CVE records
39888 records, newest first. We hold CVEs that were published recently, that are in the CISA KEV catalogue, or that an article mentions.
| CVE | Title | Published | Top score | KEV |
|---|---|---|---|---|
| CVE-2026-127030 | Freeradius: stack buffer overflow via unchecked eap-fast sessionticket length | 12 Nov 2026 | 7.5 | |
| CVE-2026-127029 | Freeradius: stack-based buffer overflow via unbounded eap-sim identity length | 12 Nov 2026 | 7.5 | |
| CVE-2026-127145 | SOGo before 5.12.13 SSRF via Web Calendar Subscriptions | 12 Nov 2026 | 5.3 | |
| CVE-2026-127141 | SOGo before 5.12.13 Denial of Service via Auxiliary IMAP Account Greeting Wait | 12 Nov 2026 | 7.1 | |
| CVE-2026-127135 | SOGo before 5.12.13 Sieve Script Injection via Notification Address | 12 Nov 2026 | 5.3 | |
| CVE-2026-70642 | ToolJet < 3.21.94 Authorization Bypass via app-environments/init | 12 Nov 2026 | 5.3 | |
| CVE-2026-127131 | SOGo before 5.12.13 Missing Rate Limiting on TOTP Verification | 12 Nov 2026 | 9.1 | |
| CVE-2026-127121 | SOGo before 5.12.13 S/MIME Certificate Spoofing via UIxMailView | 12 Nov 2026 | 7.1 | |
| CVE-2026-127111 | SOGo before 5.12.13 Unauthenticated Password Recovery Brute Force | 12 Nov 2026 | 9.1 | |
| CVE-2026-126329 | Docker Sandboxes privilege escalation through untrusted state directories | 12 Nov 2026 | 7.3 | |
| CVE-2026-126330 | Docker Sandboxes restores removed automatically assigned port publications | 12 Nov 2026 | 2.4 | |
| CVE-2026-19809 | Kernel stack information disclosure in the charger_get_prop() system call handler | 12 Nov 2026 | 3.3 | |
| CVE-2026-91007 | Arbitrary supervisor-mode function pointer injection via charger_set_prop() syscall in the charger driver API | 12 Nov 2026 | 7.8 | |
| CVE-2026-127109 | CVE-2026-127109 | 12 Nov 2026 | ||
| CVE-2026-123790 | Unauthenticated Path Traversal in ComfyUI-Easy-Use Allows Remote Code Execution | 12 Nov 2026 | ||
| CVE-2026-126998 | JeecgBoot Authentication Filter call OpenApiController.call server-side request forgery | 12 Nov 2026 | 7.5 | |
| CVE-2026-126997 | JeecgBoot flow-run Endpoint a.class RestTemplate.exchange server-side request forgery | 12 Nov 2026 | 7.5 | |
| CVE-2026-6467 | PostgreSQL extension script schema mishandling executes arbitrary SQL | 12 Nov 2026 | 7.2 | |
| CVE-2026-6460 | PostgreSQL type confusion after ALTER ... SET DATA TYPE executes arbitrary code | 12 Nov 2026 | 8.8 | |
| CVE-2026-18447 | PostgreSQL output parameter type confusion executes arbitrary code | 12 Nov 2026 | 8.8 | |
| CVE-2026-16240 | PostgreSQL pg_basebackup can use backup manifest content as a format string | 12 Nov 2026 | 3.7 | |
| CVE-2026-16237 | PostgreSQL INSERT ... ON CONFLICT can read or modify rows despite auto-updatable view WHERE condition | 12 Nov 2026 | 5.4 | |
| CVE-2026-14661 | PostgreSQL dblink and subscriptions can append to arbitrary files | 12 Nov 2026 | 8.1 | |
| CVE-2026-120154 | PostgreSQL INSERT ... ON CONFLICT can read rows despite row security policies | 12 Nov 2026 | 4.3 | |
