CVE Vulnerability Database

Search and browse 420,383 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.

CVE IDSeverityCVSSDescription
CVE-2026-116271HIGH7MIME::Parser::FileUnder versions before 5.521 for Perl reuse a pre-created output directory and follow symlinks in it, l...
CVE-2026-116270HIGH7.5MIME::Words versions before 5.521 for Perl allow memory exhaustion via repeated "=?" sequences in decode_mimewords. For...
CVE-2026-116269MEDIUM5.3MIME::Field::ParamVal versions before 5.521 for Perl turn an RFC 2231 filename with a hyphenated language tag into an em...
CVE-2026-116268HIGH7.5MIME::Field::ParamVal versions before 5.521 for Perl allow CPU exhaustion via unclosed comments in header parameters. T...
CVE-2026-116267HIGH7.5MIME::Parser versions before 5.521 for Perl allow memory exhaustion via indented error messages from a truncated, deeply...
CVE-2026-116266MEDIUM5.3MIME::Head versions from 5.518 before 5.521 for Perl decode a partly encoded multipart boundary without flagging the par...
CVE-2026-116265MEDIUM5.3MIME::Field::ParamVal versions before 5.521 for Perl do not flag an ambiguous multipart boundary written as RFC 2231 con...
CVE-2026-116264MEDIUM5.3MIME::Field::ParamVal versions before 5.521 for Perl allow one invalid Content-Type parameter to hide the parameters aft...
CVE-2026-116135CRITICAL9.8HTTP::Body versions before 1.23_01 for Perl drop mixed-case percent escapes from urlencoded form fields instead of decod...
CVE-2026-116134HIGH7.5HTTP::Body versions before 1.23_01 for Perl allow memory exhaustion via an unbounded multipart part header block. The m...
CVE-2026-116133HIGH7.5HTTP::Body versions before 1.23_01 for Perl allow CPU exhaustion via quadratic rescanning of a multipart body with a mis...
CVE-2026-116132HIGH7.1HTTP::Body versions before 1.23_01 for Perl leave the temporary file of an incomplete multipart upload on disk. The mul...
CVE-2026-116131MEDIUM6.5HTTP::Body versions before 1.23_01 for Perl allow memory and temporary file exhaustion via an unlimited number of form f...
CVE-2026-110183MEDIUM4.3PostgreSQL Anonymizer contains a vulnerability related to static masking and statistics persistence. Statistics pertaini...
CVE-2026-110182MEDIUM4.3PostgreSQL Anonymizer contains a vulnerability related to the anon.partial() and anon.partial_email() functions. These f...
CVE-2026-110181MEDIUM6.5PostgreSQL Anonymizer contains a vulnerability related to anonymization functions defined using SQL-standard function bo...
CVE-2026-105620MEDIUM6.5PostgreSQL Anonymizer doesn't mask data returned by a sub-query in a rule. The problem is resolved in PostgreSQL Anonymi...
CVE-2026-105619MEDIUM4.8PostgreSQL Anonymizer doesn't mask data accessed thru a security_invoker view. The problem is resolved in PostgreSQL Ano...
CVE-2026-105618MEDIUM5.7PostgreSQL Anonymizer's documentation recommends applying rules on partitions and inheritance tables. Direct access to t...
CVE-2026-105617MEDIUM6.5PostgreSQL Anonymizer doesn't invalidate plans prepared after a rule was added or a role changed. Users using such plans...
CVE-2026-105616MEDIUM5.7PostgreSQL restricts acces to the salt and shift via the `SHOW` command for users not member of `pg_read_all_settings`. ...
CVE-2026-105615LOW3.5PostgreSQL's optimized statistics on a table are visible as long as you have SELECT privilege on said table. A masked ro...
CVE-2026-105614MEDIUM4.7PostgreSQL Anonymizer's `anon.image_blur()` function doesn't check the declared dimension of the provided image, allowin...
CVE-2026-105613MEDIUM4.7PostgreSQL Anonymizer's range-based dummy functions dont constraint the range size. This vulnerability can be exploited ...
CVE-2026-105612LOW3.5PostgreSQL Anonymizer contains a vulnerability that data-modifying CTEs to bypass the read-only restriction of masked ro...