Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 7 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 405,431All CVEsplus 19,159 rejected
- 676Last 24 hours4,919 in the last 7 days
- 18,816Last 30 days1,596 of them critical
- 1,779Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 3 | 16 | 2 | 0 | 21 | 24 |
| 2025 | 0 | 0 | 1 | 0 | 0 | 1 | 3 |
| 2024 | 0 | 2 | 0 | 0 | 0 | 2 | 2 |
| Title | ||
|---|---|---|
| CVE-2026-110183 | PostgreSQL Anonymizer: statistics can expose some of the original data after statistic maskingDALIBO · PostgreSQL Anonymizer | Medium4.3 |
| CVE-2026-110182 | PostgreSQL Anonymizer: anon.partial() and anon.partial_email() can reveal the whole dataDALIBO · PostgreSQL Anonymizer | Medium4.3 |
| CVE-2026-110181 | PostgreSQL Anonymizer: Function declared with SQL-standard syntax leak anonymized dataDALIBO · PostgreSQL Anonymizer | Medium6.5 |
| CVE-2026-105620 | PostgreSQL Anonymizer: A masked role reads the authentic data of masked tables through a masking rule with a sub-queryDALIBO · PostgreSQL Anonymizer | Medium6.5 |
| CVE-2026-105619 | PostgreSQL Anonymizer: Masking rules of the tables are not applied through security_invoker viewsDALIBO · PostgreSQL Anonymizer | Medium4.8 |
| CVE-2026-105618 | PostgreSQL Anonymizer: Masked partitions and child tables are not masked when they are queried through their parentDALIBO · PostgreSQL Anonymizer | Medium5.7 |
| CVE-2026-105617 | PostgreSQL Anonymizer: Cached plans bypass transparent dynamic masking after a role change or a new masking ruleDALIBO · PostgreSQL Anonymizer | Medium5.7 |
| CVE-2026-105616 | PostgreSQL Anonymizer: The secret salt and shift of anon are readable by any role in pg_roles or pg_db_role_settingDALIBO · PostgreSQL Anonymizer | Medium5.7 |
| CVE-2026-105615 | PostgreSQL Anonymizer: Masked roles can read the statistics of masked columns in pg_statsDALIBO · PostgreSQL Anonymizer | Low3.5 |
| CVE-2026-105614 | PostgreSQL Anonymizer: Unbounded image-decode memory allocation (DoS) in anon.image_blur()DALIBO · PostgreSQL Anonymizer | Medium4.7 |
| CVE-2026-105613 | PostgreSQL Anonymizer: Unbounded memory allocation (DoS) in range-based dummy functionsDALIBO · PostgreSQL Anonymizer | Medium4.7 |
| CVE-2026-105612 | PostgreSQL Anonymizer: Data-modifying CTEs bypass the read-only restriction of masked rolesDALIBO · PostgreSQL Anonymizer | Low3.5 |
| CVE-2026-97469 | PostgreSQL Anonymizer: RESTRICTED functions are reachable through a subLinkDALIBO · PostgreSQL Anonymizer | Medium4.3 |
| CVE-2026-83534 | PostgreSQL Anonymizer: Privilege escalation to superuser via anon.anonymize_database_parallel()DALIBO · PostgreSQL Anonymizer | Medium6.4 |
| CVE-2026-19634 | PostgreSQL Anonymizer: SQL injection in import_database_rules() and import_roles_rules() via crafted object names / JSONDALIBO · PostgreSQL Anonymizer | Medium6.4 |
| CVE-2026-19633 | PostgreSQL Anonymizer: unprivileged masked users can execute code via operators, domain casts and view subqueriesDALIBO · PostgreSQL Anonymizer | High8.8 |
| CVE-2026-13455 | PostgreSQL Anonymizer: Unrestricted function can leak the secret saltDALIBO · PostgreSQL Anonymizer | Medium4.3 |
| CVE-2026-11945 | PostgreSQL Anonymizer: SQL injection in the rules import functionsDALIBO · PostgreSQL Anonymizer | Medium6.4 |
| CVE-2026-9617 | PostgreSQL Anonymizer: malicious column name allows SQL injection via anon.k_anonymity() functionDALIBO · PostgreSQL Anonymizer | Medium6.8 |
| CVE-2026-2361 | Improper search_path protection in PostgreSQL Anonymizer 2.5 allows any user with create privilege to gain superuser privilegesDALIBO · PostgreSQL Anonymizer | High8.0 |
| CVE-2026-2360 | Improper search_path protection in PostgreSQL Anonymizer 2.5 allows any user to gain superuser privileges in PostgreSQL 14DALIBO · PostgreSQL Anonymizer | High8.0 |
| CVE-2025-5690 | Cursor allows PostgreSQL Anonymizer masked user to gain unauthorized access to authentic dataPublic exploitDALIBO · PostgreSQL Anonymizer | Medium6.5 |
| CVE-2024-2339 | Improper Input Validation in PostgreSQL Anonymizer 1.2 allows table owner to gain superuser privileges via masking ruleDALIBO · PostgreSQL Anonymizer | High8.0 |
| CVE-2024-2338 | SQL Injection in PostgreSQL Anonymizer 1.2 allows table owner to gain superuser privileges via masking ruleDALIBO · PostgreSQL Anonymizer | High8.0 |