Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownCVE-2026-6269 is listed by GitLab Patch Release: 19.0.2, 18.11.5, 18.10.8.Check if you run itEPSS 0.22%Jun 10, 2026
- UnknownCVE-2026-3553 is listed by GitLab Patch Release: 19.0.2, 18.11.5, 18.10.8.Check if you run itEPSS 0.24%Jun 10, 2026
- Unknowntribulant newsletters Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 1.38%Jun 10, 2026
- UnknownCVE-2026-1500 is listed by GitLab Patch Release: 19.0.2, 18.11.5, 18.10.8.Check if you run itEPSS 0.32%Jun 10, 2026
- Unknownupdraftplus updraftplus Improper Verification of Cryptographic SignaturePatch nowKEVEPSS 4.31%Jun 10, 2026
- UnknownCVE-2026-10733 is listed by GitLab Patch Release: 19.0.2, 18.11.5, 18.10.8.Check if you run itEPSS 0.22%Jun 10, 2026
- UnknownCVE-2026-10087 is listed by GitLab Patch Release: 19.0.2, 18.11.5, 18.10.8.Check if you run itEPSS 0.31%Jun 10, 2026
- High7.1An authenticated user with the read role may read limited amounts of uninitialized stack memory via specially-crafted issuances of the filemd5 commandCheck if you run itEPSS 0.22%Jun 9, 2026
- High7.2The $_internalApplyOplogUpdate aggregation pipeline stage can be used to execute a document diff containing a malformed binary diff to return memory out-of-bounds or c…Check if you run itEPSS 0.30%Jun 9, 2026
- High7.1An authorized user could trigger a server crash by running a query with a 2dsphere index on a field that stores a GeoJSON GeometryCollection containing a Polygon with…Check if you run itEPSS 0.27%Jun 9, 2026
- Medium6.8The ldapQueryPassword parameter, when set through the runtime setParameter command, will log the new password to the mongod.log file in plain text.Check if you run itEPSS 0.11%Jun 9, 2026
- High7.1An authenticated user can cause a MongoDB server to crash or return incorrect results by creating documents that interfere with internal metadata processing during query execution.Check if you run itEPSS 0.37%Jun 9, 2026
- High7.1This issue can occur when running an aggregation pipeline that uses the internal $exchange stage configured with key-range partitioning and order-preserving delivery.Check if you run itEPSS 0.27%Jun 9, 2026
- High7.1The $_internalConvertBucketIndexStats stage used PauseExecution as a way to signal "skip this document" when an index stats conversion failed.Check if you run itEPSS 0.32%Jun 9, 2026
- High7.1Adding fromRouter:true and runtimeConstants.userRoles could cause aggregations to crash mongodb server.Check if you run itEPSS 0.27%Jun 9, 2026
- High7.1When using $changestreams and $_requestReshardingResumeToken with the exchange option the server hits an invariant which causes the server to crash.Check if you run itEPSS 0.27%Jun 9, 2026
- High7.1In MongoDB Server 8.0, an aggregation stage can leave its _subPipeline field null during processing of certain pipelines.Check if you run itEPSS 0.31%Jun 9, 2026
- High8.2When OIDC authentication is enabled in configuration, clients may set specific values in the "mechanism" parameter of the "authenticate" command that lead to server crash.Check if you run itEPSS 0.35%Jun 9, 2026
- High7.1A bug in query analysis processing of the $vectorSearch aggregation stage for Queryable Encryption (QE) or Client-Side Field Level Encryption (CSFLE) results in litera…Check if you run itEPSS 0.10%Jun 9, 2026
- High8.7A vulnerability in MongoDB Server's BSON validation logic allows an unauthenticated user to crash the mongod process by sending a specially crafted message.Check if you run itEPSS 0.34%Jun 9, 2026
- Medium6.8MongoDB server may log authentication parameters, including credentials, to the server log during SASL authentication.Check if you run itEPSS 0.12%Jun 9, 2026
- High8.5SQLite before 3.53.2 contains a heap-based buffer overflow vulnerability in the FTS5 full-text search extension that allows attackers to cause a crash or execute arbit…Check if you run itEPSS 0.18%Jun 9, 2026
- High8.5SQLite before 3.53.2 contains an out-of-bounds read vulnerability in the FTS5 full-text search extension that allows attackers to crash the process by supplying a crafted databaseCheck if you run itEPSS 0.19%Jun 9, 2026
- Medium5.4CVE-2026-47631 is listed by inventory_critical.Check if you run itEPSS 0.35%Jun 9, 2026
- High7.8Microsoft Windows Improper Link Resolution Before File Access ('Link Following')Patch nowKEVEPSS 3.63%Jun 9, 2026
Sort