Software Detail
Title
CVE
CRITICAL
HIGH
MEDIUM
LOW
CWE
Number of items displayed
PostgreSQL Number Of NVD 154 CRITICAL 7 HIGH 63 MEDIUM 77 LOW 7
URL https://www.postgresql.org/
Explanation PostgreSQL is an object-relational database management system (ORDBMS) based on POSTGRES, Version 4.2, developed by the Department of Computer Science at the University of California, Berkeley.

Extracted from [https://www.postgresql.jp/document/11/html/intro-whatis.html]

From version 10 onwards, the integer part represents major versions and the decimal part represents minor updates.

Every year, a major version including new features is released.
Minor releases with bugs and security fixes will be released at least once every three months, if necessary.
Unscheduled releases will be made for urgent security issues.
Support is provided for five years after the major version is released.
Tag
  • オープンソース
  • PostgreSQL Licence
  • 商用ライセンス有り
Add Information URL
No Type Name URL
1 https://www.postgresql.org/support/versioning/
2 https://wiki.postgresql.org/wiki/Main_Page
3 https://www.postgresql.jp/
4 https://www.postgresql.org/download/
List Of Product  [ Click to show release history and vulnerability information ]
No Name Latest Version Release date Initial release Normal Support Security Support
Service Pack Support		 Extended
for a fee		 Critical High Medium Low
131 PostgreSQL 16 16.11 Nov. 13, 2025 Sept. 14, 2023 Sept. 9, 2028 0 2 2 0
132 PostgreSQL 15 15.15 Nov. 13, 2025 Jan. 13, 2022 Nov. 11, 2027 0 6 4 1
133 PostgreSQL 14 14.20 Nov. 13, 2025 May 15, 2021 Nov. 12, 2026 0 8 5 1
134 PostgreSQL 13 13.23 Nov. 13, 2025 Sept. 24, 2020 Nov. 23, 2025 0 12 10 1
135 PostgreSQL 12 12.22 Nov. 21, 2024 Oct. 3, 2019 Nov. 14, 2024 0 15 11 1
136 PostgreSQL 11 11.22 Nov. 9, 2023 Oct. 18, 2018 Nov. 9, 2023 2 19 12 1
137 PostgreSQL 10 10.23 Nov. 10, 2022 Oct. 5, 2017 Nov. 10, 2022 3 21 9 0
138 PostgreSQL 9 9.6.24 Sept. 20, 2010 Oct. 8, 2015 6 39 37 0
139 PostgreSQL 8 8.0.9 Jan. 19, 2005 July 24, 2014 4 31 48 3
140 PostgreSQL 7 7.0.3 May 8, 2000 May 8, 2005 4 31 38 4
141 PostgreSQL 6 6.5.3 Jan. 29, 1997 June 9, 2004 4 21 20 2
142 PostgreSQL 1 1.09 Nov. 4, 1996 Jan. 1, 2000 4 21 22 1
143 PostgreSQL - - 4 17 14 1
NVD Vulnerability Information
  • CRITICAL
  • HIGH
  • MEDIUM
  • LOW
No CVSS3
CVSS2		 Level
Attach Vector		 Title CWE CVE cpe23Uri or higher or less more than less than Update date
Published date		 Show Affected Exploit
PoC
Search
131 -
1.5 		LOW PostgreSQL 7.3.x before 7.3.14, 7.4.x before 7.4.12, 8.0.x before 8.0.7, and 8.1.x before 8.1.3, when compiled with Asserts enabled, allows local users to cause a denial of service (server crash) via… NVD-CWE-Other
CVE-2006-0678 cpe:2.3:a:postgresql:postgresql:8.1:*
cpe:2.3:a:postgresql:postgresql:8.1.2:*
cpe:2.3:a:postgresql:postgresql:8.1… 		2018-10-20 00:45
2006-02-15 		Show GitHub Exploit DB Packet Storm
132 -
5.0 		MEDIUM PostgreSQL 8.0.x before 8.0.6 and 8.1.x before 8.1.2, when running on Windows, allows remote attackers to cause a denial of service (postmaster exit and no new connections) via a large number of simu… NVD-CWE-Other
CVE-2006-0105 cpe:2.3:a:postgresql:postgresql:8.1.1:*
cpe:2.3:a:postgresql:postgresql:8.1.0:*
cpe:2.3:a:postgresql:postgresql:8… 		2018-10-20 00:42
2006-01-11 		Show GitHub Exploit DB Packet Storm
133 -
7.5 		HIGH PostgreSQL 7.3.x through 8.0.x gives public EXECUTE access to certain character conversion functions, which allows unprivileged users to call those functions with malicious values, with unknown impac… NVD-CWE-Other
CVE-2005-1409 cpe:2.3:a:postgresql:postgresql:8.0:*
cpe:2.3:a:postgresql:postgresql:8.0.2:*
cpe:2.3:a:postgresql:postgresql:8.0… 		2018-10-20 00:31
2005-05-3 		Show GitHub Exploit DB Packet Storm
134 -
2.1 		LOW The tsearch2 module in PostgreSQL 7.4 through 8.0.x declares the (1) dex_init, (2) snb_en_init, (3) snb_ru_init, (4) spell_init, and (5) syn_init functions as "internal" even when they do not take an… NVD-CWE-Other
CVE-2005-1410 cpe:2.3:a:postgresql:postgresql:8.0:*
cpe:2.3:a:postgresql:postgresql:8.0.2:*
cpe:2.3:a:postgresql:postgresql:8.0… 		2018-10-20 00:31
2005-05-3 		Show GitHub Exploit DB Packet Storm
135 -
6.5 		MEDIUM PostgreSQL 8.0.0 and earlier allows local users to bypass the EXECUTE permission check for functions by using the CREATE AGGREGATE command. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2005-0244 cpe:2.3:a:postgresql:postgresql:8.0.0:*
cpe:2.3:a:postgresql:postgresql:7.4:*
cpe:2.3:a:postgresql:postgresql:7.4… 		2017-10-11 10:29
2005-05-2 		Show GitHub Exploit DB Packet Storm
136 -
6.5 		MEDIUM Multiple buffer overflows in gram.y for PostgreSQL 8.0.1 and earlier may allow attackers to execute arbitrary code via (1) a large number of variables in a SQL statement being handled by the read_sql… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2005-0247 cpe:2.3:a:postgresql:postgresql:8.0.1:*
cpe:2.3:a:postgresql:postgresql:8.0.0:*
cpe:2.3:a:postgresql:postgresql:7… 		2017-10-11 10:29
2005-05-2 		Show GitHub Exploit DB Packet Storm
137 -
4.3 		MEDIUM PostgreSQL (pgsql) 7.4.x, 7.2.x, and other versions allows local users to load arbitrary shared libraries and execute code via the LOAD extension. CWE-94
Code Injection 		CVE-2005-0227 cpe:2.3:a:postgresql:postgresql:*:* 7.4
7.3.0
8.0



7.4.7
7.3.9
8.0.1 		2023-10-19 05:54
2005-05-2 		Show GitHub Exploit DB Packet Storm
138 -
5.0 		MEDIUM The intagg contrib module for PostgreSQL 8.0.0 and earlier allows attackers to cause a denial of service (crash) via crafted arrays. NVD-CWE-Other
CVE-2005-0246 cpe:2.3:a:postgresql:postgresql:*:* 8.0.0
7.3.0
7.4.0



8.0.1
7.3.9
7.4.7 		2024-02-6 04:56
2005-05-2 		Show GitHub Exploit DB Packet Storm
139 -
2.1 		LOW The make_oidjoins_check script in PostgreSQL 7.4.5 and earlier allows local users to overwrite files via a symlink attack on temporary files. NVD-CWE-Other
CVE-2004-0977 cpe:2.3:a:postgresql:postgresql:*:* 7.3.0
7.4.0

7.3.8
7.4.6 		2024-02-3 01:33
2005-02-9 		Show GitHub Exploit DB Packet Storm
140 -
7.5 		HIGH Buffer overflow in gram.y for PostgreSQL 8.0.0 and earlier may allow attackers to execute arbitrary code via a large number of arguments to a refcursor function (gram.y), which leads to a heap-based … NVD-CWE-Other
CVE-2005-0245 cpe:2.3:a:postgresql:postgresql:8.0:*
cpe:2.3:a:postgresql:postgresql:*:* 		7.3
7.4

7.3.10
7.4.7 		2023-01-20 05:13
2005-02-1 		Show GitHub Exploit DB Packet Storm