Known vulnerabilities in Parse Server - page 4

Vendor: Parse Community
Software: Parse Server
Software CPE: cpe:2.3:a:parse_community:parse_server:*:*:*:*:*:*:*:*
Website: https://parseplatform.org/
Total vulnerabilities: 114
Public exploits: 0
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Parse Server Parse Server is affected by 114 known vulnerabilities: 20 high, 61 medium, 33 low Critical High Medium Low

Vulnerabilities (114)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU125008 - Incorrect Authorization
CVE-2026-33527		 CWE-863 Low
No
No
 8.6.57, 9.6.0 alpha.48 06.04.2026 SB2026040747
#VU125009 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-33539		 CWE-89 Low
No
No
 8.6.59, 9.6.0 alpha.53 06.04.2026 SB2026040746
#VU125010 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2026-33624		 CWE-367 Low
No
No
 8.6.60, 9.6.0 alpha.54 06.04.2026 SB2026040745
#VU125011 - Information Exposure Through Timing Discrepancy
CVE-2026-39321		 CWE-208 Low
No
No
 8.6.74, 9.8.0 alpha.6 06.04.2026 SB2026040744
#VU124820 - Interpretation Conflict
CVE-2026-35200		 CWE-436 Low
No
No
 8.6.73, 9.7.1 alpha.4 02.04.2026 SB2026040229
#VU124819 - Improper Authorization
CVE-2026-34784		 CWE-285 Medium
No
No
 8.6.71, 9.7.1 alpha.1 02.04.2026 SB2026040228
#VU124685 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2026-34224		 CWE-367 Low
No
No
 8.6.64, 9.7.0 alpha.8 30.03.2026 SB2026033041
#VU124684 - Origin Validation Error
CVE-2026-34373		 CWE-346 Medium
No
No
 8.6.66, 9.7.0 alpha.10 30.03.2026 SB2026033040
#VU124679 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-34363		 CWE-362 Medium
No
No
 8.6.65, 9.7.0 alpha.9 30.03.2026 SB2026033039
#VU124676 - Incorrect Authorization
CVE-2026-34532		 CWE-863 High
No
No
 8.6.67, 9.7.0 alpha.11 30.03.2026 SB2026033038
#VU124675 - Inefficient Algorithmic Complexity
CVE-2026-34573		 CWE-407 Medium
No
No
 8.6.68, 9.7.0 alpha.12 30.03.2026 SB2026033037
#VU124674 - Incorrect Comparison
CVE-2026-34574		 CWE-697 Medium
No
No
 8.6.69, 9.7.0 alpha.14 30.03.2026 SB2026033036
#VU124673 - Exposure of sensitive information to an unauthorized actor
CVE-2026-34215		 CWE-200 Low
No
No
 8.6.63, 9.7.0 alpha.7 30.03.2026 SB2026033035
#VU124672 - Type confusion
CVE-2026-34595		 CWE-843 Medium
No
No
 8.6.70, 9.7.0 alpha.16 30.03.2026 SB2026033034
#VU124170 - Uncontrolled Recursion
CVE-2026-32944		 CWE-674 Medium
No
No
 8.6.45, 9.6.0 alpha.21 20.03.2026 SB2026032047
#VU124169 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2026-32943		 CWE-367 Low
No
No
 8.6.48, 9.6.0 alpha.28 20.03.2026 SB2026032046
#VU124168 - Improper input validation
CVE-2026-32770		 CWE-20 Medium
No
No
 8.6.43, 9.6.0 alpha.19 20.03.2026 SB2026032045
#VU124167 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2026-32886		 CWE-1321 Medium
No
No
 8.6.47, 9.6.0 alpha.24 20.03.2026 SB2026032044
#VU124166 - Improperly Controlled Modification of Dynamically-Determined Object Attributes
CVE-2026-32742		 CWE-915 Medium
No
No
 8.6.42, 9.6.0 alpha.17 20.03.2026 SB2026032043
#VU124164 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2026-32878		 CWE-1321 Medium
No
No
 8.6.44, 9.6.0 alpha.20 20.03.2026 SB2026032042


Showing elements 61 - 80 out of 114