CVE Database

A flaw in MongoDB’s X.509 cluster-membership authentication guard could allow a holder of a cluster-member certificate to gain elevated internal privileges when a specific deployment …

A flaw in MongoDB Server's user management commands may lead to incomplete cleanup of role authorization data when roles are dropped from a database. Due …

In MongoDB Server, an authenticated user with insert privileges on a collection could craft a command with specially constructed encryption-related parameters to redirect internal Queryable …

A flaw exists in the server-side SSPI Kerberos authentication handler on Windows Enterprise builds of MongoDB. When processing certain authentication requests, the server fails to …

A use-after-free issue exists in MongoDB’s SBE (Slot-Based Execution) implementation of a window function accumulator used by certain $setWindowFields aggregation pipelines. Under specific conditions, the …

SwarmKit's Cluster-API proxy can overwrite a forwarded client's TLS identity with an intermediary manager's identity. WithMetadataForwardTLSInfo replaces outgoing metadata with a copy of the incoming …

Moby's overlay network driver does not restore the iptables rules for encrypted overlay networks after firewalld deletes them. Unlike other Docker Engine networking components, the …

The Everest Forms plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 3.6.3 via the attach_entry_files() function. This …

Worklenz before 3.3.0 contains an SQL injection vulnerability in the reporting members endpoints that allows authenticated attackers to read arbitrary database contents by injecting SQL …

Arista C-260 and C-250 access points ship with fleet-wide static cryptographic keys used for firmware image verification and SSLP authentication. An attacker who is able …

In fill of dma.rs, there is a possible way to trigger an out of bounds stack read during direct memory access fills due to a …

In handle_rx_msg of tipc_virtio_dev, there is a possible Double Fetch TOCTOU due to Double Fetch. This could lead to local information disclosure with execution privileges …

In event_set_sub of acropora_event.c, there is a possible Logic error due to a logic error in the code. This could lead to local escalation of …

In multiple functions of arm-smmu-v3.c, there is a possible way to bypass direct memory access isolation via stale stream table entries due to a logic …

In multiple locations, there is a possible way to bypass key authorization policies during wrapped key import due to a logic error. This could lead …

In multiple functions of Android.bp, there is a possible way to bind to a privileged debug overlay service due to test or debugging code. This …

An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.7, FortiAnalyzer 7.2.0 …

In the Linux kernel, the following vulnerability has been resolved: inet: reject unhashed sockets during established lookups TCP established ehash lookups are lockless. The socket …

In the Linux kernel, the following vulnerability has been resolved: xen-netback: Zero out sring pointers on unmap If xenvif_map_frontend_data_rings() fails when a ring is already …

In the Linux kernel, the following vulnerability has been resolved: xen-netback: Fix XenBus connection failure cleanup xenvif_get_stats and xenvif_get_ethtool_stats capture vif->num_queues under rcu_read_lock. We need …

Heap-based buffer overflow in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack.

Access of resource using incompatible type ('type confusion') in Windows Shell allows an authorized attacker to elevate privileges locally.

Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network.

Out-of-bounds read in Windows VMSwitch allows an authorized attacker to elevate privileges locally.

Null pointer dereference in Windows USM Communication Manager allows an authorized attacker to elevate privileges locally.

Use after free in Winsock allows an authorized attacker to elevate privileges locally.

Release of invalid pointer or reference in Windows Performance Monitor allows an unauthorized attacker to execute code over a network.

Use after free in Windows PCI Bus Driver allows an unauthorized attacker to elevate privileges with a physical attack.

Out-of-bounds read in Secondary Logon allows an authorized attacker to disclose information locally.

Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network.

Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network.

Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network.

Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network.

Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network.

Use after free in Windows DNS allows an unauthorized attacker to deny service over an adjacent network.

Integer overflow or wraparound in HID Parser Library allows an unauthorized attacker to elevate privileges with a physical attack.

Out-of-bounds write in Windows PCI Bus Driver allows an unauthorized attacker to elevate privileges with a physical attack.

Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network.

Integer overflow or wraparound in HID Parser Library allows an unauthorized attacker to elevate privileges with a physical attack.

Use after free in Windows Credential User Interface allows an authorized attacker to elevate privileges locally.

Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network.

Out-of-bounds read in DNS Server allows an unauthorized attacker to deny service over a network.

Integer overflow or wraparound in HID Parser Library allows an unauthorized attacker to elevate privileges with a physical attack.

Use after free in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges locally.

Out-of-bounds read in Windows DNS allows an unauthorized attacker to disclose information over a network.

Use after free in Windows NetBIOS allows an authorized attacker to elevate privileges locally.

Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network.

Double free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

Null pointer dereference in Windows Hyper-V allows an authorized attacker to deny service locally.

Improper authorization in Windows Task Scheduler allows an authorized attacker to elevate privileges locally.