DALIBO records
5 published records for vendor dalibo.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 100%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')3
- CWE-20 Improper Input Validation1
- CWE-328 Use of Weak Hash1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
5 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
35Monitor | CVE-2024-2339No exploit | Improper Input Validation in PostgreSQL Anonymizer 1.2 allows table owner to gain superuser privileges via masking ruledalibo · anonymizer · CWE-20 | High8.8 | — | 0.5% | Mar 8, 2024 |
35Monitor | CVE-2026-9617No exploit | PostgreSQL Anonymizer: malicious column name allows SQL injection via anon.k_anonymity() functiondalibo · anonymizer · CWE-89 | High8.8 | — | 0.4% | May 27, 2026 |
30Monitor | CVE-2024-2338No exploit | SQL Injection in PostgreSQL Anonymizer 1.2 allows table owner to gain superuser privileges via masking ruledalibo · anonymizer · CWE-89 | High7.5 | — | 0.4% | Mar 8, 2024 |
30Monitor | CVE-2026-11945No exploit | PostgreSQL Anonymizer: SQL injection in the rules import functionsdalibo · postgresql anonymizer · CWE-89 | High7.5 | — | 0.2% | Jun 11, 2026 |
17Monitor | CVE-2026-13455No exploit | PostgreSQL Anonymizer: Unrestricted function can leak the secret saltdalibo · postgresql anonymizer · CWE-328 | Medium4.3 | — | 0.1% | Jun 30, 2026 |
- CVE-2024-233935Monitor
Improper Input Validation in PostgreSQL Anonymizer 1.2 allows table owner to gain superuser privileges via masking rule
HighCVSS 8.8No exploitEPSS 0%dalibo · anonymizerMar 8, 2024
- CVE-2026-961735Monitor
PostgreSQL Anonymizer: malicious column name allows SQL injection via anon.k_anonymity() function
HighCVSS 8.8No exploitEPSS 0%dalibo · anonymizerMay 27, 2026
- CVE-2024-233830Monitor
SQL Injection in PostgreSQL Anonymizer 1.2 allows table owner to gain superuser privileges via masking rule
HighCVSS 7.5No exploitEPSS 0%dalibo · anonymizerMar 8, 2024
- CVE-2026-1194530Monitor
PostgreSQL Anonymizer: SQL injection in the rules import functions
HighCVSS 7.5No exploitEPSS 0%dalibo · postgresql anonymizerJun 11, 2026
- CVE-2026-1345517Monitor
PostgreSQL Anonymizer: Unrestricted function can leak the secret salt
MediumCVSS 4.3No exploitEPSS 0%dalibo · postgresql anonymizerJun 30, 2026