| CVE-2026-120869 | NA | N/A | An unauthenticated attacker can bypass authentication controls to access restricted resources on the Citrix Ne… | 2026-11-12 |
| CVE-2026-123039 | HIGH | 7.8 | The Gaia OS DynamicCLI daemon runs as root and listens on a world-writable local socket (/tmp/dynamic_socket) … | 2026-11-12 |
| CVE-2026-124018 | HIGH | 7.1 | Gutenverse Form plugin for WordPress before 3.2.2 contains a CSV formula injection vulnerability that allows u… | 2026-11-12 |
| CVE-2026-124627 | NA | N/A | In affected versions of Octopus Server, incorrect validation of the external identity linked to a newly regist… | 2026-11-12 |
| CVE-2026-124628 | NA | N/A | In affected versions of Octopus Server, incorrect validation of changes a user made to their own LDAP identity… | 2026-11-12 |
| CVE-2026-126995 | MEDIUM | 6.3 | A vulnerability was found in tjake Jlama up to 0.8.4/0.9.0-beta. Affected by this vulnerability is the functio… | 2026-11-12 |
| CVE-2026-127058 | MEDIUM | 4.9 | WonderCMS before 3.7.0 contains an unverified password change vulnerability in the saveAction functionality th… | 2026-11-12 |
| CVE-2026-71367 | MEDIUM | 4.3 | An incorrect authorization vulnerability was found in AWX's WebSocket consumer. The consumer_access() function… | 2026-11-12 |
| CVE-2026-92083 | HIGH | 7.8 | Missing Authorization vulnerability in TÜBİTAK BİLGEM Yazılım Teknolojileri Araştırma Enstitüsü pardus-image-w… | 2026-11-12 |
| CVE-2026-97845 | NA | N/A | An uncontrolled recursion vulnerability has been discovered in the Qt QXmlSimpleReader XML parsing functionali… | 2026-11-12 |
| CVE-2026-116303 | LOW | 3.1 | Missing authorization in PostgreSQL type conversion allows a database user to invoke a cast function despite l… | 2026-11-12 |
| CVE-2026-116304 | HIGH | 8.8 | Use after free in PostgreSQL coordination of anonymous RECORD type identifiers among parallel workers allows a… | 2026-11-12 |
| CVE-2026-116306 | HIGH | 8.8 | Type confusion in PostgreSQL composite-value field assignment allows an object creator to execute arbitrary co… | 2026-11-12 |
| CVE-2026-116307 | HIGH | 8.8 | Use after free in PostgreSQL plperl allows an object creator to execute arbitrary code as the operating system… | 2026-11-12 |
| CVE-2026-116308 | MEDIUM | 4.3 | Buffer over-read in PostgreSQL dict_int allows a database user to disclose portions of server memory, via a ze… | 2026-11-12 |
| CVE-2026-116309 | HIGH | 8.8 | Type confusion in PostgreSQL plperl may allow an object creator to execute arbitrary code, via blessing a non-… | 2026-11-12 |
| CVE-2026-116310 | MEDIUM | 4.3 | Use after free in PostgreSQL COPY FROM error reporting allows a database user to disclose portions of server m… | 2026-11-12 |
| CVE-2026-116311 | MEDIUM | 5.4 | Missing authorization in PostgreSQL DROP OWNED allows a role to remove itself from restrictive row level secur… | 2026-11-12 |
| CVE-2026-116312 | MEDIUM | 5.4 | Inconsistent transition-capture state in PostgreSQL MERGE allows a table data modifier to make an AFTER trigge… | 2026-11-12 |
| CVE-2026-116313 | HIGH | 7.2 | Untrusted search path in PostgreSQL vacuumdb allows a database owner to execute arbitrary SQL as the database … | 2026-11-12 |
| CVE-2026-116314 | HIGH | 8.8 | Improper input validation in PostgreSQL pg_restore allows a non-plain archive provider to execute arbitrary co… | 2026-11-12 |
| CVE-2026-116315 | HIGH | 8.8 | Heap-based buffer overflow in PostgreSQL tsvector_delete() allows a database user to execute arbitrary code as… | 2026-11-12 |
| CVE-2026-116316 | HIGH | 8.8 | Improper protection of alternate path in PostgreSQL security-restricted operations allows an object creator to… | 2026-11-12 |
| CVE-2026-116317 | HIGH | 8.8 | Heap-based buffer overflow in PostgreSQL ts_rank_cd() may allow a database user to execute arbitrary code as t… | 2026-11-12 |
| CVE-2026-116318 | HIGH | 8.8 | SQL injection in PostgreSQL pg_dump allows an object creator to execute arbitrary SQL as the user restoring th… | 2026-11-12 |
