parse-community Latest High & Critical Vulnerabilities
Latest High & Critical vulnerabilities published by parse-community
Vulnerability Published:
🗓️ Published
- Anytime
Sort By:
🗓️ Published Date
- Descending
SQL Injection Vulnerability Affects Parse Server Prior to 6.5.7 and 7.1.0
CVE-2024-39309Parse-communityParse-server9.8CRITICALSecurity Advisory: Injection Vulnerability in Parse Server Prior to Versions 6.5.5 and 7.0.0-alpha.29
CVE-2024-29027Parse-communityParse-server9.1CRITICALSQL Injection Vulnerability in Parse Server for Node.js / Express
CVE-2024-27298Parse-communityParse-server10CRITICALParse Server may crash when uploading file without extension
CVE-2023-46119Parse-communityParse-server7.5HIGHTrigger `beforeFind` not invoked in internal query pipeline in parse-server
CVE-2023-41058Parse-communityParse-server7.5HIGHParse Server vulnerable to remote code execution via MongoDB BSON parser through prototype pollution
CVE-2023-36475Parse-communityParse-server9.8CRITICALInvalid push request payload crashes Parse Server
CVE-2023-32688parse-communityparse-server-push-adapter7.5HIGHParse Server is vulnerable to authentication bypass via spoofing
CVE-2023-22474Parse-communityParse-server8.7HIGHParse Server vulnerable to Remote Code Execution via prototype pollution in MongoDB BSON parser
CVE-2022-39396Parse-communityParse-serverEPSS 37%9.8CRITICALParse Server Prototype pollution and Injection via Cloud Code Webhooks or Cloud Code Triggers
CVE-2022-41878Parse-communityParse-server7.2HIGHParse Server subject to Prototype pollution via Cloud Code Webhooks
CVE-2022-41879Parse-communityParse-server7.2HIGHParse Server crashes when receiving file download request with invalid byte range
CVE-2022-39313Parse-communityParse-server7.5HIGHParse Server vulnerable to brute force guessing of user sensitive data via search patterns
CVE-2022-36079Parse-communityParse-server8.6HIGHProtected fields exposed via LiveQuery in parse-server
CVE-2022-31112Parse-communityParse-server8.2HIGHInvalid file request can crashe parse-server
CVE-2022-31089Parse-communityParse-server7.5HIGHAuthentication bypass in Parse Server Apple Game Center auth adapter
CVE-2022-31083Parse-communityParse-server8.6HIGHAuthentication bypass and denial of service (DoS) vulnerabilities in Apple Game Center auth adapter
CVE-2022-24901Parse-communityParse-server7.5HIGHCommand Injection in Parse server
CVE-2022-24760Parse-communityParse-server👾🟡EPSS 58%10CRITICALLiveQuery publishes user session tokens
CVE-2021-41109Parse-communityParse-server7.5HIGHCrash server with query parameter
CVE-2021-39187Parse-communityParse-server7.5HIGHParse Server stores password in plain text
CVE-2020-26288Parse-communityParse-server7.7HIGHInformation disclosure in parse-server
CVE-2020-5251Parse-communityParse-server7.7HIGH