Search CVE reports


Toggle filters

31 – 40 of 40644 results

Status is adjusted based on your filters.


CVE-2026-50581

Medium priority
Needs evaluation

[Unknown description]

1 affected package

mbedtls

Package 24.04 LTS
mbedtls Needs evaluation
Show less packages

CVE-2026-50580

Medium priority
Needs evaluation

[Unknown description]

1 affected package

mbedtls

Package 24.04 LTS
mbedtls Needs evaluation
Show less packages

CVE-2026-50579

Medium priority
Needs evaluation

[Unknown description]

1 affected package

mbedtls

Package 24.04 LTS
mbedtls Needs evaluation
Show less packages

CVE-2026-49300

Medium priority
Needs evaluation

[Unknown description]

1 affected package

mbedtls

Package 24.04 LTS
mbedtls Needs evaluation
Show less packages

CVE-2026-35336

Medium priority
Needs evaluation

[Unknown description]

1 affected package

mbedtls

Package 24.04 LTS
mbedtls Needs evaluation
Show less packages

CVE-2026-25832

Medium priority
Needs evaluation

[Unknown description]

1 affected package

mbedtls

Package 24.04 LTS
mbedtls Needs evaluation
Show less packages

CVE-2025-50327

Medium priority

Not in release

An issue in Franco Corbelli ZPAQFRANZ v.61.3 and before allows a remote attacker to escalate privileges and execute arbitrary code via a bypass of the Mark-of-the-Web protection mechanism

1 affected package

zpaqfranz

Package 24.04 LTS
zpaqfranz Not in release
Show less packages

CVE-2026-9737

Medium priority

Not in release

During query planning when reading the sort pattern in raw BSONObj form, in some places we don’t explicitly handle the meta expression case. This may lead to incorrect transformations leading to invariant failure.

1 affected package

mongodb

Package 24.04 LTS
mongodb Not in release
Show less packages

CVE-2026-13078

Medium priority

Not in release

A vulnerability was discovered in MongoDB Server where the server-side MozJS scripting engine unconditionally registered a module loading hook that enables JavaScript calls to read arbitrary files from the host filesystem using...

1 affected package

mongodb

Package 24.04 LTS
mongodb Not in release
Show less packages

CVE-2026-13074

Medium priority

Not in release

An unauthenticated remote client can cause excessive CPU consumption on a MongoDB server by sending a specific combination of parameters to the awaitable hello command in exhaust mode. The server's handling of this combination...

1 affected package

mongodb

Package 24.04 LTS
mongodb Not in release
Show less packages