—CVE-2025-54518EPSS 0.01%Improper isolation of shared resources within the CPU operation cache on Zen 2-based products could allow an attacker to corrupt instructio…
HIGH8.8CVE-2026-6638EPSS 0.02%PostgreSQL REFRESH PUBLICATION allows SQL injection via table name
HIGH8.8EPSS 0.04%PostgreSQL refint allows stack buffer overflow and SQL injection
MEDIUM4.3EPSS 0.03%PostgreSQL pg_restore_attribute_stats accepts values that cause query planning to read past end of stats array
HIGH7.5EPSS 0.02%PostgreSQL SSL/GSS init causes denial of service, via uncontrolled recursion
MEDIUM6.5EPSS 0.08%PostgreSQL discloses MD5-hashed passwords via covert timing channel
HIGH8.8EPSS 0.05%PostgreSQL libpq lo_* functions let server superuser overwrite client stack memory
HIGH7.2EPSS 0.03%PostgreSQL pg_createsubscriber allows SQL injection via subscription name
HIGH8.8EPSS 0.05%PostgreSQL pg_basebackup and pg_rewind can overwrite unrelated files of origin superuser choice
MEDIUM4.3EPSS 0.03%PostgreSQL timeofday() can disclose portions of server memory
HIGH8.8EPSS 0.07%PostgreSQL server undersizes allocations, via integer wraparound
MEDIUM5.4EPSS 0.03%PostgreSQL CREATE TYPE does not check multirange schema CREATE privilege
MEDIUM6.5EPSS 0.07%NGINX ngx_http_scgi_module and ngx_http_uwsgi_module vulnerability
MEDIUM5.3EPSS 0.08%Successfully using libcurl to do a transfer over a specific HTTP proxy (`proxyA`) with **Digest** authentication and then changing the prox…
MEDIUM5.3When curl is told to use the Certificate Status Request TLS extension, often referred to as *OCSP stapling*, to verify that the server cert…
MEDIUM5.3EPSS 0.02%When asked to both use a `.netrc` file for credentials and to follow HTTP redirects, libcurl could leak the password used for the first hos…
HIGH7.5EPSS 0.01%Using libcurl, when a custom `Host:` header is first set for an HTTP request and a second request is subsequently done using the same *easy…
MEDIUM5.9EPSS 0.03%curl might erroneously pass on credentials for a first proxy to a second proxy.
HIGH7.5EPSS 0.02%libcurl might in some circumstances reuse the wrong connection for SMB(S) transfers.
MEDIUM6.5EPSS 0.04%libcurl might in some circumstances reuse the wrong connection when asked to do an authenticated HTTP(S) request after a Negotiate-authenti…