Software Detail

Software Informaton Top

Database

Software Detail

PostgreSQL

Number Of NVD

165

CRITICAL

HIGH

MEDIUM

LOW

URL	https://www.postgresql.org/
Explanation	PostgreSQL is an object-relational database management system (ORDBMS) based on POSTGRES, Version 4.2, developed by the Department of Computer Science at the University of California, Berkeley. Extracted from [https://www.postgresql.jp/document/11/html/intro-whatis.html] From version 10 onwards, the integer part represents major versions and the decimal part represents minor updates. Every year, a major version including new features is released. Minor releases with bugs and security fixes will be released at least once every three months, if necessary. Unscheduled releases will be made for urgent security issues. Support is provided for five years after the major version is released.
Tag	商用ライセンス有りオープンソース PostgreSQL Licence

Add Information URL

No	Type	Name	URL
1			https://www.postgresql.org/support/versioning/
2			https://wiki.postgresql.org/wiki/Main_Page
3			https://www.postgresql.jp/
4			https://www.postgresql.org/download/

List Of Product [ Click to show release history and vulnerability information ]

No	Name	Latest Version	Release date	Initial release	Normal Support	Critical	High	Medium	Low
141	PostgreSQL 16	16.11	Nov. 13, 2025	Sept. 14, 2023	Sept. 9, 2028	0	8	5	0
142	PostgreSQL 15	15.15	Nov. 13, 2025	Jan. 13, 2022	Nov. 11, 2027	0	11	7	1
143	PostgreSQL 14	14.20	Nov. 13, 2025	May 15, 2021	Nov. 12, 2026	0	13	8	1
144	PostgreSQL 13	13.23	Nov. 13, 2025	Sept. 24, 2020	Nov. 23, 2025	0	17	13	1
145	PostgreSQL 12	12.22	Nov. 21, 2024	Oct. 3, 2019	Nov. 14, 2024	0	20	14	1
146	PostgreSQL 11	11.22	Nov. 9, 2023	Oct. 18, 2018	Nov. 9, 2023	2	24	15	1
147	PostgreSQL 10	10.23	Nov. 10, 2022	Oct. 5, 2017	Nov. 10, 2022	3	26	12	0
148	PostgreSQL 9	9.6.24		Sept. 20, 2010	Oct. 8, 2015	6	44	40	0
149	PostgreSQL 8	8.0.9		Jan. 19, 2005	July 24, 2014	4	36	51	3
150	PostgreSQL 7	7.0.3		May 8, 2000	May 8, 2005	4	36	41	4
151	PostgreSQL 6	6.5.3	Jan. 29, 1997		June 9, 2004	4	26	23	2
152	PostgreSQL 1	1.09	Nov. 4, 1996		Jan. 1, 2000	4	26	25	1
153	PostgreSQL -	-				4	22	17	1

NVD Vulnerability Information

CRITICAL
HIGH
MEDIUM
LOW

No	CVSS3 CVSS2	Level Attach Vector	Title	CWE	CVE	cpe23Uri	or higher	less than	Update date Published date	Show Affected	Exploit PoC Search
141	- 6.5	MEDIUM	PostgreSQL 8.1.0 through 8.1.2 allows authenticated database users to gain additional privileges via "knowledge of the backend protocol" using a crafted SET ROLE to other database users, a different …	CWE-264 Permissions, Privileges, and Access Controls	CVE-2006-0553	cpe:2.3:a:postgresql:postgresql:8.1.2:* cpe:2.3:a:postgresql:postgresql:8.1.1:* cpe:2.3:a:postgresql:postgresql:8…			2018-10-20 00:45 2006-02-15	Show	GitHub Exploit DB Packet Storm

142	- 1.5	LOW	PostgreSQL 7.3.x before 7.3.14, 7.4.x before 7.4.12, 8.0.x before 8.0.7, and 8.1.x before 8.1.3, when compiled with Asserts enabled, allows local users to cause a denial of service (server crash) via…	NVD-CWE-Other	CVE-2006-0678	cpe:2.3:a:postgresql:postgresql:8.1:* cpe:2.3:a:postgresql:postgresql:8.1.2:* cpe:2.3:a:postgresql:postgresql:8.1…			2018-10-20 00:45 2006-02-15	Show	GitHub Exploit DB Packet Storm

