Postgresql

postgresql

Vendor: Postgresql • 203 CVEs

CVEs (203)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2002-0802 1Postgresql 1Postgresql Apr 16, 2026 Aug 12, 2002 N/A· v4 N/A· v3 7.5 HIGH· v2 The multibyte support in PostgreSQL 6.5.x with SQL_ASCII encoding consumes an extra character when processing a character that cannot be converted, which could remove an escape character from the query and make the appli...Show more The multibyte support in PostgreSQL 6.5.x with SQL_ASCII encoding consumes an extra character when processing a character that cannot be converted, which could remove an escape character from the query and make the application subject to SQL injection attacks.Show less
CVE-2000-1199 1Postgresql 1Postgresql Apr 16, 2026 Aug 31, 2001 N/A· v4 N/A· v3 4.6 MEDIUM· v2 PostgreSQL stores usernames and passwords in plaintext in (1) pg_shadow and (2) pg_pwd, which allows attackers with sufficient privileges to gain access to databases.
CVE-1999-0862 1Postgresql 1Postgresql Apr 16, 2026 Dec 2, 1999 N/A· v4 N/A· v3 2.1 LOW· v2 Insecure directory permissions in RPM distribution for PostgreSQL allows local users to gain privileges by reading a plaintext password file.