773 PoCs | 119 CISA KEV

tag

Database

MariaDB — Low-Privilege Remote Code Execution via ST_Area OOB Read + SYS_REFCURSOR Use-After-Free

MDEV-40328 (ST_Area OOB read); cursor-array UAF has no assigned CVE yet binary Unpatched

MDEV-40328binaryCRITICAL 8.8Unpatched2026-08-09Pterodactyl Panel Unauthenticated Path Traversal via locale.json Leaking Database Credentials (CVE-2025-49132) EPSS 53%

CVE-2025-49132 web Patched

CVE-2025-49132webCRITICAL 10Patched2026-07-06MikroORM Custom Type Raw SQL Injection (CVE-2026-34220)

CVE-2026-34220 web Patched

CVE-2026-34220webHIGHPatched2026-07-05MariaDB server_audit Plugin Logging Bypass via Inline Comments (CVE-2026-3494)

CVE-2026-3494 network Patched

CVE-2026-3494networkMEDIUMPatched2026-07-05PostgreSQL Referential-Integrity Owner-Switched Implicit Cast RCE

None assigned as of 2026-07-04 network Unverified

None assigned as of 2026-07-04networkHIGHUnverified2026-07-04