2026

Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Third

An issue in Unistal Systems Pvt. Ltd.Protegent 360 v2.0.0.4 allows a local attacker to escalate privileges via the sub_1

An issue in Unistal Systems Pvt. Ltd.Protegent 360 v2.0.0.4 allows a local attacker to escalate privileges via the kerne

An issue in Unistal Systems Pvt. Ltd.Protegent 360 v2.0.0.4 allows a local attacker to cause a denial of service via the

A security vulnerability has been detected in syncfusion ej2-javascript-ui-controls up to 33.2.3. This affects the funct

A vulnerability was identified in danger danger-js up to 13.0.7. Impacted is the function danger.git.diffForFile of the

A vulnerability was detected in oclif up to 4.23.16. Affected by this vulnerability is the function child_process.exec o

Joomla Extension - regularlabs.com - Insecure login URL keys in IP login extension - Persistent URL login keys were also

Joomla Extension - regularlabs.com - IP spoofing vulnerability in IP login extension - IP Login trusted forwarded client

Joomla Extension - regularlabs.com - various code injection vectors in Sourcerer extension - Free did not require both t

Joomla Extension - regularlabs.com - XSS vectors in tag-provided inputs in various Regular Labs extensions - Tag-provide

Joomla Extension - regularlabs.com - restricted user-data exposure in Users Anywhere and Articles Anywhere extensions -

Joomla Extension - regularlabs.com - Content access and publication bypass in Articles Anywhere and Modules Anywhere ext

Joomla Extension - regularlabs.com - disclosure of restricted content via search index in various Regular Labs extension

Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Regular Labs Extension Manager

Joomla Extension - regularlabs.com - Authorization bypass in DB Replacer extension - Administrator routes and replacemen

Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in various admin/import/export ac

Joomla Extension - regularlabs.com - Client IP spoofing vulnerability in Regular Labs conditions manager - IP and GeoIP

Joomla Extension - regularlabs.com - XSS vulnerability in Regular Labs conditions manager - Stored condition values coul

Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Regular Labs conditions manage

Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in various Regular Labs extension

OIDC::Lite versions through 0.12.1 for Perl allow ID Token signature verification bypass via a token-controlled algorith

An issue in the unrar.dll component of IZArc v4.6 allows attackers to execute a path traversal.

An issue in ZipGenius Team ZipGenius v.6.3.2.3116 and before allows a remote attacker to escalate privileges and execute

An issue in ConeXware, Inc Power Archiver v.22.00.11 and before allows a remote attacker to escalate privileges and exec

An issue in Franco Corbelli ZPAQFRANZ v.61.3 and before allows a remote attacker to escalate privileges and execute arbi

BandiZip v.7.37 is affected by a Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypa

An issue in Milos Paripovic OneCommander v.3.96.0.0 allows a remote attacker to execute arbitrary code via the OneComman

An issue in OhSoft CoffeeZip v4.8.0.0 allows attackers to execute arbitrary code via downloading and executing a crafted

An issue in NCH Software ExpressZip v11.29 allows attackers to execute arbitrary code via downloading and executing a cr

During query planning when reading the sort pattern in raw BSONObj form, in some places we don’t explicitly handle the m

Question2Answer through 1.8.8 contains a session invalidation vulnerability that allows attackers with a previously obta

The code to parse MIME headers for display when forwarding a message (if the setting to view all headers was enabled) ha

When importing connections in Compass it is possible to override some connection options that are otherwise can't be cha

A vulnerability was discovered in MongoDB Server where the server-side MozJS scripting engine unconditionally registered

A missing bounds check in the BSON CodeWScope element accessors allows an attacker to trigger an out-of-bounds heap read

An authenticated user can cause a {{mongod}} process to be terminated by the operating system under memory pressure by p

An authenticated user can cause the mongod process to be terminated by the operating system under memory pressure via th

An unauthenticated remote client can cause excessive CPU consumption on a MongoDB server by sending a specific combinati

An authenticated user with read-only privileges can cause the mongod process to terminate abnormally by issuing a crafte

When compute mode is enabled on a standalone mongod instance, insufficient validation of externally sourced BSON data du

An authenticated user with read access can cause the mongod process to be terminated through certain aggregation express

A MongoDB server initiating an outbound TLS connection may terminate abnormally when processing a malformed OCSP respons

An authenticated user can cause excessive CPU consumption or out-of-memory conditions on a MongoDB server by sending a c

An authenticated user holding cursor termination privileges on one database may incorrectly be permitted to terminate ac

When PROXY protocol v2 is used on the Unix domain socket path, roles derived from X.509 client certificates may not be v

Improper handling of DBPointer objects during BSON serialization in MongoDB's server-side JavaScript engine can result i

A user with read-only privileges is able to craft an aggregation pipeline using the $linearFill window function operator

Certain query operations involving deeply nested $jsonSchema constructs can trigger disproportionate CPU consumption in

An authenticated user with standard read/write privileges can cause the mongod process to terminate due to an out-of-mem