Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 8 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,313All CVEsplus 19,140 rejected
- 463Last 24 hours2,730 in the last 7 days
- 16,921Last 30 days1,560 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 2 | 4 | 3 | 1 | 0 | 10 | 13 |
| 2025 | 0 | 1 | 1 | 0 | 0 | 2 | 3 |
| 2024 | 0 | 1 | 0 | 0 | 0 | 1 | 1 |
| Title | ||
|---|---|---|
| CVE-2026-104949 | WarehousePG (WHPG) 6.27.1 through 6.27.6 and 7.2.1 through 7.6.0 are affected by a missing authorization vulnerability (CWE-862) in…EnterpriseDB · WarehousePG | Low2.3 |
| CVE-2026-104948 | WarehousePG (WHPG) 6.27.1 through 6.27.6 and 7.2.1 through 7.6.0 are affected by a missing authorization vulnerability (CWE-862) in the built-in cluster…EnterpriseDB · WarehousePG | High7.1 |
| CVE-2026-104947 | WarehousePG (WHPG) 7.2.1 through 7.6.0 is affected by a missing authorization vulnerability (CWE-862) in the built-in function…EnterpriseDB · WarehousePG | Medium5.3 |
| CVE-2026-93853 | Barman snapshot backup deletion trusts unverified backup catalog metadataEnterpriseDB · Barman | High7.2 |
| CVE-2026-96538 | WarehousePG pg_file_write/pg_file_rename/pg_file_unlink/pg_logdir_ls privilege escalationEnterpriseDB · WarehousePG | High8.7 |
| CVE-2026-50738 | A use-after-free condition exists in pglogical's worker signaling code, where a worker structure can be dereferenced after the underlying slot has been freed…EnterpriseDB · pglogical | High7.7 |
| CVE-2026-50737 | When applying replicated changes for a row that is missing one or more columns, pglogical evaluates the affected table's default expressions on the subscriber.…EnterpriseDB · pglogical | Critical9.0 |
| CVE-2026-50736 | The pglogical queue mechanism, used to convey out-of-band commands such as replicated DDL from a publisher to a subscriber, executes message payloads on the…EnterpriseDB · pglogical | Critical9.0 |
| CVE-2026-50735 | pglogical's apply worker does not sufficiently validate the length of certain fields in incoming replication protocol messages before copying them, resulting…EnterpriseDB · pglogical | Medium6.1 |
| CVE-2026-0949 | PEM versions prior to 9.8.1 are affected by a stored Cross-site Scripting (XSS) vulnerability that allows users with access to the Manage Charts menu to inject…EnterpriseDB · Postgres Enterprise Manager (PEM) | Medium6.5 |
| CVE-2025-14038 | EDB Hybrid Manager contains a flaw that allows an unauthenticated attacker to directly access certain gRPC endpoints. This could allow an attacker to read…EnterpriseDB · Hybrid Manager - LTS | High7.0 |
| CVE-2025-2506 | When pglogical attempts to replicate data, it does not verify it is using a replication connection, which means a user with CONNECT access to a database…EnterpriseDB · pglogical | Medium5.3 |
| CVE-2024-4545 | EDB Postgres Advanced Server (EPAS) authenticated file read permissions bypass using edbldrEnterpriseDB · EDB Postgres Advanced Server | High7.7 |