Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 4 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 400,562All CVEsplus 18,890 rejected
- 402Last 24 hours3,030 in the last 7 days
- 17,425Last 30 days1,598 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 10 | 68 | 50 | 7 | 0 | 135 | 170 |
| 2025 | 4 | 8 | 5 | 2 | 0 | 19 | 35 |
| 2024 | 3 | 9 | 2 | 2 | 0 | 16 | 16 |
| Title | ||
|---|---|---|
| CVE-2026-120067 | psqlODBC stack buffer overflow copying ctid and oid values for updatable cursorsPostgreSQL · psqlODBC | Medium5.9 |
| CVE-2026-120066 | psqlODBC log files are created with default permissions at a predictable path and follow symbolic linksPostgreSQL · psqlODBC | Medium5.3 |
| CVE-2026-120065 | psqlODBC does not escape a server-supplied column name in its updatable-cursor queriesPostgreSQL · psqlODBC | High7.1 |
| CVE-2026-120064 | psqlODBC does not validate column numbers and row indexes in binding and descriptor functionsPostgreSQL · psqlODBC | High7.5 |
| CVE-2026-120063 | psqlODBC stack buffer overflow when quoting long schema and table namesPostgreSQL · psqlODBC | Medium5.9 |
| CVE-2026-120062 | psqlODBC SQL injection through SQLSpecialColumns table and schema namesPostgreSQL · psqlODBC | High7.5 |
| CVE-2026-120061 | psqlODBC ODBC escape parser stack buffer overflowPostgreSQL · psqlODBC | High7.5 |
| CVE-2026-120060 | psqlODBC does not validate server-supplied counts and lengthsPostgreSQL · psqlODBC | Medium5.9 |
| CVE-2026-120059 | psqlODBC uses a server-supplied column name as a format stringPostgreSQL · psqlODBC | Medium6.8 |
| CVE-2026-120058 | psqlODBC row cache overflow when a later FETCH changes the column countPostgreSQL · psqlODBC | High7.5 |
| CVE-2026-120057 | psqlODBC large-object read overflows the application bufferPostgreSQL · psqlODBC | High7.5 |
| CVE-2026-116252 | pgAdmin 4: Materialized view refresh redirects its connection through a crafted database namepgadmin.org · pgAdmin 4 | High7.1 |
| CVE-2026-116251 | pgAdmin 4: A user's other sessions survive a change of their passwordpgadmin.org · pgAdmin 4 | Low2.3 |
| CVE-2026-116250 | pgAdmin 4: Files opened in a storage directory follow a symbolic link, hard link or FIFO planted after the containment checkpgadmin.org · pgAdmin 4 | High7.3 |
| CVE-2026-116249 | pgAdmin 4: Connection file paths and parameter keys escape the user's storage directorypgadmin.org · pgAdmin 4 | High7.2 |
| CVE-2026-116248 | pgAdmin 4: Non-administrators can share a server with every userpgadmin.org · pgAdmin 4 | Medium6.0 |
| CVE-2026-116247 | pgAdmin 4: libpq uses the pgAdmin service account's own password file and client certificatepgadmin.org · pgAdmin 4 | High7.1 |
| CVE-2026-116246 | pgAdmin 4: Server passwords are left in pgAdmin's process environmentpgadmin.org · pgAdmin 4 | High7.0 |
| CVE-2026-116245 | pgAdmin 4: Connection services are not restricted in server modepgadmin.org · pgAdmin 4 | High7.1 |
| CVE-2026-116244 | pgAdmin 4: libpq uses the pgAdmin service account's Kerberos credentialspgadmin.org · pgAdmin 4 | High7.1 |
| CVE-2026-116243 | pgAdmin 4: Utility binary path can point at a shared storage directorypgadmin.org · pgAdmin 4 | High7.7 |
| CVE-2026-116242 | pgAdmin 4: SSH tunnels use the pgAdmin service account's own SSH identitypgadmin.org · pgAdmin 4 | High7.1 |
| CVE-2026-116241 | pgAdmin 4: Import/Export Data query export runs a command through a backslash in a double-quoted identifierpgadmin.org · pgAdmin 4 | Critical9.4 |
| CVE-2026-116240 | pgAdmin 4: File Manager and storage-path tools act on a different path from the one checkedpgadmin.org · pgAdmin 4 | High7.1 |
| CVE-2026-116239 | pgAdmin 4: An LDAP or Kerberos login is logged in to another account with the same usernamepgadmin.org · pgAdmin 4 | High8.9 |
