Known vulnerabilities in Parse Server - page 6

Vendor: Parse Community
Software: Parse Server
Software CPE: cpe:2.3:a:parse_community:parse_server:*:*:*:*:*:*:*:*
Website: https://parseplatform.org/
Total vulnerabilities: 114
Public exploits: 0
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Parse Server Parse Server is affected by 114 known vulnerabilities: 20 high, 61 medium, 33 low Critical High Medium Low

Vulnerabilities (114)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU152830 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-109954		 CWE-362 Medium
No
No
 8.6.96, 9.10.2 alpha.5 29.09.2026 SB2026092959
#VU152595 - Uncaught Exception
CVE-2026-109301		 CWE-248 Medium
No
No
 8.6.95, 9.10.2 alpha.3 28.09.2026 SB20260928326
#VU152594 - Authorization Bypass Through User-Controlled Key
CVE-2026-109303		 CWE-639 Low
No
No
 8.6.93, 9.10.1 alpha.13 28.09.2026 SB20260928325
#VU152593 - Incorrect Authorization
CVE-2026-109302		 CWE-863 Medium
No
No
 8.6.94, 9.10.1 alpha.14 28.09.2026 SB20260928324
#VU151612 - Information Exposure Through an Error Message
CVE-2026-105828		 CWE-209 Medium
No
No
 8.6.92, 9.10.1 alpha.12 22.09.2026 SB2026092251
#VU135973 - Unrestricted Upload of File with Dangerous Type
CVE-2026-61448		 CWE-434 Low
No
No
 8.6.84, 9.10.0 alpha.2 30.06.2026 SB2026063054
#VU124965 - Inclusion of Functionality from Untrusted Control Sphere
CVE-2021-47986		 CWE-829 Low
No
No
 4.10.0 06.04.2026 SB2026040790
#VU64723 - Improper Certificate Validation
CVE-2022-31083		 CWE-295 High
No
No
 4.10.11 27.06.2022 SB2022062736
#VU61372 - Improper Control of Generation of Code ('Code Injection')
 CWE-94 High
No
No
 5.0.0 15.03.2022 SB2022031509
#VU61288 - Command injection
 CWE-77 High
No
No
 4.10.7 14.03.2022 SB2022031417
#VU57060 - Exposure of sensitive information to an unauthorized actor
CVE-2021-41109		 CWE-200 Medium
No
No
 4.10.4 05.10.2021 SB2021100512
#VU56933 - Exposure of sensitive information to an unauthorized actor
 CWE-200 Low
No
No
 4.10.4 30.09.2021 SB2021093003
#VU56141 - Exposure of sensitive information to an unauthorized actor
CVE-2021-39138		 CWE-200 Medium
No
No
 4.5.1 27.08.2021 SB2021082712
#VU48082 - Operation on a Resource after Expiration or Release
CVE-2020-15270		 CWE-672 Low
No
No
 4.4.0 23.10.2020 SB2020110217
SB2020110218


Showing elements 101 - 120 out of 114