143	- 5.0	MEDIUM	PostgreSQL 8.0.x before 8.0.6 and 8.1.x before 8.1.2, when running on Windows, allows remote attackers to cause a denial of service (postmaster exit and no new connections) via a large number of simu…	NVD-CWE-Other	CVE-2006-0105	cpe:2.3:a:postgresql:postgresql:8.1.1:* cpe:2.3:a:postgresql:postgresql:8.1.0:* cpe:2.3:a:postgresql:postgresql:8…			2018-10-20 00:42 2006-01-11	Show	GitHub Exploit DB Packet Storm

144	- 7.5	HIGH	PostgreSQL 7.3.x through 8.0.x gives public EXECUTE access to certain character conversion functions, which allows unprivileged users to call those functions with malicious values, with unknown impac…	NVD-CWE-Other	CVE-2005-1409	cpe:2.3:a:postgresql:postgresql:8.0:* cpe:2.3:a:postgresql:postgresql:8.0.2:* cpe:2.3:a:postgresql:postgresql:8.0…			2018-10-20 00:31 2005-05-3	Show	GitHub Exploit DB Packet Storm

145	- 2.1	LOW	The tsearch2 module in PostgreSQL 7.4 through 8.0.x declares the (1) dex_init, (2) snb_en_init, (3) snb_ru_init, (4) spell_init, and (5) syn_init functions as "internal" even when they do not take an…	NVD-CWE-Other	CVE-2005-1410	cpe:2.3:a:postgresql:postgresql:8.0:* cpe:2.3:a:postgresql:postgresql:8.0.2:* cpe:2.3:a:postgresql:postgresql:8.0…			2018-10-20 00:31 2005-05-3	Show	GitHub Exploit DB Packet Storm

146	- 6.5	MEDIUM	PostgreSQL 8.0.0 and earlier allows local users to bypass the EXECUTE permission check for functions by using the CREATE AGGREGATE command.	CWE-264 Permissions, Privileges, and Access Controls	CVE-2005-0244	cpe:2.3:a:postgresql:postgresql:8.0.0:* cpe:2.3:a:postgresql:postgresql:7.4:* cpe:2.3:a:postgresql:postgresql:7.4…			2017-10-11 10:29 2005-05-2	Show	GitHub Exploit DB Packet Storm

147	- 6.5	MEDIUM	Multiple buffer overflows in gram.y for PostgreSQL 8.0.1 and earlier may allow attackers to execute arbitrary code via (1) a large number of variables in a SQL statement being handled by the read_sql…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2005-0247	cpe:2.3:a:postgresql:postgresql:8.0.1:* cpe:2.3:a:postgresql:postgresql:8.0.0:* cpe:2.3:a:postgresql:postgresql:7…			2017-10-11 10:29 2005-05-2	Show	GitHub Exploit DB Packet Storm

148	- 4.3	MEDIUM	PostgreSQL (pgsql) 7.4.x, 7.2.x, and other versions allows local users to load arbitrary shared libraries and execute code via the LOAD extension.	CWE-94 Code Injection	CVE-2005-0227	cpe:2.3:a:postgresql:postgresql::	7.4 7.3.0 8.0	7.4.7 7.3.9 8.0.1	2023-10-19 05:54 2005-05-2	Show	GitHub Exploit DB Packet Storm

149	- 5.0	MEDIUM	The intagg contrib module for PostgreSQL 8.0.0 and earlier allows attackers to cause a denial of service (crash) via crafted arrays.	NVD-CWE-Other	CVE-2005-0246	cpe:2.3:a:postgresql:postgresql::	8.0.0 7.3.0 7.4.0	8.0.1 7.3.9 7.4.7	2024-02-6 04:56 2005-05-2	Show	GitHub Exploit DB Packet Storm

150	- 2.1	LOW	The make_oidjoins_check script in PostgreSQL 7.4.5 and earlier allows local users to overwrite files via a symlink attack on temporary files.	NVD-CWE-Other	CVE-2004-0977	cpe:2.3:a:postgresql:postgresql::	7.3.0 7.4.0	7.3.8 7.4.6	2024-02-3 01:33 2005-02-9	Show	GitHub Exploit DB Packet Storm