405,224 results · Feed
-
Critical 9.8
OpenObserve is a cloud-native observability platform. Prior to 1.1.0, the shared authentication validator in src/api/co…
-
High 8.7
A use-after-free in the time-series collection component of MongoDB Server can occur when the server validates a time-s…
-
Low 2.3
A missing authorization check in the aggregation framework of MongoDB Server may allow a user holding any valid credent…
-
High 8.6
MongoDB Server may omit an authorization check on the resource that a replication-related administrative command actual…
-
High 7.1
A use-after-free in the aggregation framework of MongoDB Server can occur when certain expressions are evaluated in an …
-
Low 2.0
Nokogiri: Possible Use-After-Free when setting an attribute value via `Nokogiri::XML::Node#[]=` or `#lang=`
Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.5, the CRuby native extension can leave Ruby wrappers pointing to freed memory when Nokogiri::XML::Node#[]= or Nokogiri::XML::Node#lang= replaces an existing attr…
-
Medium 5.3
MongoDB Server maintains an in-memory table of per-namespace statistics for operations that carry encrypted-field infor…
-
High 7.1
A use-after-free weakness in MongoDB Server's server-side JavaScript support for aggregation may allow a stale referenc…
-
High 7.1
A race condition in the schema validation component of MongoDB Server can occur when concurrent writes are checked agai…
-
Low 2.3
Nokogiri: Mutation XSS through `noscript` content in Nokogiri's HTML5 serializer
Nokogiri is an open source XML and HTML library for the Ruby programming language. From 1.12.0 until 1.19.5, the C extension on CRuby and TruffleRuby has a Nokogiri::HTML5 serializer that does not escape text inside noscript elements or angle brackets inside …
-
Low 2.3
A user with basic read-tier database privileges can use an option on a server-side data-change notification feature to …
-
High 8.6
An incorrect authorization check in the MongoDB Server authorization subsystem may allow an unauthenticated party with …
-
High 7.5
An improper privilege management issue in the sharding subsystem of MongoDB Server may allow a user holding certain sha…
-
Low 3.7
JRuby: NONET is bypassed for external DTDs and entities when the systemId uses a short-form IPv4 host
Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.5, on JRuby, applications that parse untrusted XML with DTDLOAD, DTDVALID, or NOENT can have the NONET restriction bypassed when an external DTD or entity uses a …
-
High 8.2
An issue in MongoDB Server's client-side field-level encryption (CSFLE) schema processing component allows encryption m…
-
High 7.3
An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiAnalyz…
-
Medium 6.0
An issue in MongoDB Server's query processing component allows an authenticated user with read privileges to cause a de…
-
High 7.9
A improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet FortiS…
-
Critical 9.1CVE-2026-121529 Public exploit
A origin validation error vulnerability in Fortinet FortiClientMac 7.4.0 through 7.4.7, FortiClientWindows 7.4.0 throug…
-
Medium 5.9
A improper authentication vulnerability in Fortinet FortiOS 7.6.0 through 7.6.6 may allow a remote authenticated attack…
-
Medium 6.0
A use-after-free issue exists in the MongoDB server’s classic query engine plan cache. Under certain query conditions, …
-
High 8.6
Security Advisory 0224
On affected platforms running Arista EOS with Precision Time Protocol (PTP) configured, an unauthenticated attacker with network access to a PTP-enabled port can create a denial of service (DoS) condition by sending traffic to the system.
-
High 7.5
Security Advisory 0218
On affected EOS versions with the eAPI service enabled, a specially crafted HTTP request can allow an unauthenticated, remote attacker to read arbitrary files, including sensitive credentials from the switch filesystem.
-
Medium 6.1
On affected Arista EOS platforms with Routing Information Protocol version 2 (RIPv2) configured, under certain conditio…
-
High 8.9
On affected platforms running Arista EOS with Bidirectional Forwarding Detection (BFD) configured to use keyed MD5 or k…
-
Medium 6.7
On affected platforms running Arista EOS under specific link configurations an attacker with direct connectivity to the…
-
Medium 6.9
On affected platforms running Arista EOS with a S-BFD reflector proxy configured, an unauthenticated attacker could sen…
-
Critical 9.2
On affected platforms running Arista EOS configured as S-BFD peers, an unauthenticated attacker could send a crafted S-…
-
High 8.3
A malformed Error Report can cause EOS to read beyond packet boundaries, potentially terminating the RPKI agent or expo…
-
Medium 6.9
On affected EOS-based platforms, an attacker who controls a Border Gateway Protocol (BGP) peer can send a crafted BGP m…
-
High 8.3
On affected platforms running Arista EOS with Border Gateway Protocol (BGP) changing the BGP listen port from its defau…
-
High 8.3
A crafted Error Report can leave EOS stuck believing that a cache reset is in progress, preventing ROA publication, wit…
-
Medium 6.1
An unauthenticated attacker on an adjacent network segment can bypass MD5 authentication and have unauthorized RIP rout…
-
Critical 9.3
On affected platforms running Arista EOS with BGP configured, a specially crafted packet can cause the BGP agent to cra…
-
Medium 6.0
On affected platforms running Arista EOS in multi-agent routing model with BGP Segment Routing Traffic Engineering (SR-…
-
High 7.7
An unauthenticated attacker on an adjacent network segment can send crafted RIPv2 packets to a RIP-enabled interface on…
-
Medium 6.0
On affected platforms running Arista EOS with VPLS-BGP enabled, an attacker who has established a BGP session with the …
-
High 8.7
On affected platforms running Arista EOS with Border Gateway Protocol (BGP) configured, An unauthenticated attacker who…
-
Medium 6.1
On affected EOS platforms where 802.1x is configured in multi-host authenticated mode and the device is configured with…
-
Medium 6.1
This vulnerability affects customers using Arista Pathfinder for WAN path selection with Border Gateway Protocol-Link S…