Vulnerabilities

Summary — last 7 days

New vulnerabilities4,639▼ 839 vs. last week
Critical / high1,746▼ 1,365 vs. last week
New active exploitation (KEV)8▼ 1 vs. last week
Unscored (no CVSS)953▲ 853 vs. last week
More filters
–

1 results, sorted by published date (most recent first)

CVEStatusSeverityEPSS Active exploitationAffected technologiesPublished ▼Modified Description
ModifiedMedium (6)1.5%—Alvaro Herrera Pl/php10/6/20106/16/2026
The PL/php add-on 1.4 and earlier for PostgreSQL does not properly protect script execution by a different SQL user identity within the same session, which allows remote authenticated users to gain privileges via crafted script code in a SECURITY DEFINER function, a related issue to CVE-2010-3433.
Orbitaley — Vulnerabilities