbitrary bytes of server memory.…CVE-2019-10129PostgreSQL Project · CVSS 6.5 · 1.6% likely

    CWE-125

13. PostgreSQL relation replacement during pg_dump executes arbitrary SQLCVE-2024-7348Postgresql · CVSS 8.8 · 1.6% likelycovered by CyberSIXT

    CWE-367

14. PostgreSQL pgcrypto heap buffer overflow executes arbitrary codeCVE-2026-2005Postgresql · CVSS 8.8 · 1.4% likely

    CWE-122

15. PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary codeCVE-2026-2004Postgresql · CVSS 8.8 · 1.3% likely

    CWE-1287

16. schema_element defeats protective search_path changes; It was found that certain database calls in PostgreSQL could permit an authed attacker with elevated database-level privileg…CVE-2023-2454Postgresql · CVSS 7.2 · 1.2% likely

    CWE-20

17. PostgreSQL missing validation of multibyte character length executes arbitrary codeCVE-2026-2006Postgresql · CVSS 8.8 · 1.1% likely

    CWE-129

18. A vulnerability was found in PostgreSQL versions 11.x up to excluding 11.3, 10.x up to excluding 10.8, 9.6.x up to, excluding 9.6.13, 9.5.x up to, excluding 9.5.17. PostgreSQL mai…CVE-2019-10130PostgreSQL Project · CVSS 3.1 · 1.1% likely

    CWE-284

19. Postgresql, versions 11.x before 11.5, is vulnerable to a memory disclosure in cross-type comparison for hashed subplan.CVE-2019-10209PostgreSQL · CVSS 3.1 · 1.1% likely

    CWE-125

20. PostgreSQL server undersizes allocations, via integer wraparoundCVE-2026-6473Postgresql · CVSS 8.8 · 1.0% likely

    CWE-190

21. PostgreSQL row security below e.g. subqueries disregards user ID changesCVE-2024-10976Postgresql · CVSS 4.2 · 0.8% likely

    CWE-1250

22. PostgreSQL pg_stats_ext and pg_stats_ext_exprs lack authorization checksCVE-2024-4317Postgresql · CVSS 3.1 · 0.7% likely

    CWE-862

23. Row security policies disregard user ID changes after inlining; PostgreSQL could permit incorrect policies to be applied in certain cases where role-specific policies are used and…CVE-2023-2455Postgresql · CVSS 5.4 · 0.7% likely

    CWE-20

24. PostgreSQL SET ROLE, SET SESSION AUTHORIZATION reset to wrong user IDCVE-2024-10978Postgresql · CVSS 4.2 · 0.7% likely

    CWE-266

25. PostgreSQL type confusion in cursor CLOSE + DECLARE executes arbitrary codeCVE-2026-16239Postgresql · CVSS 8.8 · 0.7% likely

    CWE-843

26. PostgreSQL to_char heap buffer overflow executes arbitrary codeCVE-2026-14669Postgresql · CVSS 8.8 · 0.7% likelycovered by CyberSIXT

    CWE-1221 article

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.