CVE-2024-58365Medium· 6.5▾ SunlitSurrealDB versions before 1.2.0 contain an uncaught exception vulnerability in the query executor when processing calls to nonexistent built-in functions. Authorized clients can craft pre-parsed queries invoking nonexistent functions to …
▾ Sunlit zone — Low / medium · no exploitation signal
impact 35.8 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Aug 3.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
0.2%
0.2% → 0.4%
SurrealDB versions before 1.2.0 contain an uncaught exception vulnerability in the query executor when processing calls to nonexistent built-in functions. Authorized clients can craft pre-parsed queries invoking nonexistent functions to trigger a panic that crashes the server.
Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-44001High· 8.6vm2 is an open source vm/sandbox for Node.js
CVE-2026-119188High· 7.5Forge: Denial of service in TLS record processing via a record interleaved with a fragmented handshake message
CVE-2026-111107High· 8.7Fireware OS NULL Pointer Dereference in Management Interface Allows Unauthenticated Denial of Service
CVE-2026-117541Medium· 5.3svg-sanitizer 0.11.0 before 1.1.0 Uncaught LogicException DoS via sanitize()
CVE-2026-116589High· 8.2Datadog dd-trace-py: IAST instrumentation can lead to application DOS
CVE-2026-116173High· 7.5vLLM from 0.22.0 before 0.24.0 contains a denial of service vulnerability that allows remote attackers to terminate EngineCore by bypassi…