Tagged “cve.org”
CVEs tagged cve.org, newest first.
46495 CVEsRSS
CVE-2026-120066Medium· 5.3psqlODBC log files are created with default permissions at a predictable path and follow symbolic links
On Unix-like systems, when logging is enabled, psqlODBC creates its log files in /tmp by default, named from the program name, user name, and process ID, with the default permissions, typically world-readable, and follows symbolic links …
CVE-2026-120063Medium· 5.9psqlODBC stack buffer overflow when quoting long schema and table names
When psqlODBC quotes a schema or table name into a 128-byte stack buffer, its length check lets it write up to two bytes past the end of the buffer for a long name. The names come from the application's SQL text: the table of a statement…
CVE-2026-120065High· 7.1psqlODBC does not escape a server-supplied column name in its updatable-cursor queries
For an updatable cursor over a table without OIDs that has an auto-increment int4 column, psqlODBC uses that column to identify rows. It places the column's name, as reported by the server, between double quotes in its keyset queries and…
CVE-2026-120062High· 7.5psqlODBC SQL injection through SQLSpecialColumns table and schema names
SQLSpecialColumns in psqlODBC splices the table and schema names it receives into its catalog query without escaping them, while the other catalog functions escape them. An application that passes an untrusted table or schema name to SQL…
CVE-2026-120061High· 7.5psqlODBC ODBC escape parser stack buffer overflow
The psqlODBC parser for ODBC escape sequences in application SQL text writes the argument offsets of a {fn} escape into a fixed 16-entry stack array without a bound and does not initialize the array. An escape with too many arguments ove…
CVE-2026-120059Medium· 6.8psqlODBC uses a server-supplied column name as a format string
For an updatable cursor over a table without OIDs that has an auto-increment int4 column, psqlODBC places that column's name, as reported by the server, into a printf-style format string. It later expands that string with one argument wh…
CVE-2026-120067Medium· 5.9psqlODBC stack buffer overflow copying ctid and oid values for updatable cursors
For updatable cursors, which are enabled by default, psqlODBC adds hidden ctid and, for tables with OIDs, oid columns to the query. It copies each value into a 32-byte stack buffer using the length the server sent, without checking it ag…
CVE-2026-120058High· 7.5psqlODBC row cache overflow when a later FETCH changes the column count
psqlODBC sizes its row cache from the column count of a cursor's first result, but recomputes the column count from each later FETCH reply without checking that it matches. A server not trusted under current SSL settings can answer a lat…
CVE-2026-101178Medium· 6.6Permission control vulnerability in the autofill service module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
Permission control vulnerability in the autofill service module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
CVE-2026-101177Low· 3.7Permission control vulnerability in the Optimizer module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
Permission control vulnerability in the Optimizer module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
CVE-2026-101176High· 7.1Permission control vulnerability in the event notification management module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
Permission control vulnerability in the event notification management module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
CVE-2026-101174Medium· 5.7DoS vulnerability in the DSoftBus module. Impact: Successful exploitation of this vulnerability may affect availability.
DoS vulnerability in the DSoftBus module. Impact: Successful exploitation of this vulnerability may affect availability.
CVE-2026-101173Medium· 6.5DoS vulnerability in the DSoftBus module. Impact: Successful exploitation of this vulnerability may affect availability.
DoS vulnerability in the DSoftBus module. Impact: Successful exploitation of this vulnerability may affect availability.
CVE-2026-101186High· 7.5DoS vulnerability in the window module. Impact: Successful exploitation of this vulnerability may affect availability.
DoS vulnerability in the window module. Impact: Successful exploitation of this vulnerability may affect availability.
CVE-2026-101185Medium· 5.9OOB read vulnerability in the peripheral module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
OOB read vulnerability in the peripheral module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
CVE-2026-101183Medium· 5.9UAF vulnerability in the location service module. Impact: Successful exploitation of this vulnerability may affect availability.
UAF vulnerability in the location service module. Impact: Successful exploitation of this vulnerability may affect availability.
