pgbouncer kayıtları
pgbouncer üreticisine ait 10 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 1
- Düzeltme kaydı olan
- %100
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-476 NULL Pointer Dereference2
- CWE-190 Integer Overflow or Wraparound1
- CWE-287 Improper Authentication1
- CWE-324 Use of a Key Past its Expiration Date1
- CWE-426 Untrusted Search Path1
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
10 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2026-6665İstismar yok | PgBouncer buffer overflow in SCRAMpgbouncer · pgbouncer · CWE-121 | Kritik9,8 | — | %0,4 | 8 May 2026 |
39İzleyin | CVE-2025-2291İstismar yok | PgBouncer default auth_query does not take Postgres password expiry into accountpgbouncer · pgbouncer · CWE-324 | Kritik9,8 | — | %0,3 | 16 Nis 2025 |
33İzleyin | CVE-2015-6817İstismar yok | PgBouncer 1.6.x before 1.6.1, when configured with auth_user, allows remote attackers to gain login access as auth_user via an unknown usernpgbouncer · pgbouncer · CWE-287 | Yüksek8,1 | — | %2,1 | 23 May 2017 |
32İzleyin | CVE-2021-3935İstismar yok | When PgBouncer is configured to use "cert" authentication, a man-in-the-middle attacker can inject arbitrary SQL queries when a connection ipgbouncer · pgbouncer · CWE-89 | Yüksek8,1 | — | %1,1 | 22 Kas 2021 |
32İzleyin | CVE-2025-12819İstismar yok | Untrusted search path in auth_query connection in PgBouncerpgbouncer · pgbouncer · CWE-426 | Yüksek8,1 | — | %0,3 | 3 Ara 2025 |
31İzleyin | CVE-2015-4054İstismar yok | PgBouncer before 1.5.5 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) by sending a password packepgbouncer · pgbouncer · CWE-476 | Yüksek7,5 | — | %4,1 | 23 May 2017 |
30İzleyin | CVE-2026-6664Kavram kanıtı | PgBouncer integer overflow in PgBouncer network packet parsingpgbouncer · pgbouncer · CWE-190 | Yüksek7,5 | — | %0,7 | 8 May 2026 |
30İzleyin | CVE-2026-6666Kavram kanıtı | PgBouncer crash in kill_pool_logins_server_errorpgbouncer · pgbouncer · CWE-476 | Yüksek7,5 | — | %0,4 | 8 May 2026 |
23İzleyin | CVE-2021-3672İstismar yok | A flaw was found in c-ares library, where a missing input validation check of host names returned by DNS (Domain Name Servers) can lead to oc-ares project · c-ares · CWE-79 | Orta5,6 | — | %2,8 | 23 Kas 2021 |
17İzleyin | CVE-2026-6667İstismar yok | PgBouncer missing authorization check in KILL_CLIENT admin commandpgbouncer · pgbouncer · CWE-862 | Orta4,3 | — | %0,3 | 8 May 2026 |
- CVE-2026-666539İzleyin
PgBouncer buffer overflow in SCRAM
KritikCVSS 9,8İstismar yokEPSS %0pgbouncer · pgbouncer8 May 2026
- CVE-2025-229139İzleyin
PgBouncer default auth_query does not take Postgres password expiry into account
KritikCVSS 9,8İstismar yokEPSS %0pgbouncer · pgbouncer16 Nis 2025
- CVE-2015-681733İzleyin
PgBouncer 1.6.x before 1.6.1, when configured with auth_user, allows remote attackers to gain login access as auth_user via an unknown usern
YüksekCVSS 8,1İstismar yokEPSS %2pgbouncer · pgbouncer23 May 2017
- CVE-2021-393532İzleyin
When PgBouncer is configured to use "cert" authentication, a man-in-the-middle attacker can inject arbitrary SQL queries when a connection i
YüksekCVSS 8,1İstismar yokEPSS %1pgbouncer · pgbouncer22 Kas 2021
- CVE-2025-1281932İzleyin
Untrusted search path in auth_query connection in PgBouncer
YüksekCVSS 8,1İstismar yokEPSS %0pgbouncer · pgbouncer3 Ara 2025
- CVE-2015-405431İzleyin
PgBouncer before 1.5.5 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) by sending a password packe
YüksekCVSS 7,5İstismar yokEPSS %4pgbouncer · pgbouncer23 May 2017
- CVE-2026-666430İzleyin
PgBouncer integer overflow in PgBouncer network packet parsing
YüksekCVSS 7,5Kavram kanıtıEPSS %0pgbouncer · pgbouncer8 May 2026
- CVE-2026-666630İzleyin
PgBouncer crash in kill_pool_logins_server_error
YüksekCVSS 7,5Kavram kanıtıEPSS %0pgbouncer · pgbouncer8 May 2026
- CVE-2021-367223İzleyin
A flaw was found in c-ares library, where a missing input validation check of host names returned by DNS (Domain Name Servers) can lead to o
OrtaCVSS 5,6İstismar yokEPSS %2c-ares project · c-ares23 Kas 2021
- CVE-2026-666717İzleyin
PgBouncer missing authorization check in KILL_CLIENT admin command
OrtaCVSS 4,3İstismar yokEPSS %0pgbouncer · pgbouncer8 May 2026