Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownCGA-wmwm-gv4v-h9jfOpen the advisoryJul 24, 2026
- UnknownCross-site Scripting in Apache superset · CVE-2023-49657 · GitHub Advisory Database · GitHubCheck if you run itEPSS 0.84%Jul 24, 2026
- Medium5.5Dbus-broker: dbus-broker: session bus denial of service via emfile during peer setupCheck if you run itEPSS 0.15%Jul 24, 2026
- UnknownGitHub - BiiTts/CVE-2026-46490-samlify-SAML-Attribute-Injection: CVE-2026-46490 — samlify signed-assertion privilege escalation.Check if you run itEPSS 0.47%Jul 24, 2026
- UnknownOmni has a TOCTOU race condition that allows multiple concurrent uses of a single-use SAML session token · CVE-2026-45720 · GitHub Advisory Database · GitHubCheck if you run itEPSS 0.14%Jul 24, 2026
- UnknownCVE-2026-41005 - UAA accepts SAML Encrypted Assertions authentication bypass | Cloud FoundryCheck if you run itEPSS 0.13%Jul 24, 2026
- UnknownCGA-rv79-gq5w-688qOpen the advisoryJul 24, 2026
- UnknownCVE-2022-29174 - Predictable password reset token may lead to account takeover in countly-serverCheck if you run itEPSS 1.48%Jul 24, 2026
- UnknownAuthlib OAuth 2.0 has Open Redirect in Authorization API that allows attacker-controlled redirect_uri through unsupported response_type · CVE-2026-41479 · GitHub Advis…Check if you run itEPSS 0.26%Jul 24, 2026
- UnknownFast-JWT Improperly Validates iss Claims · CVE-2025-30144 · GitHub Advisory Database · GitHubCheck if you run itEPSS 0.59%Jul 24, 2026
- UnknownImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.25%Jul 24, 2026
- Medium5.1GFI Archiver before 15.14 contains a stored cross-site scripting vulnerability in the MailInsights scheduled report configuration that allows authenticated attackers t…Check if you run itEPSS 0.24%Jul 23, 2026
- Medium5.1GFI Archiver before 15.14 contains a stored cross-site scripting vulnerability in the Classification Rules configuration that allows authenticated attackers to inject…Check if you run itEPSS 0.24%Jul 23, 2026
- Medium5.3Missing Authorization vulnerability in Iqonic Designs Graphina – Charts and Graphs For Elementor graphina-elementor-charts-and-graphs allows Exploiting Incorrectly Con…Check if you run itEPSS 0.31%Jul 23, 2026
- High8.1Red Hat Security Advisory: nodejs:22 security, bug fix, and enhancement updateOpen the advisoryJul 23, 2026
- Unknownalibaba fastjson Improper Input ValidationPatch nowKEVEPSS 0.66%Jul 23, 2026
- High7.1During query planning when reading the sort pattern in raw BSONObj form, in some places we don’t explicitly handle the meta expression case.Check if you run itEPSS 0.42%Jul 22, 2026
- Medium6.3A vulnerability was discovered in MongoDB Server where the server-side MozJS scripting engine unconditionally registered a module loading hook that enables JavaScript…Check if you run itEPSS 0.38%Jul 22, 2026
- High7.1A missing bounds check in the BSON CodeWScope element accessors allows an attacker to trigger an out-of-bounds heap read via a crafted aggregation pipeline.Check if you run itEPSS 0.42%Jul 22, 2026
- High7.1An authenticated user can cause a {{mongod}} process to be terminated by the operating system under memory pressure by performing a specific data type conversion opera…Check if you run itEPSS 0.42%Jul 22, 2026
- High7.1An authenticated user can cause the mongod process to be terminated by the operating system under memory pressure via the $rankFusion and $scoreFusion aggregation stages.Check if you run itEPSS 0.42%Jul 22, 2026
- Medium6.9An unauthenticated remote client can cause excessive CPU consumption on a MongoDB server by sending a specific combination of parameters to the awaitable hello command…Check if you run itEPSS 0.44%Jul 22, 2026
- Medium5.3An authenticated user with read-only privileges can cause the mongod process to terminate abnormally by issuing a crafted aggregation command, resulting in denial of s…Check if you run itEPSS 0.37%Jul 22, 2026
- Critical9.2When compute mode is enabled on a standalone mongod instance, insufficient validation of externally sourced BSON data during aggregation pipeline processing can result…Check if you run itEPSS 0.40%Jul 22, 2026
- High7.1An authenticated user with read access can cause the mongod process to be terminated through certain aggregation expressions that execute server-side JavaScript.Check if you run itEPSS 0.42%Jul 22, 2026
Sort