İçeriğe atla
Noroxi

pgadmin kayıtları

pgadmin üreticisine ait 48 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
3 · %6,3
Pre-auth RCE
5
Düzeltme kaydı olan
%87,5
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 22
  2. 23
  3. 24
  4. 25
  5. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

48 kayıt
  • CVE-2024-2044
    63Bu hafta

    Unsafe Deserialisation and Remote Code Execution by an Authenticated user in pgAdmin 4

    KritikCVSS 9,9SilahlaştırılmışEPSS %79

    pgadmin · pgadmin 47 Mar 2024

  • CVE-2022-4223
    59Planlayın

    The pgAdmin server includes an HTTP API that is intended to be used to validate the path a user selects to external PostgreSQL utilities suc

    YüksekCVSS 8,8Kavram kanıtıEPSS %80

    pgadmin · pgadmin 413 Ara 2022

  • CVE-2024-3116
    59Planlayın

    Remote Code Execution Vulnerability through the validate binary path API in pgAdmin 4

    KritikCVSS 9,8SilahlaştırılmışEPSS %66

    pgadmin · pgadmin 44 Nis 2024

  • CVE-2025-2945
    52Planlayın

    pgAdmin 4: Remote Code Execution in Query Tool and Cloud Deployment

    YüksekCVSS 8,8SilahlaştırılmışEPSS %56

    pgadmin · pgadmin 43 Nis 2025

  • CVE-2025-12762
    43Planlayın

    Remote Code Execution vulnerability when restoring PLAIN-format SQL dumps in server mode (pgAdmin 4)

    KritikCVSS 9,8Kavram kanıtıEPSS %13

    pgadmin · pgadmin 413 Kas 2025

  • CVE-2026-12046
    38İzleyin

    pgAdmin 4: Unauthenticated pickle deserialization in SQL Editor close / update_connection routes enables remote code execution

    KritikCVSS 9,5İstismar yokEPSS %1

    pgadmin · pgadmin 418 Haz 2026

  • CVE-2026-17566
    37İzleyin

    pgAdmin 4: RCE via backslash-escape mismatch in Import/Export Data query guard (incomplete defense, sibling gap to CVE-2025-13780)

    KritikCVSS 9,4Kavram kanıtıEPSS %1

    pgadmin · pgadmin 431 Tem 2026

  • CVE-2026-12045
    37İzleyin

    pgAdmin 4: AI Assistant read-only transaction bypass allows unauthorised writes and remote code execution

    KritikCVSS 9,4İstismar yokEPSS %1

    pgadmin · pgadmin 418 Haz 2026

  • CVE-2026-7813
    37İzleyin

    pgAdmin 4: Cross-user data access and shared-server privilege escalation in server mode

    KritikCVSS 9,4İstismar yokEPSS %1

    pgadmin · pgadmin 411 May 2026

  • CVE-2026-86863
    37İzleyin

    pgAdmin 4: Authentication bypass via a client-controlled identity header in Webserver authentication mode

    KritikCVSS 9,3İstismar yokEPSS %1

    pgadmin · pgadmin 417 Eyl 2026

  • CVE-2026-17351
    37İzleyin

    pgAdmin 4: AI Assistant read-only transaction bypass via sqlparse/PostgreSQL lexer disagreement (incomplete fix for CVE-2026-12045)

    KritikCVSS 9,4Kavram kanıtıEPSS %0

    pgadmin · pgadmin 431 Tem 2026

  • CVE-2026-17349
    37İzleyin

    pgAdmin 4: Adhoc server clone leaks another user's stored database credentials and ownership to a non-owner

    KritikCVSS 9,3İstismar yokEPSS %0

    pgadmin · pgadmin 431 Tem 2026

  • CVE-2026-12048
    37İzleyin

    pgAdmin 4: Stored XSS via untrusted error and plan-node text rendered through html-react-parser

    KritikCVSS 9,3İstismar yokEPSS %0

    pgadmin · pgadmin 418 Haz 2026

  • CVE-2023-5002
    36İzleyin

    Pgadmin4: remote code execution by an authenticated user

    YüksekCVSS 8,8İstismar yokEPSS %2

    pgadmin · pgadmin 422 Eyl 2023

  • CVE-2026-7816
    35İzleyin

    pgAdmin 4: OS command injection in Import/Export query export via psql metacommand breakout

    YüksekCVSS 8,7İstismar yokEPSS %2

    pgadmin · pgadmin 411 May 2026

  • CVE-2025-13780
    35İzleyin

    Remote Code Execution vulnerability when restoring PLAIN-format SQL dumps in server mode (pgAdmin 4)

    YüksekCVSS 8,8Kavram kanıtıEPSS %1

    pgadmin · pgadmin 411 Ara 2025

  • CVE-2025-12763
    35İzleyin

    Command injection vulnerability allowing arbitrary command execution on Windows

    YüksekCVSS 8,8İstismar yokEPSS %1

    pgadmin · pgadmin 413 Kas 2025

  • CVE-2024-4215
    35İzleyin

    The Multi Factor Authentication bypass vulnerability in pgAdmin 4

    YüksekCVSS 8,8İstismar yokEPSS %1

    pgadmin · pgadmin 42 May 2024

  • CVE-2026-12044
    34İzleyin

    pgAdmin 4: SQL injection in COMMENT ON ... IS '<description>' rendering across dialog templates

    YüksekCVSS 8,7İstismar yokEPSS %1

    pgadmin · pgadmin 418 Haz 2026

  • CVE-2026-7815
    34İzleyin

    pgAdmin 4: SQL injection in Maintenance tool option values leading to remote code execution

    YüksekCVSS 8,7İstismar yokEPSS %1

    pgadmin · pgadmin 411 May 2026

  • CVE-2026-17346
    34İzleyin

    pgAdmin 4: SQL injection via unescaped object names in index Statistics and publication/subscription dependency views (incomplete fix for CVE-2026-12044)

    YüksekCVSS 8,7İstismar yokEPSS %1

    pgadmin · pgadmin 431 Tem 2026

  • CVE-2026-86864
    34İzleyin

    pgAdmin 4: Argument and connection-string injection via the database field in the Backup tool

    YüksekCVSS 8,7İstismar yokEPSS %1

    pgadmin · pgadmin 417 Eyl 2026

  • CVE-2025-9636
    31İzleyin

    Cross-Origin Opener Policy Vulnerability in pgAdmin 4

    YüksekCVSS 7,9İstismar yokEPSS %0

    pgadmin · pgadmin 44 Eyl 2025

  • CVE-2026-17347
    30İzleyin

    pgAdmin 4: OS command injection in MASTER_PASSWORD_HOOK via untrusted username substitution

    YüksekCVSS 7,7İstismar yokEPSS %1

    pgadmin · pgadmin 431 Tem 2026

  • CVE-2025-12764
    30İzleyin

    pgAdmin 4: LDAP injection vulnerability in LDAP authentication flow.

    YüksekCVSS 7,5İstismar yokEPSS %0

    pgadmin · pgadmin 413 Kas 2025