22966 matches found
EUVD-2026-57842
Buffer over-read in PostgreSQL pgtrgm index picksplit function reads past end of a heap buffer. This might allow a table maintainer to infer limited memory values, via the lossy signal of index split choices. Versions before PostgreSQL 18.5, 17.11, 16.15, 15.19, and 14.24 are affected...
CVE-2026-14678
Buffer over-read in PostgreSQL pgtrgm index picksplit function reads past end of a heap buffer. This might allow a table maintainer to infer limited memory values, via the lossy signal of index split choices. Versions before PostgreSQL 18.6, 17.11, 16.15, 15.19, and 14.24 are affected...
CVE-2026-14678
The provided records identify CVE-2026-14678 as a buffer over-read in PostgreSQL’s pg_trgm index picksplit function, which reads past the end of a heap buffer. This may allow a table maintainer to infer limited memory values via the lossy signal of index split choices. Affected are PostgreSQL ver...
CVE-2026-14678
Buffer over-read in PostgreSQL pgtrgm index picksplit function reads past end of a heap buffer. This might allow a table maintainer to infer limited memory values, via the lossy signal of index split choices. Versions before PostgreSQL 18.6, 17.11, 16.15, 15.19, and 14.24 are affected...
CVE-2026-14678 PostgreSQL pg_trgm picksplit reads past end of buffer
Buffer over-read in PostgreSQL pgtrgm index picksplit function reads past end of a heap buffer. This might allow a table maintainer to infer limited memory values, via the lossy signal of index split choices. Versions before PostgreSQL 18.6, 17.11, 16.15, 15.19, and 14.24 are affected...
CVE-2026-14673 PostgreSQL amcheck does not clear untrusted search path
Untrusted search path in PostgreSQL amcheck allows a grantee of amcheck function EXECUTE privilege to execute arbitrary functions as the owners of expression indexes that depend on the search path, via setting a hostile search path before calling the amcheck function. Within major versions 18, 16...
Elasticsearch 8.19.20, 9.4.5 Security Update (ESA-2026-119)
Uncontrolled Recursion in Elasticsearch Leading to Denial of Service Uncontrolled Recursion CWE-674 in Elasticsearch can lead to denial of service via Input Data Manipulation CAPEC-153. An authenticated user holding only low-privileged index creation permissions can submit a single request...
PT-2026-71898
Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description Resolving relative paths containing parent directory '..' segments previously performed string conversions and buffer rewrites at each step. This process resulte...
SUSE SLED15 / SLES15 Security Update : python3-pip (SUSE-SU-2026:3588-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:3588-1 advisory. This update for python3-pip fixes the following issue: - CVE-2026-13346: incorrect handling of doubly-encoded package...
Vulnerability in contrib module (CVE-2026-14678)
PostgreSQL pgtrgm picksplit reads past end of buffer Buffer over-read in PostgreSQL pgtrgm index picksplit function reads past end of a heap buffer. This might allow a table maintainer to infer limited memory values, via the lossy signal of index split choices. Versions before PostgreSQL 18.6,...
SUSE SLED15 / SLES15 Security Update : python-pip (SUSE-SU-2026:3589-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:3589-1 advisory. This update for python-pip fixes the following issue: - CVE-2026-13346: incorrect handling of doubly-encoded package UR...
PT-2026-71474
Name of the Vulnerable Software and Affected Versions PostgreSQL versions prior to 18.5 PostgreSQL versions prior to 17.11 PostgreSQL versions prior to 16.15 PostgreSQL versions prior to 15.19 PostgreSQL versions prior to 14.24 Description A buffer over-read occurs in the picksplit function of th...
CVE-2026-19311
Missing authorization in the Execute Monitor API in Amazon OpenSearch Alerting plugin might allow an authenticated remote user to read, modify, or delete arbitrary index data via a crafted inline monitor request with unintentional data source and input index parameters...
CVE-2026-19311 Missing Authorization in Execute Monitor API in OpenSearch Alerting Plugin
Missing authorization in the Execute Monitor API in Amazon OpenSearch Alerting plugin might allow an authenticated remote user to read, modify, or delete arbitrary index data via a crafted inline monitor request with unintentional data source and input index parameters...
CVE-2026-19311 Missing Authorization in Execute Monitor API in OpenSearch Alerting Plugin
Missing authorization in the Execute Monitor API in Amazon OpenSearch Alerting plugin might allow an authenticated remote user to read, modify, or delete arbitrary index data via a crafted inline monitor request with unintentional data source and input index parameters...
CVE-2026-19311
The CVE-2026-19311 issue affects the Amazon OpenSearch Alerting plugin, specifically the Execute Monitor API. A missing authorization check in the API could allow an authenticated remote user to read, modify, or delete arbitrary index data through a crafted inline monitor request using unintentio...
EUVD-2026-57420
Missing authorization in the Execute Monitor API in Amazon OpenSearch Alerting plugin might allow an authenticated remote user to read, modify, or delete arbitrary index data via a crafted inline monitor request with unintentional data source and input index parameters...
CVE-2026-19311
Missing authorization in the Execute Monitor API in Amazon OpenSearch Alerting plugin might allow an authenticated remote user to read, modify, or delete arbitrary index data via a crafted inline monitor request with unintentional data source and input index parameters...