| CVE-2026-116319 | HIGH | 8.8 | Use after free in PostgreSQL plperl allows an object creator to execute arbitrary code as the operating system… | 2026-11-12 |
| CVE-2026-116320 | HIGH | 8.8 | Use after free in PostgreSQL plperl allows an object creator to execute arbitrary code as the operating system… | 2026-11-12 |
| CVE-2026-116321 | MEDIUM | 4.3 | Improper null termination in PostgreSQL array element assignment allows a database user to disclose server mem… | 2026-11-12 |
| CVE-2026-116322 | MEDIUM | 5.3 | Improper locking in PostgreSQL startup processing allows an unauthenticated network client to trigger a server… | 2026-11-12 |
| CVE-2026-116323 | HIGH | 8.8 | Use after free in PostgreSQL pltcl allows an object creator to execute arbitrary code as the operating system … | 2026-11-12 |
| CVE-2026-116325 | HIGH | 8.0 | SQL injection in PostgreSQL reindexdb allows an object creator to execute arbitrary SQL as the database user r… | 2026-11-12 |
| CVE-2026-116326 | HIGH | 8.8 | Uncaught exceptions in PostgreSQL plperl allow an object creator to cause use of a stale sigjmp_buf, via a tie… | 2026-11-12 |
| CVE-2026-116327 | MEDIUM | 4.3 | Exposure of sensitive information in PostgreSQL security_barrier processing allows a database user to infer va… | 2026-11-12 |
| CVE-2026-116328 | HIGH | 8.8 | Integer wraparound in PostgreSQL generation memory contexts allows a database user to execute arbitrary code a… | 2026-11-12 |
| CVE-2026-116329 | HIGH | 8.8 | Type confusion in PostgreSQL statistics import allows a table maintainer to execute arbitrary code as the oper… | 2026-11-12 |
| CVE-2026-116330 | HIGH | 8.8 | Untrusted data inclusion in PostgreSQL pg_dump tar-format restore.sql allows a compromised origin server to ex… | 2026-11-12 |
| CVE-2026-116331 | HIGH | 8.8 | Type confusion in PostgreSQL min/max aggregate optimization allows an object creator to execute arbitrary code… | 2026-11-12 |
| CVE-2026-116332 | HIGH | 8.8 | Use after free in PostgreSQL portal setup allows an object creator to execute arbitrary code as the operating … | 2026-11-12 |
| CVE-2026-116333 | MEDIUM | 6.5 | Buffer over-read in PostgreSQL parallel B-tree scans allows an object creator to read attacker-chosen server-m… | 2026-11-12 |
| CVE-2026-116335 | HIGH | 8.8 | Type confusion in PostgreSQL operator commutator and negator links allows an object creator to execute arbitra… | 2026-11-12 |
| CVE-2026-116336 | HIGH | 8.8 | Operation on a dropped index in PostgreSQL REINDEX CONCURRENTLY allows an object creator to execute arbitrary … | 2026-11-12 |
| CVE-2026-120139 | HIGH | 8.8 | Integer wraparound in PostgreSQL in-memory tuple-size calculations allows a database user to execute arbitrary… | 2026-11-12 |
| CVE-2026-120141 | HIGH | 8.8 | Type confusion in PostgreSQL materialized set-returning functions allows a database user to execute arbitrary … | 2026-11-12 |
| CVE-2026-120142 | HIGH | 8.8 | Type confusion in PostgreSQL anonymous RECORD types allows an object creator to execute arbitrary code as the … | 2026-11-12 |
| CVE-2026-120143 | HIGH | 8.8 | Use after free in PostgreSQL trigger functions allows an object creator to execute arbitrary code as the opera… | 2026-11-12 |
| CVE-2026-120144 | HIGH | 8.8 | Type confusion from incomplete PostgreSQL type-cache invalidation allows an object creator to execute arbitrar… | 2026-11-12 |
| CVE-2026-120145 | HIGH | 8.8 | Missing authorization in PostgreSQL logical replication allows a compromised publisher to execute arbitrary co… | 2026-11-12 |
| CVE-2026-120146 | MEDIUM | 4.3 | Missing authorization in PostgreSQL REASSIGN OWNED allows a role granted INHERIT but not SET to transfer objec… | 2026-11-12 |
| CVE-2026-120147 | HIGH | 8.8 | Use after free in the PostgreSQL dblink extension allows an object creator to execute arbitrary code as the op… | 2026-11-12 |
| CVE-2026-120148 | HIGH | 8.1 | Type confusion in PostgreSQL extended statistics allows an object creator to execute arbitrary code as the ope… | 2026-11-12 |