Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
Assessment
Vulnerability Intelligence
Exploits
Alerts
Datasets
MCP
White Label
Security Automation SDK
MCP for AI Agents
Plans & Pricing
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

61707 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)•added 2026/09/15 12:00 a.m.•11 views

CVE-2026-55225: Improper Privilege Management

Strimzi provides a way to run an Apache Kafka cluster on Kubernetes or OpenShift in various deployment configurations. In Strimzi 1.0.0 and earlier, an attacker who can create a Kafka custom resource can set Kafka.spec.entityOperator watchedNamespace to a target namespace, causing the Cluster...

8CVSS5.7AI score0.00295EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)•added 2026/09/15 12:00 a.m.•11 views

CVE-2026-55226: Improper Privilege Management

Strimzi provides a way to run an Apache Kafka cluster on Kubernetes or OpenShift in various deployment configurations. In Strimzi 1.0.0 and earlier, deploying only the Topic Operator or only the User Operator through the Kafka custom resource leaves the Entity Operator ServiceAccount with RBAC...

5.4CVSS5.8AI score0.0025EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies•added 2026/09/15 12:00 a.m.•7 views

PT-2026-98429

Multiple security vulnerabilities affect the minio-operator package. Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. See references for individual vulnerability details...

10CVSS5.8AI score0.02326EPSS
SaveExploits5References99
Positive Technologies
Positive Technologies•added 2026/09/15 12:00 a.m.•4 views

PT-2026-98423

Multiple security vulnerabilities affect the minio-operator package. Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. See references for individual vulnerability details...

10CVSS5.8AI score0.02326EPSS
SaveExploits4References100
Positive Technologies
Positive Technologies•added 2026/09/15 12:00 a.m.•5 views

PT-2026-98425

Multiple security vulnerabilities affect the minio-operator package. Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. See references for individual vulnerability details...

9.8CVSS5.8AI score0.02326EPSS
SaveExploits3References107
EUVD
EUVD•added 2026/09/14 7:48 p.m.•20 views

EUVD-2026-77794

IBM DataStage on Cloud Pak for Data 5.4.0.0 IBM DataStage PxXMLInput operator could allow a remote authenticated attacker to obtain sensitive information due to an XML external entity XXE injection...

7.7CVSS5.8AI score0.00343EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment•added 2026/09/14 7:48 p.m.•13 views

CVE-2026-16432 DataStage on Cloud Pak for Data has several vulnerabilities due to open source software

IBM DataStage on Cloud Pak for Data 5.4.0.0 IBM DataStage PxXMLInput operator could allow a remote authenticated attacker to obtain sensitive information due to an XML external entity XXE injection...

7.7CVSS6AI score0.00343EPSS
SaveExploits0References1
Cvelist
Cvelist•added 2026/09/14 7:48 p.m.•48 views

CVE-2026-16432 DataStage on Cloud Pak for Data has several vulnerabilities due to open source software

IBM DataStage on Cloud Pak for Data 5.4.0.0 IBM DataStage PxXMLInput operator could allow a remote authenticated attacker to obtain sensitive information due to an XML external entity XXE injection...

7.7CVSS0.00343EPSS
SaveExploits0References1
CVE
CVE•added 2026/09/14 7:48 p.m.•33 views

CVE-2026-16432

IBM DataStage on Cloud Pak for Data 5.4.0.0 is vulnerable to XML External Entity (XXE) injection in the PxXMLInput operator (CWE-611). A remote authenticated attacker can exploit this flaw to obtain sensitive information, with the scope of impact extending beyond the vulnerable component (CVSS 3....

7.7CVSS6AI score0.00343EPSS
SaveExploits0References1Affected Software1
NVD
NVD•added 2026/09/14 6:17 p.m.•19 views

CVE-2026-55253

LangChain MongoDB provides integrations between MongoDB, Atlas, LangChain, and LangGraph. Prior to langgraph-checkpoint-mongodb 0.3.0 and langgraph-store-mongodb 0.4.0, MongoDBSaver.list, MongoDBSaver.alist, and MongoDBStore.search incorporate filter dictionaries into MongoDB queries without...

7.7CVSS0.00531EPSS
SaveExploits0References7
EUVD
EUVD•added 2026/09/14 5:09 p.m.•25 views

EUVD-2026-77674

LangChain MongoDB provides integrations between MongoDB, Atlas, LangChain, and LangGraph. Prior to langgraph-checkpoint-mongodb 0.3.0 and langgraph-store-mongodb 0.4.0, MongoDBSaver.list, MongoDBSaver.alist, and MongoDBStore.search incorporate filter dictionaries into MongoDB queries without...