CVE-2026-101181Medium· 5.5Permission control vulnerability in the WLAN module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
Permission control vulnerability in the WLAN module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
CVE-2026-101180Medium· 4.3DoS vulnerability in the file parsing module. Impact: Successful exploitation of this vulnerability may affect availability.
DoS vulnerability in the file parsing module. Impact: Successful exploitation of this vulnerability may affect availability.
CVE-2026-101179Medium· 4.7Buffer overflow vulnerability in the file preview module. Impact: Successful exploitation of this vulnerability may affect availability.
Buffer overflow vulnerability in the file preview module. Impact: Successful exploitation of this vulnerability may affect availability.
CVE-2026-101175Medium· 4.3Null pointer dereference vulnerability in the ArkWeb module. Impact: Successful exploitation of this vulnerability may affect availability.
Null pointer dereference vulnerability in the ArkWeb module. Impact: Successful exploitation of this vulnerability may affect availability.
CVE-2026-101170Medium· 4.0DoS vulnerability in the file parsing module. Impact: Successful exploitation of this vulnerability may affect availability.
DoS vulnerability in the file parsing module. Impact: Successful exploitation of this vulnerability may affect availability.
CVE-2026-101171Low· 3.6Permission control vulnerability in the background task management module. Impact: Successful exploitation of this vulnerability may affect service integrity.
Permission control vulnerability in the background task management module. Impact: Successful exploitation of this vulnerability may affect service integrity.
CVE-2026-117082NoneAn authentication bypass vulnerability in the Universal Plug and Play (UPnP) framework of the Sercomm AOT-4221SR 4.6 Dual Band GPON ONU device allows an attackers to execute arbitrary SOAP requests via port 5555
An authentication bypass vulnerability in the Universal Plug and Play (UPnP) framework of the Sercomm AOT-4221SR 4.6 Dual Band GPON ONU device allows an attackers to execute arbitrary SOAP requests via port 5555. This flaw exposes 15 adm…
CVE-2026-107457Low· 2.3Memory corruption vulnerability in QMqttClient impacts Qt MQTT
A memory corruption vulnerability in the QMqttClient class of the Qt MQTT module. Under certain MQTT 5 connection settings between client and server, QMqttClient may corrupt memory, which can cause the application to crash.
CVE-2026-101172Medium· 6.2Permission control vulnerability in the graphics module. Impact: Successful exploitation of this vulnerability may affect confidentiality.
Permission control vulnerability in the graphics module. Impact: Successful exploitation of this vulnerability may affect confidentiality.
CVE-2026-101184Medium· 5.5Permission control vulnerability in the Bluetooth module. Impact: Successful exploitation of this vulnerability may affect availability.
Permission control vulnerability in the Bluetooth module. Impact: Successful exploitation of this vulnerability may affect availability.
CVE-2025-13647Medium· 5.8Information Disclosure in Multiple WSO2 Products Allows Exposure of Certificate File Paths
The affected component fails to enforce expected validation constraints on the `content-type` header when processing certain requests. This allows an attacker to submit a crafted request with a manipulated `content-type` header. Success…
CVE-2026-118871Medium· 6.5SQL Injection vulnerability in ZTE ElasticNet RNIA R18 NGI product
SQL injection vulnerability classified as an internal threat level.Attackers can steal database information via SQL injection while logged in.
CVE-2024-12139Medium· 4.3Content Spoofing via Error Handling in Multiple WSO2 Products Enables Social Engineering Attacks
The error handling implementation fails to properly sanitize or validate user-supplied input within URL parameters under specific conditions. This allows end-users to manipulate the error messages that are displayed by the application. …
CVE-2026-81938High· 7.7Arbitrary file read via Alertmanager receiver configuration in Grafana Mimir
Grafana Mimir's Alertmanager rejects tenant-supplied receiver configurations that reference local files, but the check did not cover two HTTP client settings: http_headers.<name>.files and basic_auth.username_file. A tenant permitted to …