CVE-2026-83534

PostgreSQL Anonymizer contains a privilege escalation vulnerability in the anon.anonymize_database_parallel() function, allowing the owner of a table to execute arbitrary code with superuser privileges. The CVSS 3.1 score is 6.4 (MEDIUM) , with a network attack vector, high complexity, high privi...

EUVD-2026-72143

PostgreSQL Anonymizer contains a vulnerability in the anon.anonymizedatabaseparallel function that allows the owner of a table to run arbitrary code with superuser privilege. The issue is fixed in PostgreSQL Anonymizer 3.2.0 and later versions...

CVE-2026-83534 PostgreSQL Anonymizer: Privilege escalation to superuser via anon.anonymize_database_parallel()

PostgreSQL Anonymizer contains a vulnerability in the anon.anonymizedatabaseparallel function that allows the owner of a table to run arbitrary code with superuser privilege. The issue is fixed in PostgreSQL Anonymizer 3.2.0 and later versions...

CVE-2026-19633 PostgreSQL Anonymizer: unprivileged masked users can execute code via operators, domain casts and view subqueries

PostgreSQL Anonymizer contains a vulnerability that allows unprivileged masked users to execute arbitrary code by abusing operators, domain casts, or view subqueries that carry untrusted expressions. When these objects are evaluated in the context of the extension’s masking mechanisms, the...

CVE-2026-19633

PostgreSQL Anonymizer is a PostgreSQL extension for data masking. This vulnerability allows unprivileged masked users to execute arbitrary code by abusing operators, domain casts, or view subqueries that carry untrusted expressions. When these objects are evaluated within the extension's masking ...

EUVD-2026-72141

PostgreSQL Anonymizer contains a vulnerability that allows unprivileged masked users to execute arbitrary code by abusing operators, domain casts, or view subqueries that carry untrusted expressions. When these objects are evaluated in the context of the extension’s masking mechanisms, the...

CVE-2026-19633 PostgreSQL Anonymizer: unprivileged masked users can execute code via operators, domain casts and view subqueries

PostgreSQL Anonymizer contains a vulnerability that allows unprivileged masked users to execute arbitrary code by abusing operators, domain casts, or view subqueries that carry untrusted expressions. When these objects are evaluated in the context of the extension’s masking mechanisms, the...

PT-2026-86535

Name of the Vulnerable Software and Affected Versions PostgreSQL Anonymizer versions prior to 3.1.4 Description Unprivileged masked users can execute arbitrary code by abusing operators, domain casts, or view subqueries that contain untrusted expressions. This occurs when these objects are...

Debian dla-4774 : aom-tools - security update

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4774 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4774-1 [email protected]...

PT-2026-86537

PostgreSQL Anonymizer contains a vulnerability in the anon.anonymize database parallel function that allows the owner of a table to run arbitrary code with superuser privilege. The issue is fixed in PostgreSQL Anonymizer 3.2.0 and later versions...

[SECURITY] [DSA 6484-1] chromium security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6484-1 [email protected] https://www.debian.org/security/ Andres Salomon September 05, 2026 https://www.debian.org/security/faq -...

OESA-2026-3653 kata-containers-go security update

This is core component of Kata Container, to make it work, you need a isulad/docker engine. Security Fixes: A flaw was found in Kata Containers, affecting both its Rust and Go runtimes. An authenticated pod user can exploit this by setting the io.katacontainers.configpath annotation to an arbitra...

OESA-2026-3631 perl-DBI security update

The DBI is the standard database interface module for Perl. It defines a set of methods, variables and conventions that provide a consistent database interface independent of the actual database being used. It is important to remember that the DBI is just an interface. The DBI is a layer of "glue...

OESA-2026-3629 perl-DBI security update

The DBI is the standard database interface module for Perl. It defines a set of methods, variables and conventions that provide a consistent database interface independent of the actual database being used. It is important to remember that the DBI is just an interface. The DBI is a layer of "glue...

Exploit for Missing Authorization in Postgresql

PostgreSQL CVE-2026-6471: logical decoding dlopen of an arbitr...

Exploit for Code Injection in Langflow

No d...

SUSE CVE-2026-79675

NLTK before 3.10.3 fails to validate JVM options passed through the per-call options parameter in the java function, allowing attackers to inject dangerous JVM flags. Attackers can supply malicious options like -agentpath, -javaagent, or @argfile to Stanford wrapper classes to achieve arbitrary...

PT-2026-86449

CVE-2026-36433 — Arbitrary code execution in Actions Semiconductor Media Player Utilities v.4.46 No signature. No checksum. No auth. Their own firmware update toolkit Production.dll + RdiskUpgrade.exe accepts any firmware you hand it over USB. https://t.co/meTetZ91W1 CVE...

AlmaLinux 10 : freerdp (ALSA-2026:61378)

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:61378 advisory. FreeRDP: FreeRDP: Resource exhaustion due to oversized chunked HTTP responses CVE-2026-67297 FreeRDP: FreeRDP: Memory disclosure or denial of service vi...

CVE-2026-50894

easyadmin v2.0.2.2 is vulnerable to Unrestricted Upload of File with Dangerous Type in the background management interface which allows authenticated remote attackers to execute arbitrary code and gain server privileges via a crafted file upload...