CVEs
Browse the synced catalog, newest first.
- CVE-2026-126064Nokogiri: Possible Use-After-Free when setting an attribute value via `Nokogiri::XML::Node#[]=` or `#lang=`sparklemotion nokogiri · nokogiri
- CVE-2026-120820Uncontrolled Resource Consumption in MongoDB Server Per-Namespace Encrypted-Field Statistics Table Leads to Denial of ServiceMongoDB Server
- CVE-2026-120818Use-After-Free in MongoDB Server JavaScript Support for Aggregation Leads to Information DisclosureMongoDB Server
- CVE-2026-120817Post-authentication race condition in MongoDB Server geospatial schema validationMongoDB Server
- CVE-2026-126063Nokogiri: Mutation XSS through `noscript` content in Nokogiri's HTML5 serializersparklemotion nokogiri · nokogiri
- CVE-2026-120816System collection contents readable through a database change stream with showSystemEventsMongoDB Server
- CVE-2026-120815Incorrect Authorization Check in MongoDB Server Localhost Exception Leads to Unauthorized Administrative AccessMongoDB Server
- CVE-2026-120814MultiUpdateCoordinator state replay lets a shard administrator create a persistent cluster root userMongoDB Server
- CVE-2026-126062Nokogiri : Possible SSRF on JRuby when resolving external DTDs or entities with `NONET` setsparklemotion nokogiri · nokogiri
- CVE-2026-120813Plaintext storage of encrypted fields via duplicate keys in client-side encryption schema parsingMongoDB Server
- CVE-2025-61625An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiAnalyzer 7.6.0 through…Fortinet FortiManager · Fortinet FortiAnalyzer
- CVE-2026-120812Full server crash via unbounded per-operand recursion in time-series query vectorizationMongoDB Server
- CVE-2026-26248A improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet FortiSandbox 5.0.0…Fortinet FortiSandbox
- CVE-2026-121530A improper authentication vulnerability in Fortinet FortiOS 7.6.0 through 7.6.6 may allow a remote authenticated attacker to gain improper…Fortinet FortiOS
- CVE-2026-121529A origin validation error vulnerability in Fortinet FortiClientMac 7.4.0 through 7.4.7, FortiClientWindows 7.4.0 through 7.4.7…Fortinet FortiClientMac · Fortinet FortiClientWindows +1
- CVE-2026-120811Use-After-Free in MongoDB Server Classic Query Engine Plan Cache Leads to Information Disclosure and Denial of ServiceMongoDB Server
- CVE-2026-121371Security Advisory 0218Arista Networks EOS
- CVE-2026-121370Security Advisory 0224Arista Networks EOS
- CVE-2026-121369Security Advisory 0225Arista Networks EOS
- CVE-2026-121368Security Advisory 0206Arista Networks EOS
- CVE-2026-121367Security Advisory 0220Arista Networks EOS
- CVE-2026-121295Security Advisory 0223Arista Networks EOS
- CVE-2026-121294Security Advisory 0223Arista Networks EOS
- CVE-2026-121293Security Advisory 0210Arista Networks EOS
- CVE-2026-121292Security Advisory 0222Arista Networks EOS
- CVE-2026-121291Security Advisory 0222Arista Networks EOS
- CVE-2026-121290Security Advisory 0209Arista Networks EOS
- CVE-2026-121289Security Advisory 0208Arista Networks EOS
- CVE-2026-121288Security Advisory 0221Arista Networks EOS
- CVE-2026-121287Security Advisory 0221Arista Networks EOS