CVE-2025-71397 - SurrealDB before 2.0.5, 2.1.x before 2.1.5, and 2.2.x before 2.2.2 allows authenticated users with O

CVE-2025-71396 - SurrealDB before 2.0.5, 2.1.x before 2.1.5, and 2.2.x before 2.2.2 does not enforce a default execut

CVE-2025-71395 - SurrealDB versions before 2.2.2 contain a memory exhaustion vulnerability in the string::replace fun

CVE-2025-71394 - SurrealDB versions before 2.2.2 contain a local file read vulnerability in the DEFINE ANALYZER state

CVE-2025-71393 - SurrealDB before 2.2.2 with scripting enabled fails to properly enforce recursion limits when native

CVE-2025-71392 - SurrealDB before 2.0.5, 2.1.x before 2.1.5, and 2.2.x before 2.2.2 fails to properly escape table an

CVE-2025-71391 - SurrealDB versions before 2.2.2 contain an uncaught exception vulnerability in the net module that a

CVE-2025-71390 - SurrealDB before 2.2.6, 2.3.6, and 2.1.8 (and 3.0.0-alpha.7 and earlier) fails to validate DNS-resol

CVE-2024-58370 - SurrealDB versions before 1.1.0 fail to enforce recursion depth limits when parsing nested SurrealQL

CVE-2024-58369 - SurrealDB versions before 1.1.1 fail to properly validate invocation of custom parameters and functi

CVE-2024-58368 - SurrealDB versions before 1.1.0 fail to properly parse the ID, DB, and NS headers in HTTP REST API r

CVE-2024-58367 - SurrealDB versions before 2.0.4 fail to properly enforce field permissions during SELECT, UPDATE, an

CVE-2024-58366 - SurrealDB before 1.1.1 contains a format string vulnerability in the rquickjs Exception::throw_type

CVE-2024-58365 - SurrealDB versions before 1.2.0 contain an uncaught exception vulnerability in the query executor wh

CVE-2024-58364 - SurrealDB versions before 1.2.1 contain an uncaught exception handling vulnerability in span renderi

CVE-2024-58363 - SurrealDB before 1.5.4 fails to properly validate authentication when a scope user switches database

CVE-2024-58362 - SurrealDB before 1.5.5 (and 2.0.0-beta before 2.0.0-beta.3) accepts an arbitrary object in the signi

CVE-2024-58361 - SurrealDB versions before 2.0.4 contain an uncaught exception handling vulnerability in the parser e

CVE-2024-58359 - SurrealDB versions before 2.1.0 contain a denial of service vulnerability in the sorting mechanism w

CVE-2024-58358 - SurrealDB versions before 2.1.0 contain a denial of service vulnerability in role conversion that al

CVE-2024-58357 - SurrealDB versions before 2.1.0 contain an uncaught exception vulnerability in the rand::time() func

CVE-2024-58356 - SurrealDB before 2.1.4 silently fails to overwrite table definitions when the DEFINE TABLE ... OVERW

CVE-2023-54366 - SurrealDB before 1.0.1 sets default table permissions to FULL instead of NONE, allowing SELECT, CREA

CVE-2026-9147 - uproot dynamically generates Python class source code from ROOT TStreamerInfo records in a file and

CVE-2026-59173 - Uncontrolled Resource Consumption vulnerability in Apache Traffic Server. This issue affects Apache

CVE-2026-16158 - Impact: @fastify/reply-from versions from 8.3.1 up to but not including 12.6.4 build the internal UR

CVE-2026-15631 - Impact: @fastify/http-proxy versions from 9.4.0 up to and including 11.5.0 fail to validate the reso

CVE-2026-16097 - A vulnerability was found in Shibby Tomato 1.28. This vulnerability affects the function sub_42537C

CVE-2026-16096 - A vulnerability has been found in Shibby Tomato 1.28 RT-N5x MIPSR2 Build 124. This affects the funct

CVE-2026-16095 - A flaw has been found in Shibby Tomato 1.28 RT-N5x MIPSR2 Build 124. Affected by this issue is the f

CVE-2026-16088 - A vulnerability was detected in halo-dev halo up to 2.24.2. Affected by this vulnerability is the fu

CVE-2026-16085 - A security vulnerability has been detected in Sipeed PicoClaw up to 0.2.9. Affected is the function

CVE-2026-47871 - VMware Avi Load Balancer contains a directory traversal vulnerability. Flaws in file path validation

CVE-2026-47870 - VMware Avi Load Balancer contains a privilege escalation vulnerability. A malicious authenticated us

CVE-2026-47869 - VMware Avi Load Balancer contains a remote code execution vulnerability. A malicious authenticated u

CVE-2026-47868 - VMware Avi Load Balancer contains a local privilege escalation vulnerability. A malicious user with

CVE-2026-47867 - VMware Avi Load Balancer contains a remote code execution vulnerability. A malicious user with netwo

CVE-2026-47866 - VMware Avi Load Balancer contains an authorization bypass vulnerability. A malicious actor on the ne

CVE-2026-47865 - VMware Avi Load Balancer contains an authentication bypass vulnerability. A malicious user with netw

CVE-2026-16084 - A weakness has been identified in Sipeed PicoClaw up to 0.2.9. This impacts the function web_fetch o

CVE-2026-16083 - A security flaw has been discovered in Sipeed PicoClaw up to 0.2.9. This affects the function webhoo

CVE-2026-16082 - A vulnerability was identified in Sipeed PicoClaw up to 0.2.9. The impacted element is the function

CVE-2026-16081 - A vulnerability was determined in Sipeed PicoClaw up to 0.2.9. The affected element is an unknown fu