CVE Vulnerability Database
Search and browse 420,586 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-114651 | MEDIUM | 4 | 0.4% | Oct 22, 2026 | A memory-handling weakness in the BSON deserialization component of the MongoDB C# Driver may cause data left over from ... |
| CVE-2026-114650 | MEDIUM | 5.9 | 0.1% | Oct 22, 2026 | A flaw in the client-side encryption support of the MongoDB .NET/C# driver can cause data designated for client-side fie... |
| CVE-2026-114649 | MEDIUM | 6.8 | 0.2% | Oct 22, 2026 | The MongoDB C# Driver compares TLS client certificates by issuer and serial number only when deciding whether two client... |
| CVE-2026-114648 | HIGH | 7.6 | 0.3% | Oct 22, 2026 | The MongoDB C# Driver does not neutralize dot and dollar characters in dictionary keys, field names and array-filter ide... |
| CVE-2026-114647 | MEDIUM | 4.3 | 0.3% | Oct 22, 2026 | The MongoDB C# Driver does not reject replacement documents whose top-level field names begin with a dollar sign in Find... |
| CVE-2026-114646 | MEDIUM | 6.5 | 0.3% | Oct 22, 2026 | A data-validation flaw exists in the BSON handling and binary serialization path of the MongoDB C# Driver. When an appli... |
| CVE-2026-114645 | MEDIUM | 5.2 | 0.2% | Oct 22, 2026 | A 32-bit integer wraparound in the MongoDB C Driver's Windows-only Kerberos/SSPI authentication code can cause an unders... |
| CVE-2026-114644 | MEDIUM | 5.9 | 0.5% | Oct 22, 2026 | The MongoDB C# Driver's BSON library contains an uncontrolled resource consumption weakness in its deserialization handl... |
| CVE-2026-114643 | MEDIUM | 5.4 | 0.4% | Oct 22, 2026 | The MongoDB C# Driver writes GeoJSON extra members without checking whether their names collide with reserved GeoJSON me... |
| CVE-2026-114613 | HIGH | 7.5 | 0.3% | Oct 22, 2026 | MessagePack is the serializer implementation for Python msgpack.org. Prior to 1.2.3, the msgpack-python C extension (msg... |
| CVE-2026-114612 | CRITICAL | 9.9 | 0.3% | Oct 22, 2026 | LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. From 1.87.0 until 1.100.4, 1.101.3... |
| CVE-2026-114519 | HIGH | 8.6 | 0.4% | Oct 22, 2026 | Missing Authorization (CWE-862) in the user API of Roskus Prospero Flow CRM from 2.0.0 before 5.26.0 allows a user with ... |
| CVE-2026-113876 | MEDIUM | 4.3 | 0.2% | Oct 22, 2026 | SmileCDR HAPI FHIR does not correctly check authorization for conditional create actions. A user with CREATE but not REA... |
| CVE-2026-113875 | LOW | 3.1 | 0.3% | Oct 22, 2026 | On a SmileCDR HAPI FHIR server with REST-hook subscriptions enabled, if a user is granted subscription-creation permissi... |
| CVE-2025-69723 | MEDIUM | 6.1 | 0.2% | Oct 22, 2026 | A reflected cross-site scripting (XSS) vulnerability in localstack v4.9.2 allows attackers to execute arbitrary Javascri... |
| CVE-2025-65200 | CRITICAL | 9.6 | 0.3% | Oct 22, 2026 | An issue was discovered in localstack 4.9.2 allowing attackers to execute arbitrary code via crafted content hosted on a... |
| CVE-2022-51026 | CRITICAL | 9.8 | 0.6% | Oct 22, 2026 | Bytebase 0.12.0 before 1.0.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to lo... |
| CVE-2026-97635 | HIGH | 8.1 | 0.3% | Oct 22, 2026 | The Agent Zero Web UI before 1.15 does not correctly sanitize user-provided input in chat messages or file uploads. When... |
| CVE-2026-93336 | HIGH | 7.1 | 0.2% | Oct 22, 2026 | Missing authorization in the unit resources download route in Canonical Juju 4.0 through 4.0.15 allows a controller-auth... |
| CVE-2026-77157 | MEDIUM | 6.4 | 0.1% | Oct 22, 2026 | ast-cli downloads two helper binaries, the Vorpal ASCA real-time engine and the SCA Resolver, from "download.checkmarx.c... |
| CVE-2026-77156 | MEDIUM | 6.4 | 0.3% | Oct 22, 2026 | Incomplete validation of extracted archive entry paths in ast-cli's tar extraction logic on Linux and macOS (used when i... |
| CVE-2026-54532 | MEDIUM | 6.9 | 0.2% | Oct 22, 2026 | CloudPirates Open Source Helm Charts is a collection of Helm charts. Prior to commit 271d415, pull_request_target workfl... |
| CVE-2026-54238 | LOW | 3.1 | 0.2% | Oct 22, 2026 | Supabase Realtime provides Broadcast, Presence, and Postgres Changes via WebSockets. Prior to version 2.103.1, the REST ... |
| CVE-2026-13599 | HIGH | 7.8 | 0.1% | Oct 22, 2026 | Missing authentication for critical function vulnerability in ABB Ability Edgenius. This issue affects Ability Edgenius... |
| CVE-2026-115516 | — | — | — | Oct 22, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |