https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 10:50:20 +0000 https://vulnerability.circl.lu/vuln/cve-2018-10925 <p><strong>Affected:</strong> PostgreSQL Global Development Group postgresql</p> <p>It was discovered that PostgreSQL versions before 10.5, 9.6.10, 9.5.14, 9.4.19, and 9.3.24 failed to properly check authorization on certain statements involved with &#34;INSERT ... ON CONFLICT DO UPDATE&#34;. An attacker with &#34;CREATE TABLE&#34; privileges could exploit this to read arbitrary bytes server memory. If the attacker also had certain &#34;INSERT&#34; and limited &#34;UPDATE&#34; privileges to a particular table, they could exploit this to update other columns in the same table.</p> <p><strong>Affected:</strong> PostgreSQL Global Development Group postgresql</p> <p>It was discovered that PostgreSQL versions before 10.5, 9.6.10, 9.5.14, 9.4.19, and 9.3.24 failed to properly check authorization on certain statements involved with &#34;INSERT ... ON CONFLICT DO UPDATE&#34;. An attacker with &#34;CREATE TABLE&#34; privileges could exploit this to read arbitrary bytes server memory. If the attacker also had certain &#34;INSERT&#34; and limited &#34;UPDATE&#34; privileges to a particular table, they could exploit this to update other columns in the same table.</p> https://vulnerability.circl.lu/vuln/cve-2018-10925