Known vulnerabilities in Parse Server - page 3

Vendor: Parse Community
Software: Parse Server
Software CPE: cpe:2.3:a:parse_community:parse_server:*:*:*:*:*:*:*:*
Website: https://parseplatform.org/
Total vulnerabilities: 114
Public exploits: 0
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Parse Server Parse Server is affected by 114 known vulnerabilities: 20 high, 61 medium, 33 low Critical High Medium Low

Vulnerabilities (114)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU124988 - Improper Control of Interaction Frequency
CVE-2026-30972		 CWE-799 Medium
No
No
 8.6.23, 9.5.2 alpha.10 06.04.2026 SB2026040767
#VU124989 - Incorrect Authorization
CVE-2026-30947		 CWE-863 Medium
No
No
 8.6.16, 9.5.2 alpha.3 06.04.2026 SB2026040766
#VU124990 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-30948		 CWE-79 Low
No
No
 8.6.17, 9.5.2 alpha.4 06.04.2026 SB2026040765
#VU124991 - Improper Authentication
CVE-2026-30949		 CWE-287 Medium
No
No
 8.6.18, 9.5.2 alpha.5 06.04.2026 SB2026040764
#VU124992 - Improper Access Control
CVE-2026-30962		 CWE-284 Low
No
No
 8.6.19, 9.5.2 alpha.6 06.04.2026 SB2026040763
#VU124993 - Improper Neutralization of Special Elements in Data Query Logic
CVE-2026-30941		 CWE-943 Medium
No
No
 8.6.14, 9.5.2 alpha.1 06.04.2026 SB2026040762
#VU124994 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-31868		 CWE-79 Medium
No
No
 8.6.30, 9.6.0 alpha.4 06.04.2026 SB2026040761
#VU124995 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-31871		 CWE-89 High
No
No
 8.6.31, 9.6.0 alpha.5 06.04.2026 SB2026040760
#VU124996 -
CVE-2026-31872		 Medium
No
No
 8.6.32, 9.6.0 alpha.6 06.04.2026 SB2026040759
#VU124997 - Operation on a Resource after Expiration or Release
CVE-2026-31875		 CWE-672 Medium
No
No
 8.6.33, 9.6.0 alpha.7 06.04.2026 SB2026040758
#VU124998 - Observable Response Discrepancy
CVE-2026-31901		 CWE-204 Medium
No
No
 8.6.34, 9.6.0 alpha.8 06.04.2026 SB2026040757
#VU124999 - Exposure of sensitive information to an unauthorized actor
CVE-2026-32098		 CWE-200 Medium
No
No
 8.6.35, 9.6.0 alpha.9 06.04.2026 SB2026040756
#VU125000 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-32234		 CWE-89 Low
No
No
 8.6.36, 9.6.0 alpha.10 06.04.2026 SB2026040755
#VU125001 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-32242		 CWE-362 Medium
No
No
 8.6.37, 9.6.0 alpha.11 06.04.2026 SB2026040754
#VU125002 - Improper Neutralization of Special Elements in Data Query Logic
CVE-2026-32248		 CWE-943 High
No
No
 8.6.38, 9.6.0 alpha.12 06.04.2026 SB2026040753
#VU125003 - Function Call With Incorrect Order of Arguments
CVE-2026-32269		 CWE-683 Medium
No
No
 8.6.39, 9.6.0 alpha.13 06.04.2026 SB2026040752
#VU125004 - Missing Authentication for Critical Function
CVE-2026-32594		 CWE-306 Medium
No
No
 8.6.40, 9.6.0 alpha.14 06.04.2026 SB2026040751
#VU125005 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-32728		 CWE-79 Low
No
No
 8.6.41, 9.6.0 alpha.15 06.04.2026 SB2026040750
#VU125006 - Uncontrolled Recursion
CVE-2026-33498		 CWE-674 Medium
No
No
 8.6.55, 9.6.0 alpha.44 06.04.2026 SB2026040749
#VU125007 - Uncontrolled Recursion
CVE-2026-33508		 CWE-674 Medium
No
No
 8.6.56, 9.6.0 alpha.45 06.04.2026 SB2026040748


Showing elements 41 - 60 out of 114