Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.1A bug in query analysis processing of the $vectorSearch aggregation stage for Queryable Encryption (QE) or Client-Side Field Level Encryption (CSFLE) results in litera…Check if you run itEPSS 0.10%Jun 9, 2026
- High8.7A vulnerability in MongoDB Server's BSON validation logic allows an unauthenticated user to crash the mongod process by sending a specially crafted message.Check if you run itEPSS 0.34%Jun 9, 2026
- Medium6.8MongoDB server may log authentication parameters, including credentials, to the server log during SASL authentication.Check if you run itEPSS 0.12%Jun 9, 2026
- High8.5SQLite before 3.53.2 contains a heap-based buffer overflow vulnerability in the FTS5 full-text search extension that allows attackers to cause a crash or execute arbit…Check if you run itEPSS 0.18%Jun 9, 2026
- High8.5SQLite before 3.53.2 contains an out-of-bounds read vulnerability in the FTS5 full-text search extension that allows attackers to crash the process by supplying a crafted databaseCheck if you run itEPSS 0.19%Jun 9, 2026
- UnknownCVE-2026-11822 affecting package sqlite for versions less than 3.44.0-4Open the advisoryJun 9, 2026
- High7.5Issue summary: When CMS password-based decryption (RFC 3211 / PWRI key unwrap) processes attacker-supplied CMS data, an attacker-chosen stream-mode KEK cipher can trig…Check if you run itEPSS 0.71%Jun 9, 2026
- High8.1Issue summary: A signed integer overflow when sizing the destination buffer for Unicode output in ASN1_mbstring_ncopy() can lead to a heap buffer overflow.Check if you run itEPSS 0.80%Jun 9, 2026
- High7.5Uncontrolled resource consumption in HTTP/2 allows an unauthorized attacker to deny service over a network.Check this weekEPSS 56.59%Jun 9, 2026
- Medium4.6CVE-2026-48562 is listed by inventory_critical.Check if you run itEPSS 0.46%Jun 9, 2026
- Medium5.4Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.Check if you run itEPSS 0.86%Jun 9, 2026
- Medium5.4Improper input validation in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.Check if you run itEPSS 0.46%Jun 9, 2026
- Medium5.4CVE-2026-47640 is listed by inventory_critical.Check if you run itEPSS 0.46%Jun 9, 2026
- Medium5.4CVE-2026-47639 is listed by inventory_critical.Check if you run itEPSS 0.47%Jun 9, 2026
- Medium5.4CVE-2026-47638 is listed by inventory_critical.Check if you run itEPSS 0.46%Jun 9, 2026
- Medium5.4CVE-2026-47637 is listed by inventory_critical.Check if you run itEPSS 0.46%Jun 9, 2026
- Medium5.4CVE-2026-47636 is listed by inventory_critical.Check if you run itEPSS 0.47%Jun 9, 2026
- Medium5.4Improper neutralization of special elements in output used by a downstream component ('injection') in Microsoft Office SharePoint allows an authorized attacker to perf…Check if you run itEPSS 0.51%Jun 9, 2026
- Medium5.4CVE-2026-47631 is listed by inventory_critical.Check if you run itEPSS 0.35%Jun 9, 2026
- High8.0Improper authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.Check if you run itEPSS 0.61%Jun 9, 2026
- High7.5Uncontrolled resource consumption in ASP.NET Core allows an unauthorized attacker to deny service over a network.Check if you run itEPSS 2.48%Jun 9, 2026
- High7.8Microsoft Windows Improper Link Resolution Before File Access ('Link Following')Patch nowKEVEPSS 3.63%Jun 9, 2026
- High8.1Improper control of generation of code ('code injection') in Microsoft Exchange Server allows an unauthorized attacker to execute code over a network.Check if you run itEPSS 0.52%Jun 9, 2026
- High8.8CVE-2026-45504 is listed by Server-side request forgery (ssrf) in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network..Check if you run itEPSS 1.33%Jun 9, 2026
- Medium6.5Improper authorization in Microsoft Exchange Server allows an authorized attacker to disclose information over a network.Check if you run itEPSS 0.45%Jun 9, 2026
Sort