CVE-2026-120058

psqlODBC sizes its row cache from the column count of a cursor's first result, but recomputes the column count from each later FETCH reply without checking that it matches. A server not trusted under current SSL settings can answer a later FETCH with more columns and make the driver write tuple...

EUVD-2026-115378

For an updatable cursor over a table without OIDs that has an auto-increment int4 column, psqlODBC uses that column to identify rows. It places the column's name, as reported by the server, between double quotes in its keyset queries and in the WHERE clause of its positioned SELECT, UPDATE, and...

CVE-2026-120058

The psqlODBC driver is vulnerable to an out-of-bounds write and integer underflow because it sizes its row cache based on the first result of a cursor but fails to verify column counts in subsequent FETCH replies. If UseDeclareFetch is enabled, a malicious server can provide a FETCH with more col...

CVE-2026-120058 psqlODBC row cache overflow when a later FETCH changes the column count

psqlODBC sizes its row cache from the column count of a cursor's first result, but recomputes the column count from each later FETCH reply without checking that it matches. A server not trusted under current SSL settings can answer a later FETCH with more columns and make the driver write tuple...

CVE-2026-120058 psqlODBC row cache overflow when a later FETCH changes the column count

psqlODBC sizes its row cache from the column count of a cursor's first result, but recomputes the column count from each later FETCH reply without checking that it matches. A server not trusted under current SSL settings can answer a later FETCH with more columns and make the driver write tuple...

CVE-2026-116681

The row-scoped endpoints of a public shared view verified the target record with a primary-key read that ignored the view's row filter, while the view's own list and count endpoints enforced it. The mere existence of a primary key was enough to pass that check...

A Novel Federated Learning Framework for Defending against Gradient Inversion Attacks

Federated Learning FL offers a paradigm for collaborative machine learning model training among clients, preserving data privacy by avoiding direct data sharing. However, the gradient information exchanged in FL has been shown to be vulnerable to Gradient Inversion Attacks GIA, which can...

the-token-was-a-row-number-cve-2026-67602-phpipam-rest-api-authentication-bypass

CVE-2026-67602 — phpIPAM 1.8.2 REST API Authentication Bypass Unauthenticated authentication bypass in the phpIPAM REST API, caused by an object-cache key collision: the database row cached while resolving an API app's appid satisfies the subsequent appcode token check whenever the supplied token...

CVE-2026-65013-BOLA-IDOR

CVE-2026-65013-BOLA-IDOR Reproducible PoC ofBOLA / IDOR in the tRPC API of Onlook CVE-2026-65013. Any authenticated user can read, modify, and delete projects, members, and AI history of other users just by passing their UUIDs to the tRPC procedures versions = 0.2.32. | ---|--- CVE| CVE-2026-6501...

CVE-2026-119591: SQLite: SQLite before 3.54.0 contains a stack exhaustion vulnerability in countOfViewOptimization() that allows attackers to…

SQLite before 3.54.0 contains a stack exhaustion vulnerability in countOfViewOptimization that allows attackers to crash the host process via count over a large multi-row VALUES clause. Attackers supplying SQL or a database file with a crafted view can trigger deeply nested TKPLUS expressions who...

PT-2026-133508

SQLite before 3.54.0 contains a stack exhaustion vulnerability in countOfViewOptimization that allows attackers to crash the host process via count over a large multi-row VALUES clause. Attackers supplying SQL or a database file with a crafted view can trigger deeply nested TK PLUS expressions...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: OpenEXR (UTSA-2026-147001)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-147001 advisory. OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. In OpenEXRUtil versions 3.3.0 through...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: OpenEXR (UTSA-2026-147024)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-147024 advisory. OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. Versions before 3.2.11, 3.3.0 through...

CVE-2026-109988

The Product Addons for Woocommerce – Product Options with Custom Fields plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'fieldssectionfieldsrowcoltype' parameter in all versions up to, and including, 3.1.8 due to insufficient input sanitization and output escaping. This...

CVE-2026-109988

The Product Addons for Woocommerce – Product Options with Custom Fields plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 3.1.8 . The root cause is insufficient input sanitization and output escaping within the fields[section][fields][row]...

CVE-2026-109988 Product Addons for Woocommerce <= 3.1.8 - Authenticated (Shop Manager+) Stored Cross-Site Scripting via 'type' Field Parameter

The Product Addons for Woocommerce – Product Options with Custom Fields plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'fieldssectionfieldsrowcoltype' parameter in all versions up to, and including, 3.1.8 due to insufficient input sanitization and output escaping. This...

CVE-2026-109988 Product Addons for Woocommerce <= 3.1.8 - Authenticated (Shop Manager+) Stored Cross-Site Scripting via 'type' Field Parameter

The Product Addons for Woocommerce – Product Options with Custom Fields plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'fieldssectionfieldsrowcoltype' parameter in all versions up to, and including, 3.1.8 due to insufficient input sanitization and output escaping. This...

EUVD-2026-111604

The Product Addons for Woocommerce – Product Options with Custom Fields plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'fieldssectionfieldsrowcoltype' parameter in all versions up to, and including, 3.1.8 due to insufficient input sanitization and output escaping. This...

CVE-2026-109988: acowebs Product Addons for Woocommerce – Product Options with Custom Fields: The Product Addons for Woocommerce – Product Options with Custom Fields plugin for WordPress is vulnerable to Stored…

The Product Addons for Woocommerce – Product Options with Custom Fields plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'fieldssectionfieldsrowcoltype' parameter in all versions up to, and including, 3.1.8 due to insufficient input sanitization and output escaping. This...

WordPress Polylang Pro plugin < 3.8.6 - Contributor+ Private Post Disclosure via Row Update AJAX Actions vulnerability

Contributor+ Private Post Disclosure via Row Update AJAX Actions vulnerability discovered by Ananda Dhakal in WordPress Plugin Polylang Pro versions 3.8.6...