Archive
13 May 2026
Vulnerabilities first published on this day (UTC), newest first.
349 results · Feed
-
Medium 5.7
Improper enforcement of the LFENCE serialization property may allow an attacker to bypass speculation barriers and pote…
-
High 8.5
Missing lock bit protection for NBIO registers could allow a local admin-privileged attacker to gain arbitrary System M…
-
Medium 5.9
Missing lock bit protection for NBIO registers could allow a local admin-privileged attacker to modify MMIO routing con…
-
High 7.2
An untrusted pointer dereference in the ionic cloud driver for VMWare ESXi could allow an attacker with an unprivileged…
-
High 8.8
A heap-based buffer overflow in the ionic cloud driver for VMware ESXi could allow an attacker to achieve privilege esc…
-
High 8.8
A heap-based buffer overflow in the ionic cloud driver for VMware ESXi could allow an attacker to achieve privilege esc…
-
Medium 4.3
Post-authentication CPU utilization DoS via $trim/$ltrim/$rtrim operators
Using a densely populated chars mask and a large input string in the MongoDB aggregation operators $trim, $ltrim, and $rtrim, an authenticated user with aggregation permissions can pin CPU utilization at 100% for an extended period of time. This issue impacts…
-
High 7.5
Post-authentication use-after-free error in $_internalJsEmit and mapreduce commands
After invoking $_internalJsEmit, which is not intended to be directly accessible, or mapreduce command’s map function in a certain way, an authenticated user can subsequently crash mongod when the server-side JavaScript engine (through $where, $function, mapr…
-
Medium 6.4
Use-After-Free in MongoDB FLE Query Analysis When Processing Positional Projections on Encrypted Fields
A use-after-free vulnerability exists in MongoDB's Field-Level Encryption (FLE) query analysis component, affecting client-side uses of mongocryptd and crypt_shared. Triggering this vulnerability requires control over the structure of a client's FLE-related q…
-
Low 2.7
Schema validation log messages may not redact user data
When schema validation is enabled on a collection and an update or insert would violate the collection's schema, the local server log message generated may not have all user data redacted. This issue impacts MongoDB Server v7.0 versions prior to 7.0.34, v8.0…
-
Medium 6.5
Post-auth memory exhaustion via bitwise match expressions
An authenticated user can cause excess memory usage via bitwise match expression AST processing of $bitsAllSet, $bitsAnySet, $bitsAllClear, and $bitsAnyClear. This contributes to memory pressure and may lead to availability loss by OOM. This issue impacts Mon…
-
High 7.3
Firmament-Autopilot FMT-Firmware commit de5aec was discovered to contain a buffer overflow via the task_mavobc_entry fu…
-
Medium 6.2
Buffer Overflow vulnerability in Ardupilot rover commit v.c56439b045162058df0ff136afea3081fcd06d38 allows a local attac…
-
Medium 6.2
Buffer Overflow vulnerability in Ardupiot Copter Latest commit 92693e023793133e49a035daf37c14433e484778 allows a local …
-
Medium 5.5
Buffer Overflow vulnerability in Ardupiot Copter Latest commit 92693e023793133e49a035daf37c14433e484778 allows a local …
-
High 7.5
striso-control-firmware 54c9722 is vulnerable to Buffer Overflow in function AuxJack.
-
High 7.5
striso-control-firmware 54c9722 is vulnerable to Buffer Overflow in function ThreadReadButtons.
-
Medium 5.6CVE-2025-29338 Public exploit
NXP moal.ko Wi-Fi driver 5.1.7.10 FW version from v17.92.1.p149.43 To v17.92.1.p149.157 was discovered to contain a buf…
-
Critical 9.3
The locally served web site on the Garmin WDU (v1 1.4.6 and v2 5.0) allows a cross-site origin WebSocket hijacking atta…
-
Medium 5.0
The locally served web site on the Garmin WDU (v1 1.4.6 and v2 5.0) allows a reflected cross site scripting (XSS) attac…
-
High 7.5
The locally served web site on the Garmin WDU (v1 1.4.6 and v2 5.0) allows a symlink attack. If a malicious graphics pa…
-
High 7.3
The locally served web site on the Garmin WDU (v1 1.4.6 and v2 5.0) allows its authentication to be bypassed. The WDU w…
-
Medium 6.8
Hiseeu C90 v5.7.15 is vulnerable to Insecure Permissions. The UART bootloader is accessible when battery is disconnecte…
-
Medium 6.8
U-SPEED AC1200 Gigabit Wi-Fi Router (Model: T18-21K) V1.0 is vulnerable to Incorrect Access Control. The device exposes…
-
High 7.2
U-SPEED AC1200 Gigabit Wi-Fi Router (Model: T18-21K) V1.0 is vulnerable to Command Injection. The Network Time Protocol…
-
Medium 6.5CVE-2026-31156 Public exploit
A path injection vulnerability exists in OpenPLC v3 (2c82b0e79c53f8c1f1458eee15fec173400d6e1a) as the binary program co…
-
High 7.3
An arbitrary file upload vulnerability in the ShopOrderImportController.java component of qihang-wms commit 75c15a allo…
-
Medium 6.5
qihang-wms commit 75c15a was discovered to contain a SQL injection vulnerability via the datascope parameter in the Sys…
-
Medium 6.5
qihang-wms commit 75c15a was discovered to contain a SQL injection vulnerability via the datascope parameter in the Sys…