Vulnerabilities
Recent vulnerabilities
Recent vulnerabilities from
🏠GNA-1 (CIRCL)
Select from 80 available sources using the dropdown above.
| ID | Description | Published | Updated |
|---|---|---|---|
| fkie_cve-2026-52688 | RRSIGs with too few labels can lead to bypass of DNSSEC wildcard validation | 2026-07-23T09:16:27.080 | 2026-07-23T09:16:27.080 |
| fkie_cve-2026-52686 | The issue is a DNSSEC validation bypass where wildcard expansion proofs (NSEC/NSEC3 records) are ac… | 2026-07-23T09:16:26.967 | 2026-07-23T09:16:26.967 |
| fkie_cve-2026-52684 | If the auth responds very slowly and the records expire in between, the capping of TTLs is not enfo… | 2026-07-23T09:16:26.843 | 2026-07-23T09:16:26.843 |
| fkie_cve-2026-16723 | A remote code execution (RCE) vulnerability exists in fastjson 1.2.68 through 1.2.83. This vulnerab… | 2026-07-23T09:16:26.700 | 2026-07-23T09:16:26.700 |
| fkie_cve-2026-16287 | Improper neutralization of special elements used in an OS command ('OS command injection') vulnerab… | 2026-07-23T09:16:26.570 | 2026-07-23T09:16:26.570 |
| fkie_cve-2024-58330 | A missing authentication check in Bosch IP cameras of families CPP13 and CPP14 allows an unauthenti… | 2026-07-23T09:16:26.430 | 2026-07-23T09:16:26.430 |
| fkie_cve-2024-58023 | Information disclosure in Bosch Configuration Manager in Version 7.72.0106 allows an attacker to ac… | 2026-07-23T09:16:26.290 | 2026-07-23T09:16:26.290 |
| fkie_cve-2026-9754 | An authenticated user with the read role may read limited amounts of uninitialized stack memory via… | 2026-06-09T23:17:05.023 | 2026-07-23T09:10:00.113 |
| fkie_cve-2026-9753 | The $_internalApplyOplogUpdate aggregation pipeline stage can be used to execute a document diff co… | 2026-06-09T23:17:04.897 | 2026-07-23T09:10:00.113 |
| fkie_cve-2026-9752 | An authorized user could trigger a server crash by running a query with a 2dsphere index on a field… | 2026-06-09T23:17:04.770 | 2026-07-23T09:10:00.113 |
| fkie_cve-2026-9751 | The ldapQueryPassword parameter, when set through the runtime setParameter command, will log the ne… | 2026-06-09T23:17:04.643 | 2026-07-23T09:10:00.113 |
| fkie_cve-2026-9750 | An authenticated user can cause a MongoDB server to crash or return incorrect results by creating d… | 2026-06-09T23:17:04.510 | 2026-07-23T09:10:00.113 |
| fkie_cve-2026-9749 | This issue can occur when running an aggregation pipeline that uses the internal $exchange stage co… | 2026-06-09T23:17:04.380 | 2026-07-23T09:10:00.113 |
| fkie_cve-2026-9748 | The $_internalConvertBucketIndexStats stage used PauseExecution as a way to signal "skip this docum… | 2026-06-09T23:17:04.250 | 2026-07-23T09:10:00.113 |
| fkie_cve-2026-9747 | Adding fromRouter:true and runtimeConstants.userRoles could cause aggregations to crash mongodb server. | 2026-06-09T23:17:04.120 | 2026-07-23T09:10:00.113 |
| fkie_cve-2026-9746 | When using $changestreams and $_requestReshardingResumeToken with the exchange option the server hi… | 2026-06-09T23:17:03.980 | 2026-07-23T09:10:00.113 |
| fkie_cve-2026-9743 | In MongoDB Server 8.0, an aggregation stage can leave its _subPipeline field null during processing… | 2026-06-09T23:17:03.853 | 2026-07-23T09:10:00.113 |
| fkie_cve-2026-9742 | When OIDC authentication is enabled in configuration, clients may set specific values in the "mecha… | 2026-06-09T23:17:03.727 | 2026-07-23T09:10:00.113 |
| fkie_cve-2026-9741 | A bug in query analysis processing of the $vectorSearch aggregation stage for Queryable Encryption … | 2026-06-09T23:17:03.583 | 2026-07-23T09:10:00.113 |
| fkie_cve-2026-9740 | A vulnerability in MongoDB Server's BSON validation logic allows an unauthenticated user to crash t… | 2026-06-09T23:17:03.437 | 2026-07-23T09:10:00.113 |
| fkie_cve-2026-9735 | MongoDB server may log authentication parameters, including credentials, to the server log during S… | 2026-06-09T23:17:03.287 | 2026-07-23T09:10:00.113 |
| fkie_cve-2026-9629 | The Canvas plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'tag' paramete… | 2026-06-13T08:16:12.330 | 2026-07-23T09:10:00.113 |
| fkie_cve-2026-9134 | The FooGallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'custom_at… | 2026-06-13T07:16:15.107 | 2026-07-23T09:10:00.113 |
| fkie_cve-2026-9109 | The GPTranslate – Multilingual AI Translation for WordPress: Automatically Translate Websites plugi… | 2026-06-13T07:16:14.853 | 2026-07-23T09:10:00.113 |
| fkie_cve-2026-9067 | The Schema & Structured Data for WP & AMP WordPress plugin before 1.60 does not check user capabili… | 2026-06-10T07:16:25.580 | 2026-07-23T09:10:00.113 |
| fkie_cve-2026-9060 | The Store Locator WordPress plugin before 1.6.6 does not sanitize and escape one of its settings be… | 2026-06-10T07:16:25.473 | 2026-07-23T09:10:00.113 |
| fkie_cve-2026-9019 | The Easy Image Collage plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'grid[… | 2026-06-10T08:16:25.937 | 2026-07-23T09:10:00.113 |
| fkie_cve-2026-8863 | Multiple Microsoft-sigend UEFI SHIM bootloaders are vulnerable to SecureBoot bypass. An attacker wi… | 2026-06-09T19:17:59.210 | 2026-07-23T09:10:00.113 |
| fkie_cve-2026-8853 | The MW WP Form plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'memo' par… | 2026-06-10T08:16:25.807 | 2026-07-23T09:10:00.113 |
| fkie_cve-2026-8613 | The aThemes Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting … | 2026-06-10T08:16:25.647 | 2026-07-23T09:10:00.113 |