CVE Intelligence

Vulnerabilidades de Pgpool Global Development Group

🔔 Criar alerta RSS

CVEs publicadas que afetam produtos de Pgpool Global Development Group: 7 registro(s), com severidade, exploração e correções.

Somente exploradas (KEV) →

CVE-2026-92873 Alta · 7.3 CWE-303 30/09/2026
Pgpool-II contains an incorrect implementation of an authentication algorithm, which may…
Pgpool-II contains an incorrect implementation of an authentication algorithm, which may allow an unauthenticated attacker to promote an arbitrary watchdog node to the leader node.
CVE-2026-92872 Média · 4.3 CWE-532 30/09/2026
Insertion of Sensitive Information into Log File em Pgpool Global Development Group Pgpool-II
Pgpool-II inserts sensitive information into log file, which may allow an authenticated attacker to obtain the cluster information.
CVE-2026-92871 Alta · 7.5 CWE-476 30/09/2026
NULL Pointer Dereference em Pgpool Global Development Group Pgpool-II
A NULL pointer dereference vulnerability exists in Pgpool-II, which may allow an unauthenticated attacker to cause abnormal termination of the watchdog process.
CVE-2026-92870 Alta · 7.5 CWE-121 30/09/2026
Stack-based Buffer Overflow em Pgpool Global Development Group Pgpool-II
A stack-based buffer overflow vulnerability exists in Pgpool-II, which may allow an unauthenticated attacker to cause abnormal process termination.
CVE-2026-92869 Média · 6.5 CWE-787 30/09/2026
Out-of-bounds Write em Pgpool Global Development Group Pgpool-II
An out-of-bounds write vulnerability exists in Pgpool-II, which may allow an authenticated attacker to cause abnormal process termination.
CVE-2026-92868 Média · 6.5 CWE-295 30/09/2026
Improper Certificate Validation em Pgpool Global Development Group Pgpool-II
An improper certificate validation vulnerability exists in Pgpool-II, which may allow an unauthenticated attacker to bypass client certificate authentication.
CVE-2026-92867 Alta · 8.8 CWE-787 30/09/2026
Out-of-bounds Write em Pgpool Global Development Group Pgpool-II
An out-of-bounds write vulnerability exists in Pgpool-II , which may allow an authenticated attacker to cause abnormal process termination or arbitrary code execution.