| 299758 | PostgreSQL 14.x < 14.21 / 15.x < 15.16 / 16.x < 16.12 / 17.x < 17.8 / 18.x < 18.2 Multiple Vulnerabilities | high |
| 299757 | PostgreSQL 18.x < 18.2 Heap Buffer Overflow (CVE-2026-2007) | high |
| 298978 | MongoDB 8.0.x < 8.0.18 / 8.2.x < 8.2.4 Out-Of-Memory (SERVER-114126) | high |
| 298970 | IBM DB2 DoS (7259963) (Unix) | medium |
| 298969 | IBM DB2 DoS (7259963) (Windows) | medium |
| 298649 | pgAdmin < 9.12 Command Execution (GHSA-3p7x-94q9-jq9x) | medium |
| 298265 | MariaDB 10.11.0 < 10.11.15 | medium |
| 298264 | MariaDB 10.6.0 < 10.6.24 | medium |
| 298263 | MariaDB 11.8.0 < 11.8.4 | medium |
| 298262 | MariaDB 12.1.0 < 12.1.2 | medium |
| 298261 | MariaDB 11.4.0 < 11.4.9 | medium |
| 298042 | IBM DB2 Multiple Vulnerabilities (7257697, 7257698) (Unix) | high |
| 298041 | IBM DB2 Multiple Vulnerabilities (7257697, 7257698) (Windows) | high |
| 297223 | Oracle NoSQL Database (January 2026 CPU) | critical |
| 296583 | Oracle MySQL Server 8.4.x < 8.4.8 (January 2026 CPU) | high |
| 296582 | Oracle MySQL Server 9.x.x < 9.6.0 (January 2026 CPU) | high |
| 296581 | Oracle MySQL Server 8.0.x < 8.0.45 (January 2026 CPU) | high |
| 296378 | Oracle Database Server (January 2026 CPU) | critical |
| 294982 | Oracle MySQL Cluster 8.4.x < 8.4.8 (January 2026 CPU) | medium |
| 294981 | Oracle MySQL Cluster 9.x < 9.6.0 (January 2026 CPU) | medium |
| 294980 | Oracle MySQL Cluster 7.6.x < 7.6.37 (January 2026 CPU) | medium |
| 294979 | Oracle MySQL Cluster 8.0.x < 8.0.45 (January 2026 CPU) | medium |
| 294862 | MongoDB 5.0.x < 5.0.31 / 6.0.x < 6.0.20 / 7.0.x < 7.0.16 / 8.0.x < 8.0.4 Improper Check for Certificate Revocation (SERVER-95445) | critical |
| 282646 | IBM DB2 Privilege Escalation (7250486) (Unix) | high |
| 282645 | IBM DB2 Privilege Escalation (7250486) (Windows) | high |
| 282330 | IBM DB2 DoS (7250487) (Windows) | medium |
| 282329 | IBM DB2 DoS (7250487) (Unix) | medium |
| 282318 | IBM DB2 DoS (7250485) (Windows) | medium |
| 282317 | IBM DB2 DoS (7250485) (Unix) | medium |
| 280124 | MongoDB 3.6.x / 4.0.x / 4.2.x / 4.4.x < 4.4.30 / 5.0.x < 5.0.32 / 6.0.x < 6.0.27 / 7.0.x < 7.0.28 / 8.0.x < 8.0.17 / 8.2.x < 8.2.3 Uninitialized Heap Memory Leak (CVE-2025-14847) | high |
| 279099 | pgAdmin < 9.11 RCE | high |
| 277470 | MongoDB 7.0.x < 7.0.25 / 8.0.x < 8.0.15 / 8.2.x < 8.2.1 / 8.3.0-rc0 (SERVER-105873) | medium |
| 277469 | MongoDB 6.0.x < 6.0.25 / 7.0.x < 7.0.21 / 8.0.x < 8.0.5 / 8.1.0-rc0 (SERVER-51366) | high |
| 277468 | MongoDB 7.0.x < 7.0.22 / 8.0.x < 8.0.10 / 8.2.0-rc0 (SERVER-101230) | medium |
| 276923 | IBM DB2 DoS (7250479) (Unix) | medium |
| 276922 | IBM DB2 DoS (7250479) (Windows) | medium |
| 276921 | IBM DB2 Information Disclosure and Credential Exposure (7250484) (Windows) | medium |
| 276920 | IBM DB2 Information Disclosure and Credential Exposure (7250484) (Unix) | medium |
| 275843 | pgAdmin < 9.10 Multiple Vulnerabilities | critical |
| 275842 | PostgreSQL 13.x < 13.23 / 14.x < 14.20 / 15.x < 15.15 / 16.x < 16.11 / 17.x < 17.7 / 18.x < 18.1 Multiple Vulnerabilities | medium |
| 275466 | IBM DB2 User to Regain Access After Account Lockout (7250469) (Unix) | medium |
| 271394 | Oracle MySQL Cluster 9.x.x < 9.5.0 (October 2025 CPU) | critical |
| 271393 | Oracle MySQL Cluster 8.4.x < 8.4.7 (October 2025 CPU) | critical |
| 271392 | Oracle MySQL Cluster 8.0.x < 8.0.44 (October 2025 CPU) | critical |
| 271376 | Oracle MySQL Server 8.4.x < 8.4.7 (October 2025 CPU) | medium |
| 271375 | Oracle MySQL Server 8.0.x < 8.0.44 (October 2025 CPU) | medium |
| 271374 | Oracle MySQL Server 9.x.x < 9.5.0 (October 2025 CPU) | medium |
| 271256 | Oracle Database Server (October 2025 CPU) | high |
| 265331 | MongoDB 6.0.x < 6.0.25 / 7.0.x < 7.0.22 / 8.0.x < 8.0.12 (SERVER-95524) | medium |
| 265330 | MongoDB 6.0.x < 6.0.24 / 7.0.x < 7.0.18 / 8.0.x < 8.0.6 (SERVER-100901) | medium |
