High
CVE-2026-7815
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 28
Reset filters
Medium
CVE-2026-7820
pgAdmin 4: Improper restriction of excessive authentication attempts
High
CVE-2026-7819
pgAdmin 4 File Manager has symbolic-link path traversal
High
CVE-2026-7818
pgAdmin 4 has deserialization of untrusted data in its FileBackedSessionManager
High
CVE-2026-7817
pgAdmin 4 contains local file inclusion (LFI) and server-side request forgery (SSRF) vulnerabilities
High
CVE-2026-7816
pgAdmin 4: OS command injection vulnerability in Import/Export query export
Medium
CVE-2026-7814
pgAdmin 4: Stored cross-site scripting (XSS) vulnerability in Browser Tree and Explain Visualizer modules
High
CVE-2026-1707
pgadmin4 affected by a Restore restriction bypass via key disclosure vulnerability
Medium
CVE-2025-12763
pgAdmin 4 has command injection vulnerability on Windows systems
High
CVE-2025-12765
pgAdmin has vulnerability in LDAP authentication mechanism that allows bypassing TLS certificate verification
High
CVE-2025-12764
pgAdmin is affected by an LDAP injection vulnerability
High
CVE-2025-9636
pgadmin4 is affected by a Cross-Origin Opener Policy (COOP) vulnerability
High
CVE-2023-1907
pgAdmin has Incorrect Default Permissions
High
CVE-2024-9014
OAuth2 client ID and secret exposed through the web browser
High
CVE-2024-4216
pgAdmin Cross-site Scripting vulnerability in /settings/store API response json payload
Medium
CVE-2024-4215
pgAdmin is affected by a multi-factor authentication bypass vulnerability
High
CVE-2024-3116
pgAdmin Remote Code Execution (RCE) vulnerability
Medium
CVE-2023-5002
pgAdmin failed to properly control the server code
Medium
CVE-2023-0241
pgAdmin 4 vulnerable to directory traversal
Medium
CVE-2023-22298
pgAdmin 4 Open Redirect vulnerability
High
CVE-2022-4223
pgadmin4 vulnerable to Code Injection
Medium
CVE-2022-0959
pgAdmin 4 Path Traversal vulnerability
Critical
CVE-2026-7813
pgAdmin 4 server mode has an authorization vulnerability affecting Server Groups, Servers, Shared Servers, Background Processes, and Debugger modules
Critical
CVE-2025-13780
pgadmin4 has a Meta-Command Filter Command Execution
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.