Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

DALIBO — Vulnerabilities & Security Advisories 12

Browse all 12 CVE security advisories affecting DALIBO. AI-powered Chinese analysis, POCs, and references for each vulnerability.

DALIBO develops DBeaver, a database management tool used for querying and administering various database systems. Historically, the application has been vulnerable to multiple security issues including remote code execution, cross-site scripting, and privilege escalation vulnerabilities. These vulnerabilities often stem from improper input validation and insecure design in the web interface components. While no major public security incidents have been widely reported, the consistent presence of vulnerabilities in their CVE record suggests ongoing challenges in secure development practices. Users should maintain current versions and apply security patches promptly to mitigate potential risks.

Found 12 results / 12 Clear Filters
Top products by DALIBO: PostgreSQL Anonymizer
CVE ID Title CVSS Severity Published
CVE-2026-97469 PostgreSQL Anonymizer: RESTRICTED functions are reachable through a subLink — PostgreSQL Anonymizer CWE-328 4.3 Medium 2026-09-25
CVE-2026-83534 PostgreSQL Anonymizer: Privilege escalation to superuser via anon.anonymize_database_parallel() — PostgreSQL Anonymizer CWE-250 6.4 Medium 2026-09-06
CVE-2026-19634 PostgreSQL Anonymizer: SQL injection in import_database_rules() and import_roles_rules() via crafted object names / JSON — PostgreSQL Anonymizer CWE-89 6.4 Medium 2026-09-06
CVE-2026-19633 PostgreSQL Anonymizer: unprivileged masked users can execute code via operators, domain casts and view subqueries — PostgreSQL Anonymizer CWE-89 8.8 High 2026-09-06
CVE-2026-13455 PostgreSQL Anonymizer: Unrestricted function can leak the secret salt — PostgreSQL Anonymizer CWE-328 4.3 Medium 2026-06-30
CVE-2026-11945 PostgreSQL Anonymizer: SQL injection in the rules import functions — PostgreSQL Anonymizer CWE-89 6.4 Medium 2026-06-11
CVE-2026-9617 PostgreSQL Anonymizer: malicious column name allows SQL injection via anon.k_anonymity() function — PostgreSQL Anonymizer CWE-89 6.8 Medium 2026-05-27
CVE-2026-2361 Improper search_path protection in PostgreSQL Anonymizer 2.5 allows any user with create privilege to gain superuser privileges — PostgreSQL Anonymizer CWE-427 8.0 High 2026-02-11
CVE-2026-2360 Improper search_path protection in PostgreSQL Anonymizer 2.5 allows any user to gain superuser privileges in PostgreSQL 14 — PostgreSQL Anonymizer CWE-427 8.0 High 2026-02-11
CVE-2025-5690 Cursor allows PostgreSQL Anonymizer masked user to gain unauthorized access to authentic data — PostgreSQL Anonymizer CWE-200 6.5 Medium 2025-06-04
CVE-2024-2339 Improper Input Validation in PostgreSQL Anonymizer 1.2 allows table owner to gain superuser privileges via masking rule — PostgreSQL Anonymizer CWE-20 8.0 High 2024-03-08
CVE-2024-2338 SQL Injection in PostgreSQL Anonymizer 1.2 allows table owner to gain superuser privileges via masking rule — PostgreSQL Anonymizer CWE-89 8.0 High 2024-03-08

This page lists every published CVE security advisory associated with DALIBO. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.