| CVE-2026-120153 | PostgreSQL extension-script substitutions allow SQL injection through object names | 12 Nov 2026 | 7.2 | |
| CVE-2026-120152 | PostgreSQL pg_show_all_settings() use-after-free discloses memory | 12 Nov 2026 | 4.3 | |
| CVE-2026-120151 | PostgreSQL plpgsql record-field type confusion executes arbitrary code | 12 Nov 2026 | 8.8 | |
| CVE-2026-120150 | PostgreSQL expanded-record domain-check use-after-free executes arbitrary code | 12 Nov 2026 | 8.8 | |
| CVE-2026-120149 | PostgreSQL FDW batch-insert mismatch executes arbitrary code | 12 Nov 2026 | 8.8 | |
| CVE-2026-120148 | PostgreSQL extended-statistics pseudo-type confusion executes arbitrary code | 12 Nov 2026 | 8.1 | |
| CVE-2026-120147 | PostgreSQL dblink reentrant disconnect use-after-free executes arbitrary code | 12 Nov 2026 | 8.8 | |
| CVE-2026-120146 | PostgreSQL REASSIGN OWNED bypasses role SET and CREATEDB checks | 12 Nov 2026 | 4.3 | |
| CVE-2026-120145 | PostgreSQL logical replication can write to subscriber system catalogs, executing arbitrary code | 12 Nov 2026 | 8.8 | |
| CVE-2026-120144 | PostgreSQL type-cache invalidation gap executes arbitrary code | 12 Nov 2026 | 8.8 | |
| CVE-2026-120143 | PostgreSQL transition-table cursor use-after-free executes arbitrary code | 12 Nov 2026 | 8.8 | |
| CVE-2026-120142 | PostgreSQL dropped-column type confusion executes arbitrary code | 12 Nov 2026 | 8.8 | |
| CVE-2026-120141 | PostgreSQL materialized set-returning function type confusion executes arbitrary code | 12 Nov 2026 | 8.8 | |
| CVE-2026-120139 | PostgreSQL tuple-size integer wraparound executes arbitrary code | 12 Nov 2026 | 8.8 | |
| CVE-2026-116336 | PostgreSQL REINDEX CONCURRENTLY does not block DROP INDEX during index functions | 12 Nov 2026 | 8.8 | |
| CVE-2026-116335 | PostgreSQL commutator or negator result-type confusion executes arbitrary code | 12 Nov 2026 | 8.8 | |
| CVE-2026-116333 | PostgreSQL parallel B-tree array scan reads beyond array bounds | 12 Nov 2026 | 6.5 | |
| CVE-2026-116332 | PostgreSQL portal setup use-after-free executes arbitrary code | 12 Nov 2026 | 8.8 | |
| CVE-2026-116331 | PostgreSQL min/max aggregate type confusion executes arbitrary code | 12 Nov 2026 | 8.8 | |
| CVE-2026-126996 | SakanaAI text-to-LoRA Checkpoint Loading model_loading.py get_tokenizer path traversal | 12 Nov 2026 | 7.5 | |
| CVE-2026-116330 | PostgreSQL pg_dump tar restore.sql fails to block psql command injection | 12 Nov 2026 | 8.8 | |
| CVE-2026-116329 | PostgreSQL statistics import type confusion executes arbitrary code | 12 Nov 2026 | 8.8 | |
| CVE-2026-116328 | PostgreSQL generation memory context integer wraparound executes arbitrary code | 12 Nov 2026 | 8.8 | |
| CVE-2026-116327 | PostgreSQL security_barrier analysis can expose hidden values through indirect expressions | 12 Nov 2026 | 4.3 | |
| CVE-2026-116326 | PostgreSQL plperl tied-object exceptions follow stale sigjmp_buf | 12 Nov 2026 | 8.8 | |
| CVE-2026-116325 | PostgreSQL reindexdb index name quoting allows SQL injection | 12 Nov 2026 | 8.0 |