Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.8The ldapQueryPassword parameter, when set through the runtime setParameter command, will log the new password to the mongod.log file in plain text.Check if you run itEPSS 0.11%Jun 9, 2026
- High7.1An authenticated user can cause a MongoDB server to crash or return incorrect results by creating documents that interfere with internal metadata processing during query execution.Check if you run itEPSS 0.37%Jun 9, 2026
- High7.1This issue can occur when running an aggregation pipeline that uses the internal $exchange stage configured with key-range partitioning and order-preserving delivery.Check if you run itEPSS 0.27%Jun 9, 2026
- High7.1The $_internalConvertBucketIndexStats stage used PauseExecution as a way to signal "skip this document" when an index stats conversion failed.Check if you run itEPSS 0.32%Jun 9, 2026
- High7.1Adding fromRouter:true and runtimeConstants.userRoles could cause aggregations to crash mongodb server.Check if you run itEPSS 0.27%Jun 9, 2026
- High7.1When using $changestreams and $_requestReshardingResumeToken with the exchange option the server hits an invariant which causes the server to crash.Check if you run itEPSS 0.27%Jun 9, 2026
- High7.1In MongoDB Server 8.0, an aggregation stage can leave its _subPipeline field null during processing of certain pipelines.Check if you run itEPSS 0.31%Jun 9, 2026
- High8.2When OIDC authentication is enabled in configuration, clients may set specific values in the "mechanism" parameter of the "authenticate" command that lead to server crash.Check if you run itEPSS 0.35%Jun 9, 2026
- High7.1A bug in query analysis processing of the $vectorSearch aggregation stage for Queryable Encryption (QE) or Client-Side Field Level Encryption (CSFLE) results in litera…Check if you run itEPSS 0.10%Jun 9, 2026
- High8.7A vulnerability in MongoDB Server's BSON validation logic allows an unauthenticated user to crash the mongod process by sending a specially crafted message.Check if you run itEPSS 0.34%Jun 9, 2026
- Medium6.8MongoDB server may log authentication parameters, including credentials, to the server log during SASL authentication.Check if you run itEPSS 0.12%Jun 9, 2026
- High8.5SQLite before 3.53.2 contains a heap-based buffer overflow vulnerability in the FTS5 full-text search extension that allows attackers to cause a crash or execute arbit…Check if you run itEPSS 0.18%Jun 9, 2026
- High8.5SQLite before 3.53.2 contains an out-of-bounds read vulnerability in the FTS5 full-text search extension that allows attackers to crash the process by supplying a crafted databaseCheck if you run itEPSS 0.19%Jun 9, 2026
- UnknownCVE-2026-11822 affecting package sqlite for versions less than 3.44.0-4Open the advisoryJun 9, 2026
- Medium4.6CVE-2026-48562 is listed by inventory_critical.Check if you run itEPSS 0.51%Jun 9, 2026
- Medium5.4Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.Check if you run itEPSS 0.94%Jun 9, 2026
- Medium5.4Improper input validation in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.Check if you run itEPSS 0.51%Jun 9, 2026
- Medium5.4CVE-2026-47640 is listed by inventory_critical.Check if you run itEPSS 0.51%Jun 9, 2026
- Medium5.4CVE-2026-47639 is listed by inventory_critical.Check if you run itEPSS 0.51%Jun 9, 2026
- Medium5.4CVE-2026-47638 is listed by inventory_critical.Check if you run itEPSS 0.51%Jun 9, 2026
- Medium5.4CVE-2026-47637 is listed by inventory_critical.Check if you run itEPSS 0.51%Jun 9, 2026
- Medium5.4CVE-2026-47636 is listed by inventory_critical.Check if you run itEPSS 0.51%Jun 9, 2026
- Medium5.4Improper neutralization of special elements in output used by a downstream component ('injection') in Microsoft Office SharePoint allows an authorized attacker to perf…Check if you run itEPSS 0.56%Jun 9, 2026
- Medium5.4CVE-2026-47631 is listed by inventory_critical.Check if you run itEPSS 0.35%Jun 9, 2026
- High8.0Improper authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.Check if you run itEPSS 0.67%Jun 9, 2026
Sort