CGA-626P-RFMC-3PXP

Bulletin has no description...

MINI-F6Q4-6PMC-QQX3

Bulletin has no description...

MINI-7597-9M3M-2683

Bulletin has no description...

MINI-J39H-V576-P4RG

Bulletin has no description...

UBUNTU-CVE-2026-18024

Buffer over-read in PostgreSQL ascii SQL function allows a user to disclose up to 3 bytes after the end of a specific allocation, via a crafted text value. This is the same class of defect that CVE-2026-2006 fixed, though this instance has less impact. Versions before PostgreSQL 18.6, 17.11, 16.1...

MINI-2FX4-J5JV-6P5H

Bulletin has no description...

CVE-2026-73625

creationtimestamp| type| source ---|---|--- 2026-08-13 13:00:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/32wcjv3b7dqkl 2026-08-15 13:10:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mt4qnvwf5g2f 2026-08-19 16:00:03+00:00| seen| https://t.me/bdufstecru/33...

EUVD-2026-57858

Type confusion in PostgreSQL module "refint" allows an object creator to execute arbitrary code as the operating system user running the database. The fix for this emerged as a non-security bug report, and the fix appear in the git repository with subject "refint: Remove plan cache.", without a C...

CVE-2026-14671 PostgreSQL refint plan cache type confusion executes arbitrary code

Type confusion in PostgreSQL module "refint" allows an object creator to execute arbitrary code as the operating system user running the database. The fix for this emerged as a non-security bug report, and the fix appear in the git repository with subject "refint: Remove plan cache.", without a C...

CVE-2026-6470

Missing authorization in PostgreSQL DDL commands allows an object creator to achieve denial of service against ALTER and DROP of the type, via creating a dependency on the type. Many DDL operations did check the privilege, but assigning a range subtype and referencing the type from an SQL...

EUVD-2026-57853

Heap buffer overflow in PostgreSQL pgdump of long function transform lists allows an object creator to execute arbitrary code as the operating system user running pgdump, via a crafted transform list. Versions before PostgreSQL 18.5, 17.11, 16.15, 15.19, and 14.24 are affected...

CVE-2026-14664 PostgreSQL regexp heap buffer overflow executes arbitrary code

Heap buffer overflow in PostgreSQL regexp allows the query author to execute arbitrary code as the operating system user running the database, via text that would not pass encoding validation. This shares heritage with CVE-2026-2006, but this case involved unanticipated data growth when...

ECHO-D837-AA5E-CF4E

Bulletin has no description...

MINI-98H8-6FW9-5W6P

Bulletin has no description...

MINI-3HQ7-M7RM-4CG9

Bulletin has no description...

MINI-Q874-V444-7JGQ

Bulletin has no description...

MINI-M5V4-V6GJ-RHXC

Bulletin has no description...

MINI-P79Q-3PRR-MVX9

Bulletin has no description...

MINI-H578-Q7P5-WRJJ

Bulletin has no description...

CVE-2026-53793

rsync before 3.5.0 contains a path confinement bypass vulnerability that allows remote clients to escape the intended inner-module root confinement by constructing paths that resolve outside the chroot boundary when the module root contains a /./ boundary marker. Attackers can exploit improper...