7.7CVSS5.9AI score0.00531EPSS
SaveExploits0References7
Cvelist
Cvelist•added 2026/09/14 5:09 p.m.•49 views

CVE-2026-55253 LangChain MongoDB: NoSQL Operator Injection in MongoDBSaver.list() leading to cross-tenant data exposure

LangChain MongoDB provides integrations between MongoDB, Atlas, LangChain, and LangGraph. Prior to langgraph-checkpoint-mongodb 0.3.0 and langgraph-store-mongodb 0.4.0, MongoDBSaver.list, MongoDBSaver.alist, and MongoDBStore.search incorporate filter dictionaries into MongoDB queries without...

7.7CVSS0.00531EPSS
SaveExploits0References7
CVE
CVE•added 2026/09/14 5:09 p.m.•145 views

CVE-2026-55253

A NoSQL injection vulnerability in the langgraph-checkpoint-mongodb (< 0.3.0) and langgraph-store-mongodb (

7.7CVSS5.9AI score0.00531EPSS
SaveExploits0References7
Vulnrichment
Vulnrichment•added 2026/09/14 5:09 p.m.•21 views

CVE-2026-55253 LangChain MongoDB: NoSQL Operator Injection in MongoDBSaver.list() leading to cross-tenant data exposure

LangChain MongoDB provides integrations between MongoDB, Atlas, LangChain, and LangGraph. Prior to langgraph-checkpoint-mongodb 0.3.0 and langgraph-store-mongodb 0.4.0, MongoDBSaver.list, MongoDBSaver.alist, and MongoDBStore.search incorporate filter dictionaries into MongoDB queries without...

7.7CVSS5.9AI score0.00531EPSS
SaveExploits0References7
NVD
NVD•added 2026/09/14 4:17 p.m.•19 views

CVE-2026-47701

The OpenTelemetry Operator is a Kubernetes Operator for the OpenTelemetry Collector. Prior to 0.152.0, cmd/otel-allocator TargetAllocator instances with targetAllocator.prometheusCR.enabled set to true preserve a selected ServiceMonitor endpoint's bearerTokenFile value as...

7.7CVSS0.0046EPSS
SaveExploits0References4
osv-cve
osv-cve•added 2026/09/14 3:32 p.m.•19 views

CVE-2026-47701 OpenTelemetry Operator: ServiceMonitor bearerTokenFile reads arbitrary local file and sends contents as bearer auth

The OpenTelemetry Operator is a Kubernetes Operator for the OpenTelemetry Collector. Prior to 0.152.0, cmd/otel-allocator TargetAllocator instances with targetAllocator.prometheusCR.enabled set to true preserve a selected ServiceMonitor endpoint's bearerTokenFile value as...

7.7CVSS5.7AI score
SaveExploits0References6
Vulnrichment
Vulnrichment•added 2026/09/14 3:32 p.m.•12 views

CVE-2026-47701 OpenTelemetry Operator: ServiceMonitor bearerTokenFile reads arbitrary local file and sends contents as bearer auth

The OpenTelemetry Operator is a Kubernetes Operator for the OpenTelemetry Collector. Prior to 0.152.0, cmd/otel-allocator TargetAllocator instances with targetAllocator.prometheusCR.enabled set to true preserve a selected ServiceMonitor endpoint's bearerTokenFile value as...

7.7CVSS8.1AI score0.0046EPSS
SaveExploits0References4
Mend
Mend•added 2026/09/14 3:32 p.m.•12 views

CVE-2026-47701

The OpenTelemetry Operator is a Kubernetes Operator for the OpenTelemetry Collector. Prior to 0.152.0, cmd/otel-allocator TargetAllocator instances with targetAllocator.prometheusCR.enabled set to true preserve a selected ServiceMonitor endpoint's bearerTokenFile value as...

8.3CVSS8.2AI score0.0046EPSS
SaveExploits0References7
EUVD
EUVD•added 2026/09/14 3:32 p.m.•18 views

EUVD-2026-77578

The OpenTelemetry Operator is a Kubernetes Operator for the OpenTelemetry Collector. Prior to 0.152.0, cmd/otel-allocator TargetAllocator instances with targetAllocator.prometheusCR.enabled set to true preserve a selected ServiceMonitor endpoint's bearerTokenFile value as...

7.7CVSS8.2AI score0.0046EPSS
SaveExploits0References4
Cvelist
Cvelist•added 2026/09/14 3:32 p.m.•46 views

CVE-2026-47701 OpenTelemetry Operator: ServiceMonitor bearerTokenFile reads arbitrary local file and sends contents as bearer auth

The OpenTelemetry Operator is a Kubernetes Operator for the OpenTelemetry Collector. Prior to 0.152.0, cmd/otel-allocator TargetAllocator instances with targetAllocator.prometheusCR.enabled set to true preserve a selected ServiceMonitor endpoint's bearerTokenFile value as...

7.7CVSS0.0046EPSS
SaveExploits0References4
Rows per page
Query Builder