I believe that I'm now safe from all phishing and pharming attempts.
Since only few CAs can issue such "green bar" extended validation (EV) certificates you are mostly right if you trust EV certificates. It might still be possible that the CA got hacked, like done with Comodo and DigiNotar in 2011. It is not possible for an attacker to just add a new CA to the system because the list of CAs which can issue EV certificates is hard coded in the browser (at least with Firefox and Chrome), so an attacker would need to patch or replace your browser to show its own fake certificates with green.
Faking non-EV certificates is much easier because any of the 100s of trusted CA in the browser or any of their sub-CA could issue such a certificate. Which means an attacker can simply choose the weakest CA/sub-CA. And for non-EV certificates it is also enough to import a new CA into your browser, which a trojan could do.
Are there any other vulnerabilities?
Lots. There are regularly web application vulnerabilities like XSS and SQL injection even on sites with an EV certificate. The certificate says nothing about the security of the site itself, it is only used to identify the site.
Is it still possible for me to be hacked?
Of course. The site could be hacked and serve malware. Or the site could serve ads and the ads will serve the malware (this is called malvertising). Again, the certificate says nothing about the security of the site or of any included sites (ads, tracking, social networks...).