Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.6Authentication bypass via issuer-and-serial-only certificate equality in shared cluster cacheOpen the advisoryOct 22, 2026
- High7.2NoSQL injection via dot and dollar characters in LINQ filter field names and dictionary keysOpen the advisoryOct 22, 2026
- Medium5.3NoSQL operator injection via unvalidated replacement document in findOneAndReplaceOpen the advisoryOct 22, 2026
- Medium6.9NoSQL command injection via mismatched raw BSON length prefix written verbatim to the wireOpen the advisoryOct 22, 2026
- Medium5.7MongoDB C Treiber: Schwachstelle ermöglicht Denial of Service und manipulation von DatenOpen the advisoryOct 22, 2026
- High8.2Memory-exhaustion denial of service via unbounded symbol interning during BSON/JSON deserializationOpen the advisoryOct 22, 2026
- Medium5.3Duplicate geometry fields via unvalidated GeoJSON extra membersOpen the advisoryOct 22, 2026
- High8.1Multiple Unauthenticated Buffer Overflow vulnerabilities in AOS-8 Web Interface result in Remote Code ExecutionOpen the advisoryOct 22, 2026
- High8.3Unauthenticated Adjacent Buffer Overflow Vulnerability in the PAPI Protocol leads to Sensitive Information Disclosure in AOS-10Open the advisoryOct 22, 2026
- High8.3Unauthenticated Adjacent Command Injection Vulnerability in the PAPI Protocol of AOS-10Open the advisoryOct 22, 2026
- High8.5Authentication Bypass Leading to Remote Code Execution in AOS-8Open the advisoryOct 22, 2026
- High8.7Authenticated Server-Side Request Forgery leads to Remote Code Execution in AOS-8Open the advisoryOct 22, 2026
- High8.8Unauthenticated Adjacent Memory Corruption Vulnerabilities lead to Remote Code Execution in AOS-10Open the advisoryOct 22, 2026
- High8.8Unauthenticated Adjacent Command Injection Vulnerability in the AOS-8 Command Line Interface Accessed by the PAPI ProtocolOpen the advisoryOct 22, 2026
- High8.8Unauthenticated Adjacent Remote Code Execution Vulnerability in AOS-10Open the advisoryOct 22, 2026
- Critical9.3Authentication Bypass in the PAPI Protocol of AOS-8 Allows Unauthorized Administrative AccessOpen the advisoryOct 22, 2026
- Critical9.3Authentication Bypass in the API allows Administrative Access of AOS-10Open the advisoryOct 22, 2026
- Critical9.3Unauthenticated Adjacent Authentication Bypasses in the PAPI Protocol of AOS-10 Leads to Unauthorized Administrative AccessOpen the advisoryOct 22, 2026
- Critical9.4Unauthenticated Buffer Overflow Vulnerability allows Remote Code Execution in AOS-10 and AOS-8Open the advisoryOct 22, 2026
- Critical9.6Unauthenticated Sensitive Information Disclosure in the Command Line Interface of AOS-10Open the advisoryOct 22, 2026
- Critical9.6Authentication Bypass Leading to Remote Code Execution in AOS-10Open the advisoryOct 22, 2026
- Critical9.6Authentication Bypass Vulnerabilities lead to Complete System Compromise in AOS-8Open the advisoryOct 22, 2026
- Critical9.6Authentication Bypass Leading to Remote Code Execution in AOS-8Open the advisoryOct 22, 2026
- Critical9.6Unauthenticated Adjacent Path Traversal Vulnerability leads to Filesystem Compromise in AOS-8Open the advisoryOct 22, 2026
- Critical9.6Unauthenticated Adjacent Memory Corruption Vulnerability leads to Remote Code Execution in AOS-10Open the advisoryOct 22, 2026