今日共收录 1589 条安全情报，包含 784 个 CVE，406 篇安全通告，以及 115 篇研究论文。
← 返回归档列表CVE-2026-16238
Type confusion in PostgreSQL pg_restore_attribute_stats() allows an object creator to execute arbitrary code as the oper
CVE-2026-15742
Integer wraparound in PostgreSQL fuzzystrmatch allows a user to direct writes to a huge range of addresses, executing ar
CVE-2026-15741
SQL injection in PostgreSQL EXTRACT() deparse allows an object owner to execute arbitrary SQL as a superuser via a hosti
CVE-2026-14680
Type confusion with PostgreSQL "internal" data type arguments allows any user to execute arbitrary code as the operating
CVE-2026-14679
Stack buffer overflow in PostgreSQL argument name matching allows an object creator to achieve unknown impacts via OUT p
CVE-2026-14678
Buffer over-read in PostgreSQL pg_trgm index picksplit function reads past end of a heap buffer. This might allow a tab
CVE-2026-14677
Integer wraparound in PostgreSQL 32-bit builds of pltcl and plperl allows an object creator to cause the server to under
CVE-2026-14676
Heap buffer overflow in PostgreSQL pg_stat_statements allows the query author to execute arbitrary code as the operating
CVE-2026-14673
Untrusted search path in PostgreSQL amcheck allows a grantee of amcheck function EXECUTE privilege to execute arbitrary
CVE-2026-14672
Observable response discrepancy in PostgreSQL SCRAM authentication allows an unauthenticated user to test the existence
CVE-2026-14671
Type confusion in PostgreSQL module "refint" allows an object creator to execute arbitrary code as the operating system
CVE-2026-14670
Heap buffer overflow in PostgreSQL plperl return of a tied hash allows the function owner to execute arbitrary code as t
CVE-2026-14669
Heap buffer overflow in PostgreSQL to_char(timestamptz) allows the party choosing the timezone to execute arbitrary code
CVE-2026-14668
Type confusion regarding input of PostgreSQL ctid data type selectivity estimator allows an object creator to view a cal
CVE-2026-14666
Incomplete tracking in PostgreSQL of changes to role membership, role attributes, and database ownership allows a query
CVE-2026-14664
Heap buffer overflow in PostgreSQL regexp allows the query author to execute arbitrary code as the operating system user
CVE-2026-14663
Cleartext storage in PostgreSQL pgcrypto disabled ciphers allows a user to recover cleartext, via direct observation of
CVE-2026-14662
Integer wraparound in PostgreSQL tsvector and tsquery data type functions allows an unprivileged database user to cause
CVE-2025-52640
HCL AION is affected by a vulnerability where the shared storage used by product components is architected without suffi
CVE-2026-73629
Serendipity before 2.6.0 contains a server-side request forgery vulnerability in the serendipity_url_allowed() filter th