Browse CVEs

MEDIUM 6.5 CVE-2026-27537 Unauthenticated Cross Site Scripting (XSS) in Popup by Supsystic <= 1.11.2 versions. No fix yet Fix from $4,0002026-08-13 HIGH 7.1 CVE-2026-27536 Unauthenticated Cross Site Scripting (XSS) in MailChimp Subscribe Forms <= 4.3.3 versions. No fix yet Fix from $4,9002026-08-13 HIGH 7.1 CVE-2026-27535 Subscriber Broken Access Control in Solace Extra <= 1.6.0 versions. No fix yet Fix from $4,9002026-08-13 HIGH 7.2 CVE-2026-27380 Editor PHP Object Injection in Car Rental Manager <= 1.3.9 versions. No fix yet Fix from $4,9002026-08-13 HIGH 7.5 CVE-2026-27345 Unauthenticated Broken Access Control in Taxi Booking Manager for WooCommerce <= 2.0.3 versions. No fix yet Fix from $4,9002026-08-13 MEDIUM 5.1 CVE-2026-19716 Stored Cross-site Scripting (CWE-79) in the user management component in maalfer Pentestify before 1.1.1 allows an authenticated attacker to execute … Patch available Fix from $4,0002026-08-13 MEDIUM 5.6 CVE-2025-62314 HCL AION is affected by a vulnerability where certain endpoints lack sufficient anti-automation controls. Automated or scripted requests may be submi… No fix yet Fix from $4,0002026-08-13 MEDIUM 6.3 CVE-2026-73585 A flaw was found in sblim-cmpi-base. Insecure temporary file creation in the provider registration scripts allows a local unprivileged user to perfor… No fix yet Fix from $4,0002026-08-13 MEDIUM 6.3 CVE-2026-73584 A flaw was found in sblim-sfcb. A local, low-privileged attacker can exploit a race condition during privileged instance migration by manipulating a … No fix yet Fix from $4,0002026-08-13 MEDIUM 6.6 CVE-2026-73583 A flaw was found in sblim-sfcb. A local attacker with access to the system can exploit an unsafe deserialization vulnerability in the provider-manage… No fix yet Fix from $4,0002026-08-13 HIGH 7.2 CVE-2026-6471 Missing authorization in PostgreSQL logical decoding allows a non-superuser holding REPLICATION privilege to dlopen any file visible to the operating… PostgreSQL 14.24 / 15.19+ Fix from $4,9002026-08-13 HIGH 8.1 CVE-2026-6464 Untrusted data inclusion in PostgreSQL psql COPY may allow a server administrator to elicit execution of data lines as psql commands, via error injec… PostgreSQL 14.24 / 15.19+ Fix from $4,9002026-08-13 CRITICAL 9.8 CVE-2026-49827 WebErpMesv2 is a Resource Management and Manufacturing execution system Web for industry. Versions 1.19 and prior allow any self-registered user to u… Patch available Fix from $5,7502026-08-13 HIGH 8.7 CVE-2026-49478 Fulcio is a certificate authority for issuing code signing certificates for an OpenID Connect (OIDC) identity. Versions through 1.8.5 improperly foll… Patch available Fix from $4,9002026-08-13 HIGH 8.8 CVE-2026-19385 Heap buffer overflow in PostgreSQL pg_dump of long function transform lists allows an object creator to execute arbitrary code as the operating syste… PostgreSQL 14.24 / 15.19+ Fix from $4,9002026-08-13 HIGH 8.8 CVE-2026-18408 Untrusted data inclusion in pg_dump in PostgreSQL allows a malicious superuser of the origin server to inject arbitrary code for restore-time executi… PostgreSQL 14.24 / 15.19+ Fix from $4,9002026-08-13 HIGH 8.8 CVE-2026-16239 Type confusion in PostgreSQL "portal"/cursor lifecycle allows a user to execute arbitrary code as the operating system user running the database, via… PostgreSQL 14.24 / 15.19+ Fix from $4,9002026-08-13 HIGH 8.8 CVE-2026-16238 Type confusion in PostgreSQL pg_restore_attribute_stats() allows an object creator to execute arbitrary code as the operating system user running the… PostgreSQL 14.24 / 15.19+ Fix from $4,9002026-08-13 HIGH 8.8 CVE-2026-15742 Integer wraparound in PostgreSQL fuzzystrmatch allows a user to direct writes to a huge range of addresses, executing arbitrary code as the operating… PostgreSQL 14.24 / 15.19+ Fix from $4,9002026-08-13 HIGH 8.8 CVE-2026-15741 SQL injection in PostgreSQL EXTRACT() deparse allows an object owner to execute arbitrary SQL as a superuser via a hostile object definition. Attack… PostgreSQL 14.24 / 15.19+ Fix from $4,9002026-08-13 HIGH 8.8 CVE-2026-14680 Type confusion with PostgreSQL "internal" data type arguments allows any user to execute arbitrary code as the operating system user running the data… PostgreSQL 14.24 / 15.19+ Fix from $4,9002026-08-13 HIGH 8.2 CVE-2026-14679 Stack buffer overflow in PostgreSQL argument name matching allows an object creator to achieve unknown impacts via OUT parameter count. The attack c… PostgreSQL 14.24 / 15.19+ Fix from $4,9002026-08-13 HIGH 8.8 CVE-2026-14677 Integer wraparound in PostgreSQL 32-bit builds of pltcl and plperl allows an object creator to cause the server to undersize an allocation and write … PostgreSQL 14.24 / 15.19+ Fix from $4,9002026-08-13 HIGH 8.8 CVE-2026-14676 Heap buffer overflow in PostgreSQL pg_stat_statements allows the query author to execute arbitrary code as the operating system user running the data… PostgreSQL 18.5+ Fix from $4,9002026-08-13 MEDIUM 5.3 CVE-2026-14672 Observable response discrepancy in PostgreSQL SCRAM authentication allows an unauthenticated user to test the existence of a user via observing the S… PostgreSQL 14.24 / 15.19+ Fix from $4,0002026-08-13 HIGH 8.8 CVE-2026-14671 Type confusion in PostgreSQL module "refint" allows an object creator to execute arbitrary code as the operating system user running the database. T… PostgreSQL 14.24 / 15.19+ Fix from $4,9002026-08-13 HIGH 8.8 CVE-2026-14670 Heap buffer overflow in PostgreSQL plperl return of a tied hash allows the function owner to execute arbitrary code as the operating system user runn… PostgreSQL 14.24 / 15.19+ Fix from $4,9002026-08-13 HIGH 8.8 CVE-2026-14669 Heap buffer overflow in PostgreSQL to_char(timestamptz) allows the party choosing the timezone to execute arbitrary code as the operating system user… PostgreSQL 14.24 / 15.19+ Fix from $4,9002026-08-13 HIGH 8.1 CVE-2026-14668 Type confusion regarding input of PostgreSQL ctid data type selectivity estimator allows an object creator to view a calculation derived from the val… PostgreSQL 14.24 / 15.19+ Fix from $4,9002026-08-13 HIGH 8.8 CVE-2026-14664 Heap buffer overflow in PostgreSQL regexp allows the query author to execute arbitrary code as the operating system user running the database, via te… PostgreSQL 14.24 / 15.19+ Fix from $4,9002026-08-13