Search CVE reports


Toggle filters

801 – 810 of 36525 results

Status is adjusted based on your filters.


CVE-2026-6478

Medium priority
Fixed

Covert timing channel in comparison of MD5-hashed password in PostgreSQL authentication allows an attacker to recover user credentials sufficient to authenticate. This does not affect scram-sha-256 passwords, the default in all...

8 affected packages

postgresql-18, postgresql-17, postgresql-16, postgresql-14, postgresql-12...

Package 24.04 LTS
postgresql-18 Not in release
postgresql-17 Not in release
postgresql-16 Fixed
postgresql-14 Not in release
postgresql-12 Not in release
postgresql-10 Not in release
postgresql-9.5 Not in release
postgresql-9.3 Not in release
Show all 8 packages Show less packages

CVE-2026-6477

Medium priority
Fixed

Use of inherently dangerous function PQfn(..., result_is_int=0, ...) in PostgreSQL libpq lo_export(), lo_read(), lo_lseek64(), and lo_tell64() functions allows the server superuser to overwrite a client stack buffer with an...

8 affected packages

postgresql-18, postgresql-17, postgresql-16, postgresql-14, postgresql-12...

Package 24.04 LTS
postgresql-18 Not in release
postgresql-17 Not in release
postgresql-16 Fixed
postgresql-14 Not in release
postgresql-12 Not in release
postgresql-10 Not in release
postgresql-9.5 Not in release
postgresql-9.3 Not in release
Show all 8 packages Show less packages

CVE-2026-6476

Medium priority
Fixed

SQL injection in PostgreSQL pg_createsubscriber allows an attacker with pg_create_subscription rights to execute arbitrary SQL as a superuser. The attack takes effect when pg_createsubscriber next runs. Within major versions 17...

8 affected packages

postgresql-18, postgresql-17, postgresql-16, postgresql-14, postgresql-12...

Package 24.04 LTS
postgresql-18 Not in release
postgresql-17 Not in release
postgresql-16 Fixed
postgresql-14 Not in release
postgresql-12 Not in release
postgresql-10 Not in release
postgresql-9.5 Not in release
postgresql-9.3 Not in release
Show all 8 packages Show less packages

CVE-2026-6475

Medium priority
Fixed

Symlink following in PostgreSQL pg_basebackup plain format and in pg_rewind allows an origin superuser to overwrite local files, e.g. /var/lib/postgres/.bashrc, that hijack the operating system account. It will remain the case...

8 affected packages

postgresql-18, postgresql-17, postgresql-16, postgresql-14, postgresql-12...

Package 24.04 LTS
postgresql-18 Not in release
postgresql-17 Not in release
postgresql-16 Fixed
postgresql-14 Not in release
postgresql-12 Not in release
postgresql-10 Not in release
postgresql-9.5 Not in release
postgresql-9.3 Not in release
Show all 8 packages Show less packages

CVE-2026-6474

Medium priority
Fixed

Externally-controlled format string in PostgreSQL timeofday() function allows an attacker to retrieve portions of server memory, via crafted timezone zones. Versions before PostgreSQL 18.4, 17.10, 16.14, 15.18, and 14.23 are affected.

8 affected packages

postgresql-18, postgresql-17, postgresql-16, postgresql-14, postgresql-12...

Package 24.04 LTS
postgresql-18 Not in release
postgresql-17 Not in release
postgresql-16 Fixed
postgresql-14 Not in release
postgresql-12 Not in release
postgresql-10 Not in release
postgresql-9.5 Not in release
postgresql-9.3 Not in release
Show all 8 packages Show less packages

CVE-2026-6473

Medium priority
Fixed

Integer wraparound in multiple PostgreSQL server features allows an unprivileged database user to cause the server to undersize an allocation and write out-of-bounds. This may execute arbitrary code as the operating system user...

8 affected packages

postgresql-18, postgresql-17, postgresql-16, postgresql-14, postgresql-12...

Package 24.04 LTS
postgresql-18 Not in release
postgresql-17 Not in release
postgresql-16 Fixed
postgresql-14 Not in release
postgresql-12 Not in release
postgresql-10 Not in release
postgresql-9.5 Not in release
postgresql-9.3 Not in release
Show all 8 packages Show less packages

CVE-2026-6472

Medium priority
Fixed

Missing authorization in PostgreSQL CREATE TYPE allows an object creator to hijack other queries that use search_path to find user-defined types, including extension-defined types. That is to say, the victim will...

8 affected packages

postgresql-18, postgresql-17, postgresql-16, postgresql-14, postgresql-12...

Package 24.04 LTS
postgresql-18 Not in release
postgresql-17 Not in release
postgresql-16 Fixed
postgresql-14 Not in release
postgresql-12 Not in release
postgresql-10 Not in release
postgresql-9.5 Not in release
postgresql-9.3 Not in release
Show all 8 packages Show less packages

CVE-2026-45205

Medium priority
Needs evaluation

Uncontrolled Recursion vulnerability in Apache Commons. When processing an untrusted configuration file, Commons Configuration will throw a StackOverflowError for YAML input with cycles. This issue affects Apache Commons: from 2.2...

2 affected packages

commons-configuration, commons-configuration2

Package 24.04 LTS
commons-configuration Needs evaluation
commons-configuration2 Needs evaluation
Show less packages

CVE-2026-8280

Medium priority

Not in release

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 8.3 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed an authenticated user to cause denial of service...

1 affected package

gitlab

Package 24.04 LTS
gitlab Not in release
Show less packages

CVE-2026-8144

Medium priority

Not in release

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.1 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed an authenticated user with project membership to enumerate...

1 affected package

gitlab

Package 24.04 LTS
gitlab Not in release
Show less packages