Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-105619 | medium | 4.8 | No | PostgreSQL Anonymizer doesn't mask data accessed thru a security_invoker view. The problem is resolved in PostgreSQL Anonymizer 3.3.0 and la... | 2026-10-29 |
| CVE-2026-105618 | medium | 5.7 | No | PostgreSQL Anonymizer's documentation recommends applying rules on partitions and inheritance tables. Direct access to the paritions / inher... | 2026-10-29 |
| CVE-2026-105617 | medium | 6.5 | No | PostgreSQL Anonymizer doesn't invalidate plans prepared after a rule was added or a role changed. Users using such plans can still see the u... | 2026-10-29 |
| CVE-2026-105616 | medium | 5.7 | No | PostgreSQL restricts acces to the salt and shift via the `SHOW` command for users not member of `pg_read_all_settings`. But they are visible... | 2026-10-29 |
| CVE-2026-105615 | low | 3.5 | No | PostgreSQL's optimized statistics on a table are visible as long as you have SELECT privilege on said table. A masked role can therefore rea... | 2026-10-29 |
| CVE-2026-105614 | medium | 4.7 | No | PostgreSQL Anonymizer's `anon.image_blur()` function doesn't check the declared dimension of the provided image, allowing an attacker to pro... | 2026-10-29 |
| CVE-2026-105613 | medium | 4.7 | No | PostgreSQL Anonymizer's range-based dummy functions dont constraint the range size. This vulnerability can be exploited to exhaust the memor... | 2026-10-29 |
| CVE-2026-105612 | low | 3.5 | No | PostgreSQL Anonymizer contains a vulnerability that data-modifying CTEs to bypass the read-only restriction of masked roles. The problem is... | 2026-10-29 |
| CVE-2026-88967 | high | 7.7 | No | A user with query access to an Azure Monitor data source in Grafana can cause server-side requests to an attacker-controlled endpoint that d... | 2026-10-29 |
| CVE-2026-88858 | medium | 6.5 | No | A user with the Viewer role in Grafana can crash the server by submitting a crafted server-side math expression (uncontrolled recursion). A... | 2026-10-29 |
| CVE-2026-103506 | not reported | — | No | An authenticated user in Grafana can read SSO client secrets and modify instance-wide SSO settings without the required permissions (missing... | 2026-10-29 |
| CVE-2026-100105 | high | 7.7 | No | A user with permission to edit contact points but not their protected fields can change protected settings, such as a contact point's destin... | 2026-10-29 |
| CVE-2026-83652 | high | 7.8 | No | Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally. | 2026-10-29 |
| CVE-2026-111419 | high | 8.6 | No | A sensitive information exposure vulnerability exists on the Foxit official website because JavaScript code contains third-party authorizati... | 2026-10-29 |
| CVE-2026-111418 | high | 7.5 | No | A server-side request forgery (SSRF) vulnerability exists in the Foxit official website’s HTML-to-PDF conversion service. Support for ZIP-fo... | 2026-10-29 |
| CVE-2026-111417 | high | 7.5 | No | A broken access control vulnerability exists in the Foxit official website’s HTML-to-PDF conversion service due to the use of a shared token... | 2026-10-29 |
| CVE-2026-118611 | medium | 6.8 | No | Alpine iLX-F511 Bluetooth OBEX Packet Handling Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows phy... | 2026-10-29 |
| CVE-2026-118610 | high | 8.8 | No | Alpine iLX-F511 Android Auto Service Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adja... | 2026-10-29 |
| CVE-2026-118609 | medium | 6.8 | No | Alpine iLX-F511 Android Auto Connection Handler Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows p... | 2026-10-29 |
| CVE-2026-118608 | low | 3.5 | No | Alpine iLX-F511 libanwbtstack.so prh_rfcomm_cc_process_test Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allo... | 2026-10-29 |