| CVE-2026-116238 | pgAdmin 4: The failed login limit can be bypassed, and Flask-Security's own views skip pgAdmin's login and password checkspgadmin.org · pgAdmin 4 | Critical9.2 |
| CVE-2026-110183 | PostgreSQL Anonymizer: statistics can expose some of the original data after statistic maskingDALIBO · PostgreSQL Anonymizer | Medium4.3 |
| CVE-2026-110182 | PostgreSQL Anonymizer: anon.partial() and anon.partial_email() can reveal the whole dataDALIBO · PostgreSQL Anonymizer | Medium4.3 |
| CVE-2026-110181 | PostgreSQL Anonymizer: Function declared with SQL-standard syntax leak anonymized dataDALIBO · PostgreSQL Anonymizer | Medium6.5 |
| CVE-2026-105620 | PostgreSQL Anonymizer: A masked role reads the authentic data of masked tables through a masking rule with a sub-queryDALIBO · PostgreSQL Anonymizer | Medium6.5 |
| CVE-2026-105619 | PostgreSQL Anonymizer: Masking rules of the tables are not applied through security_invoker viewsDALIBO · PostgreSQL Anonymizer | Medium4.8 |
| CVE-2026-105618 | PostgreSQL Anonymizer: Masked partitions and child tables are not masked when they are queried through their parentDALIBO · PostgreSQL Anonymizer | Medium5.7 |
| CVE-2026-105617 | PostgreSQL Anonymizer: Cached plans bypass transparent dynamic masking after a role change or a new masking ruleDALIBO · PostgreSQL Anonymizer | Medium5.7 |
| CVE-2026-105616 | PostgreSQL Anonymizer: The secret salt and shift of anon are readable by any role in pg_roles or pg_db_role_settingDALIBO · PostgreSQL Anonymizer | Medium5.7 |
| CVE-2026-105615 | PostgreSQL Anonymizer: Masked roles can read the statistics of masked columns in pg_statsDALIBO · PostgreSQL Anonymizer | Low3.5 |
| CVE-2026-105614 | PostgreSQL Anonymizer: Unbounded image-decode memory allocation (DoS) in anon.image_blur()DALIBO · PostgreSQL Anonymizer | Medium4.7 |
| CVE-2026-105613 | PostgreSQL Anonymizer: Unbounded memory allocation (DoS) in range-based dummy functionsDALIBO · PostgreSQL Anonymizer | Medium4.7 |
| CVE-2026-105612 | PostgreSQL Anonymizer: Data-modifying CTEs bypass the read-only restriction of masked rolesDALIBO · PostgreSQL Anonymizer | Low3.5 |
| CVE-2026-107350 | Authentication bypass via second StartupMessage during SCRAM authentication in PgBouncerPgBouncer | High8.8 |
| CVE-2026-107349 | Infinite loop on empty option name in startup options parameter in PgBouncerPgBouncer | High7.5 |
| CVE-2026-107348 | Integer overflow causes an infinite loop in message buffer growth in PgBouncerPgBouncer | Medium5.9 |
| CVE-2026-109448 | psqlODBC SQLBindParameter heap memory corruption when binding more than 32767 parametersPostgreSQL · psqlODBC | Medium5.9 |
| CVE-2026-107315 | pgjdbc pads a value shorter than its declared length with bytes of earlier statements (rather than zeros)pgjdbc · pgjdbc | Medium5.3 |
| CVE-2026-107314 | pgjdbc does not enforce requireAuth when the value excludes every authentication methodpgjdbc · pgjdbc | Medium5.9 |
| CVE-2026-107313 | pgjdbc stores bytes of earlier messages in place of a large value on GSS-encrypted connectionspgjdbc · pgjdbc | Medium4.2 |
| CVE-2026-103484 | pgvector buffer overflow in IVFFlat index buildpgvector | High8.8 |
| CVE-2026-97469 | PostgreSQL Anonymizer: RESTRICTED functions are reachable through a subLinkDALIBO · PostgreSQL Anonymizer | Medium4.3 |
| CVE-2026-19888 | NULL pointer dereference in SCRAM client-final-message parsing in PgBouncerPgBouncer | High7.5 |
| CVE-2026-6669 | Unbounded SCRAM iteration count causes CPU exhaustion in PgBouncerPgBouncer | Medium5.9 |
| CVE-2026-6668 | Integer overflow causes an infinite loop in packet buffer growth in PgBouncerPgBouncer | High7.5 |