Unescaped parameters in the PostgreSQL JDBC driver

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2012-1618 · ADVISORY
• bugzilla.novell.com/show_bug.cgi · WEB
• pgjdbc/pgjdbc · PACKAGE
• archives.neohapsis.com/archives/bugtraq/2012-03/0126.html · WEB
• lists.opensuse.org/opensuse-security/2012-03/msg00024.html · WEB
• openwall.com/lists/oss-security/2012/03/30/8 · WEB
• openwall.com/lists/oss-security/2012/03/30/9 · WEB
• openwall.com/lists/oss-security/2012/03/31/1 · WEB
• openwall.com/lists/oss-security/2012/04/02/4 · WEB
• openwall.com/lists/oss-security/2012/04/04/11 · WEB
• openwall.com/lists/oss-security/2012/04/04/4 · WEB
• openwall.com/lists/oss-security/2012/04/04/5

org.postgresql:postgresql のその他の脆弱性

• CVE-2026-54291中 5.9pgjdbc is an open source postgresql JDBC Driver. In releases 42.7.4 through 42.7.11, channelBinding=require connections can be silently down…
• CVE-2026-42198高 7.5pgjdbc is an open source postgresql JDBC Driver. From version 42.2.0 to before version 42.7.11, pgjdbc is vulnerable to a client-side denial…
• CVE-2025-49146中 5.9pgjdbc is an open source postgresql JDBC Driver. From 42.7.4 and until 42.7.7, when the PostgreSQL JDBC driver is configured with channel bi…
• CVE-2024-1597緊急 9.8pgjdbc, the PostgreSQL JDBC Driver, allows attacker to inject SQL if using PreferQueryMode=SIMPLE. Note this is not the default. In the defa…
• CVE-2022-41946中 5.5pgjdbc is an open source postgresql JDBC Driver. In affected versions a prepared statement using either `PreparedStatement.setText(int, Inpu…