Postgresql_jdbc_driver

Repositories	Unknown: This might be proprietary software.
#Vulnerabilities	8

Date	Id	Summary	Products	Score	Patch	Annotated
2012-10-06	CVE-2012-1618	Interaction error in the PostgreSQL JDBC driver before 8.2, when used with a PostgreSQL server with the "standard_conforming_strings" option enabled, such as the default configuration of PostgreSQL 9.1, does not properly escape unspecified JDBC statement parameters, which allows remote attackers to perform SQL injection attacks. NOTE: as of 20120330, it was claimed that the upstream developer planned to dispute this issue, but an official dispute has not been posted as of 20121005.	Postgresql, Postgresql_jdbc_driver	N/A
2018-08-30	CVE-2018-10936	A weakness was found in postgresql-jdbc before version 42.2.5. It was possible to provide an SSL Factory and not check the host name if a host name verifier was not provided to the driver. This could lead to a condition where a man-in-the-middle attacker could masquerade as a trusted server by providing a certificate for the wrong host, as long as it was signed by a trusted CA.	Postgresql_jdbc_driver, Enterprise_linux	8.1