28424 matches found
PostgreSQL fails to check type USAGE privilege
...
PostgreSQL tsvector and tsquery undersize allocations, via integer wraparound
...
PostgreSQL ascii() function reads past end of buffer
...
PostgreSQL regexp heap buffer overflow executes arbitrary code
...
PostgreSQL row security caching disregards role modifications
...
PostgreSQL pgcrypto, for OpenSSL-disabled ciphers, silently encrypts to and decrypts from cleartext
...
PostgreSQL type confusion via "internal" arguments
...
PostgreSQL type confusion in cursor CLOSE + DECLARE executes arbitrary code
...
PostgreSQL ALTER TABLE ALTER TYPE resets extended statistics ownership
...
PostgreSQL pg_dump heap buffer overflow executes arbitrary code
...
PostgreSQL psql \unrestrict lets superuser of pg_dump origin server execute arbitrary code in psql client
...
PostgreSQL observable response discrepancy with non-default scram_iterations provides user existence oracle
...
PostgreSQL ctid type confusion in selectivity estimator discloses derivative of arbitrary read
...
PostgreSQL logical decoding can dlopen arbitrary file
...
PostgreSQL plperl tied object heap buffer overflow executes arbitrary code
...
PostgreSQL expression deparse allows SQL injection via EXTRACT argument
...
PostgreSQL amcheck does not clear untrusted search path
...
KVM: s390: pci: Fix handling of AIF enable without AISB
...
Megaco flex scanner buffer overflow via oversized property parm name
...
DTLS listener crash via race condition in dtls_packet_demux causes denial of service for all sessions
...
DTLS server cookie bypass during startup window due to empty initial cookie secret
...
systemd-oomd: unprivileged users can terminate arbitrary processes
...
Shim/dp.c library: null-pointer dereference in is_removable_media_path() when devicepathtostr() returns null
...
Super-linear CPU usage for unbounded input to csv.Sniffer.sniff()
...
Libvirt: information disclosure via world-readable storage volume images during clone/convert
...
Iperf3: iperf3 server accepts unbounded peer-controlled json parameters enabling remote denial of service via resource exhaustion
...
Iperf3: unbounded peer-controlled allocation in iperf3 json_read() allows unauthenticated remote memory exhaustion
...
tar-rs 0.4.11 - 0.4.46 Symlink Escape via append_dir_all()
...
drm/dp_mst: Handle torn-down topology gracefully in drm_dp_mst_topology_queue_probe()
...
vxlan: require CAP_NET_ADMIN in the device netns for changelink
...
libceph: bound get_version reply decode to front len
...
drm/vmwgfx: Validate vmw_surface_metadata::array_size
...
Vim: Stack Buffer Overflow in the Vim Socket Server
...
Vim: Arbitrary Command Execution via Malicious `.VimballRecord` Entry Replay in `vimball.vim`
...
Vim: Arbitrary Code Execution via Shell Keyword Lookup
...
Vim: Heap Buffer Overflow when Loading a Spell File
...
Vim: Heap Buffer Overflow in Text Property Handling
...
Vim: Arbitrary Code Execution via Netrw Menu Construction
...
btrfs: free mapping node on duplicate reloc root insert
...
drm/vc4: Prevent shader BO mappings from becoming writable
...
firmware: arm_ffa: Fix NULL dereference in ffa_partition_info_get()
...
In ssh in OpenSSH before 10.5, a use-after-free for realloc data can occur if a certain pair of remote-forwarding operations are concurrent.
...
In ssh-agent in OpenSSH before 10.5, some operations can occur remotely but were intended to occur only locally, including operations that add tokens or use keys. This is caused by misinteraction between agent locking and the [email protected] extension.
...
Nmap 7.99 Denial of Service via Zero-Length TCP Option Packet
...
drm/amdkfd: clamp v9 CRIU control stack checkpoint copy to BO size
...
ovl: check access to copy_file_range source with src mounter creds
...
net/sched: Handle TC_ACT_REDIRECT from qdisc filter chains
...
RDMA/rxe: Fix a use-after-free problem in rxe_mmap
...
Chromium: CVE-2026-19560 Use after free in Blink
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-19559 Use after free in HTML
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...