Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.6Insufficient Granularity of Access Control in SEV firmware could allow a privileged user with a malicious hypervisor to create a SEV-ES guest with an ASID in the range meant for SECheck if you run itEPSS 0.16%Feb 10, 2026
- Medium5.9Improper access control in AMD Secure Encrypted Virtualization (SEV) firmware could allow a malicious hypervisor to bypass RMP protections, potentially resulting in a loss of SEV-SCheck if you run itEPSS 0.17%Feb 10, 2026
- Medium6.9The mongo-go-driver repository contains CGo bindings for GSSAPI (Kerberos) authentication on Linux and macOS.Check if you run itEPSS 0.31%Feb 10, 2026
- Medium6.9Under specific conditions when processing a maliciously crafted value of type Hash r, Mongoid::Criteria.from_hash may allow for executing arbitrary Ruby code.Check if you run itEPSS 0.23%Feb 10, 2026
- Critical10.0Catalyst is a platform built for enterprise game server hosts, game communities, and billing panel integrations.Check if you run itEPSS 0.56%Feb 10, 2026
- High7.7MUNGE is an authentication service for creating and validating user credentials.Check if you run itEPSS 0.34%Feb 10, 2026
- High7.1An authorized user may disable the MongoDB server by issuing a query against a collection that contains an invalid compound wildcard index.Check if you run itEPSS 0.29%Feb 10, 2026
- High7.1MongoDB Server may experience an out-of-memory failure while evaluating expressions that produce deeply nested documents.Check if you run itEPSS 0.33%Feb 10, 2026
- High7.1Complex queries can cause excessive memory usage in MongoDB Query Planner resulting in an Out-Of-Memory Crash.Check if you run itEPSS 0.29%Feb 10, 2026
- Medium5.3Incorrect validation of the profile command may result in the determination that a request altering the 'filter' is read-only.Check if you run itEPSS 0.21%Feb 10, 2026
- High7.1An authorized user may trigger a server crash by running a $geoNear pipeline with certain invalid index hints.Check if you run itEPSS 0.29%Feb 10, 2026
- High8.2Connections received from the proxy port may not count towards total accepted connections, resulting in server crashes if the total number of connections exceeds available resourceCheck if you run itEPSS 0.31%Feb 10, 2026
- High7.1Inserting certain large documents into a replica set could lead to replica set secondaries not being able to fetch the oplog from the primary.Check if you run itEPSS 0.29%Feb 10, 2026
- High7.1The internal locking mechanism of the MongoDB server uses an internal encoding of the resources in order to choose what lock to take.Check if you run itEPSS 0.23%Feb 10, 2026
- Medium6.9Certain HP OfficeJet Pro printers may expose information if Cross‑Origin Resource Sharing (CORS) is misconfigured, potentially allowing unauthorized web origins to access device reCheck if you run itEPSS 0.22%Feb 10, 2026
- High8.7A series of specifically crafted, unauthenticated messages can exhaust available memory and crash a MongoDB server.Check if you run itEPSS 0.86%Feb 10, 2026
- Medium6.9FastGPT is an AI Agent building platform.Check if you run itEPSS 0.27%Feb 10, 2026
- High8.0Improper neutralization of special elements used in a command ('command injection') in GitHub Copilot and Visual Studio allows an authorized attacker to elevate privileges over a nCheck if you run itEPSS 0.89%Feb 10, 2026
- High7.0Improper authentication in Windows Storage allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.44%Feb 10, 2026
- High8.8Improper neutralization of special elements used in a command ('command injection') in Github Copilot allows an unauthorized attacker to execute code over a network.Check if you run itEPSS 0.90%Feb 10, 2026
- Medium5.7Improper neutralization of input during web page generation ('cross-site scripting') in Azure HDInsights allows an authorized attacker to perform spoofing over a network.Check if you run itEPSS 0.65%Feb 10, 2026
- High8.8Improper control of generation of code ('code injection') in Microsoft Defender for Linux allows an unauthorized attacker to execute code over an adjacent network.Check if you run itEPSS 0.53%Feb 10, 2026
- Critical9.8Deserialization of untrusted data in Azure SDK allows an unauthorized attacker to execute code over a network.Check if you run itEPSS 2.54%Feb 10, 2026
- Medium6.5Binding to an unrestricted ip address in Azure IoT Explorer allows an unauthorized attacker to disclose information over a network.Check if you run itEPSS 0.54%Feb 10, 2026
- Medium6.5User interface (ui) misrepresentation of critical information in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.Check if you run itEPSS 8.07%Feb 10, 2026
Sort