CVE Database
29323 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-116249 | HIGH | 8.4 | In server mode pgAdmin 4 resolves a server's password file, SSL certificate, key, CRL and SSH tunnel… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-116248 | MEDIUM | 6.8 | In pgAdmin 4 server mode only administrators are meant to share a server with all users; the server … |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-116247 | HIGH | 8.2 | When a server in pgAdmin 4 had no password file, client certificate or client key configured, or the… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-116246 | MEDIUM | 6.5 | To pass a server's password to psql and to the utilities pgAdmin 4 runs as background processes, the… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-116245 | HIGH | 8.2 | libpq looks a connection service up in the service file of the operating-system account running pgAd… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-116244 | HIGH | 8.2 | When a pgAdmin 4 connection was not meant to use a Kerberos user's delegated credentials, pgAdmin re… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-116243 | HIGH | 7.5 | pgAdmin 4 runs pg_dump, pg_restore, pg_dumpall and psql from the binary path a user sets in their pr… |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-116242 | HIGH | 8.2 | pgAdmin 4 opens SSH tunnels with the sshtunnel library but gave it neither host_pkey_directories nor… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-116241 | CRITICAL | 9.9 | pgAdmin 4's Import/Export Data tool wraps a user's query export in a psql \copy (...) TO command and… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-116240 | MEDIUM | 6.5 | In server mode pgAdmin 4 validates a path into the user's storage directory with check_access_permis… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-116239 | HIGH | 8.5 | In server mode pgAdmin 4 keeps an account per authentication source, so the same username can exist … |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-116238 | HIGH | 8.1 | In server mode pgAdmin 4 locks an internal account after MAX_LOGIN_ATTEMPTS failed logins (3 by defa… |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-115830 | NONE | — | In Secret Server versions earlier than 12.3.1, a user under certain conditions could submit an unsig… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-115829 | NONE | — | In Secret Server versions earlier than 12.3.1, a user could bypass the initial login step and authen… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-115828 | NONE | — | In Secret Server versions earlier than 12.3.1, Secret Server did not always validate the PIN or biom… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-94175 | HIGH | 7.1 | Unauthenticated Cross Site Scripting (XSS) in All In One Login <= 2.4.1 versions. |
T1078
T1548
|
|
2026-10-30 |
| CVE-2026-90888 | CRITICAL | 9.8 | Unauthenticated PHP Object Injection in LeadSnap <= 1.25 versions. |
T1078
T1548
|
|
2026-10-30 |
| CVE-2026-7005 | MEDIUM | 6.1 | WIT SynApps Runtime through 1.4.11 contains a browser-mediated cross-origin request forgery vulnerab… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-7004 | MEDIUM | 6.1 | WIT SynApps Runtime through 1.4.11 contains a pre-authentication reflected cross-site scripting vuln… |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-7003 | MEDIUM | 5.3 | WIT SynApps Runtime through 1.4.11 contains a hardcoded credentials vulnerability that allows unauth… |
T1078
T1548
|
|
2026-10-30 |