CVE Database
8818 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-114654 | MEDIUM | 6.5 | A numeric-type conversion flaw in the BSON handling library of the MongoDB C# Driver allows an out-o… |
T1078
T1548
|
|
2026-10-22 |
| CVE-2026-114653 | MEDIUM | 6.5 | A client-side encryption schema construction component in the MongoDB C# Driver places caller-suppli… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-114652 | MEDIUM | 6.5 | A data-query-logic neutralization weakness in the update-statement construction component of the Mon… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-114651 | MEDIUM | 4.0 | A memory-handling weakness in the BSON deserialization component of the MongoDB C# Driver may cause … |
T1078
T1548
|
|
2026-10-22 |
| CVE-2026-114650 | MEDIUM | 5.9 | A flaw in the client-side encryption support of the MongoDB .NET/C# driver can cause data designated… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-114649 | MEDIUM | 6.8 | The MongoDB C# Driver compares TLS client certificates by issuer and serial number only when decidin… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-114647 | MEDIUM | 4.3 | The MongoDB C# Driver does not reject replacement documents whose top-level field names begin with a… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-114646 | MEDIUM | 6.5 | A data-validation flaw exists in the BSON handling and binary serialization path of the MongoDB C# D… |
T1078
T1548
|
|
2026-10-22 |
| CVE-2026-114645 | MEDIUM | 5.2 | A 32-bit integer wraparound in the MongoDB C Driver's Windows-only Kerberos/SSPI authentication code… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-114644 | MEDIUM | 5.9 | The MongoDB C# Driver's BSON library contains an uncontrolled resource consumption weakness in its d… |
T1190
T1059
+1
|
|
2026-10-22 |
| CVE-2026-114643 | MEDIUM | 5.4 | The MongoDB C# Driver writes GeoJSON extra members without checking whether their names collide with… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-113876 | MEDIUM | 4.3 | SmileCDR HAPI FHIR does not correctly check authorization for conditional create actions. A user wit… |
T1190
T1059
+1
|
|
2026-10-22 |
| CVE-2026-77157 | MEDIUM | 6.4 | ast-cli downloads two helper binaries, the Vorpal ASCA real-time engine and the SCA Resolver, from "… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-77156 | MEDIUM | 6.4 | Incomplete validation of extracted archive entry paths in ast-cli's tar extraction logic on Linux an… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-54532 | MEDIUM | 6.9 | CloudPirates Open Source Helm Charts is a collection of Helm charts. Prior to commit 271d415, pull_r… |
T1190
T1059
+1
|
|
2026-10-22 |
| CVE-2026-114610 | MEDIUM | 6.5 | fpdf2 is a PDF creation library for Python. From 2.5.0 until 2.8.8, fpdf2's SVGObject.build_xref() p… |
T1190
T1059
+1
|
|
2026-10-22 |
| CVE-2026-114609 | MEDIUM | 5.8 | fpdf2 is a PDF creation library for Python. Prior to 2.8.8, fpdf2's shared image loader automaticall… |
T1190
T1059
+1
|
|
2026-10-22 |
| CVE-2026-108360 | MEDIUM | 6.4 | PhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files. Prior to 1.30.7, 2.1… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-114603 | MEDIUM | 5.3 | OpenTelemetry Python provides the Python API and SDK for OpenTelemetry. Prior to 1.45.1, the opentel… |
T1078
T1548
|
|
2026-10-22 |
| CVE-2026-114515 | MEDIUM | 6.5 | OCO-Server is a self-hosted endpoint management application for computer inventory, software deploym… |
T1190
T1059
+1
|
|
2026-10-22 |