CVE Database
29323 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-105618 | MEDIUM | 5.7 | PostgreSQL Anonymizer's documentation recommends applying rules on partitions and inheritance tables… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-105617 | MEDIUM | 6.5 | PostgreSQL Anonymizer doesn't invalidate plans prepared after a rule was added or a role changed. Us… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-105616 | MEDIUM | 5.7 | PostgreSQL restricts acces to the salt and shift via the `SHOW` command for users not member of `pg_… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-105615 | LOW | 3.5 | PostgreSQL's optimized statistics on a table are visible as long as you have SELECT privilege on sai… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-105614 | MEDIUM | 4.7 | PostgreSQL Anonymizer's `anon.image_blur()` function doesn't check the declared dimension of the pro… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-105613 | MEDIUM | 4.7 | PostgreSQL Anonymizer's range-based dummy functions dont constraint the range size. This vulnerabili… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-105612 | LOW | 3.5 | PostgreSQL Anonymizer contains a vulnerability that data-modifying CTEs to bypass the read-only rest… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-93536 | MEDIUM | 5.3 | A use after free caused by missing lifecycle management of gesture sprites in GestureBuildSprite() i… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-93524 | NONE | — | A buffer overread in CheckKeySyms() in X.Org X Server before 21.1.25 and XWayland before 24.1.14 cou… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-93523 | HIGH | 7.8 | A heap buffer overflow caused by a XIPassiveUngrabDevice request with an out-of-range modifier value… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-88967 | HIGH | 7.7 | A user with query access to an Azure Monitor data source in Grafana can cause server-side requests t… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-88858 | MEDIUM | 6.5 | A user with the Viewer role in Grafana can crash the server by submitting a crafted server-side math… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-83525 | NONE | — | Incorrect operator (CWE-480) in the FetchSnapshot RPC handler in Apache Kafka from 2.8.0 before 4.2.… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-82962 | MEDIUM | 6.5 | ethernet_fill_header() in subsys/net/l2/ethernet/ethernet.c can prepend the Ethernet header in place… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-82961 | HIGH | 7.8 | The GPIO syscall handlers in drivers/gpio/gpio_handlers.c did not validate the pin argument supplied… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-118619 | HIGH | 8.8 | Ultralytics Google Drive Download Path Traversal Remote Code Execution Vulnerability. This vulnerabi… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-118618 | HIGH | 7.8 | Ultralytics parse_model Code Injection Remote Code Execution Vulnerability. This vulnerability allow… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-118617 | HIGH | 7.8 | Ultralytics load_dataset_cache_file Deserialization of Untrusted Data Remote Code Execution Vulnerab… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-118616 | HIGH | 7.8 | Ultralytics parse_model Code Injection Remote Code Execution Vulnerability. This vulnerability allow… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-118615 | HIGH | 7.8 | Ultralytics torch_safe_load Command Injection Remote Code Execution Vulnerability. This vulnerabilit… |
T1190
T1059
+1
|
|
2026-10-28 |