2026-08-12 归档

今日共收录 1910 条安全情报,包含 1065 个 CVE,437 篇安全通告,以及 97 篇研究论文。

← 返回归档列表
安全公告2026-08-11 发布INFO

An issue in MongoDB Server could allow an authenticated user with direct network access to a...

CVE-2026-18709

An issue in MongoDB Server could allow an authenticated user with direct network access to a shard to improperly commit

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-11 发布INFO

An issue in MongoDB Server's Atlas Vector Search feature could allow an authenticated user with...

CVE-2026-18705

An issue in MongoDB Server's Atlas Vector Search feature could allow an authenticated user with read access to one view

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-11 发布INFO

An issue in MongoDB Server's JavaScript scripting engine could allow an authenticated user with...

CVE-2026-18708

An issue in MongoDB Server's JavaScript scripting engine could allow an authenticated user with write privileges to caus

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-11 发布INFO

NetBox 4.5.8 contains an ORM injection vulnerability that allows authenticated attackers,...

CVE-2026-69117

NetBox 4.5.8 contains an ORM injection vulnerability that allows authenticated attackers, including those with read-only

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-11 发布INFO

An issue in MongoDB Server could allow an authenticated user, including one with no assigned...

CVE-2026-18707

An issue in MongoDB Server could allow an authenticated user, including one with no assigned privileges, to cause the se

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-11 发布INFO

An issue in MongoDB Server could allow an authenticated user with a limited database-scoped role...

CVE-2026-18698

An issue in MongoDB Server could allow an authenticated user with a limited database-scoped role to perform an action ag

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-11 发布INFO

An issue in MongoDB Server's geospatial validation could allow an authenticated user with write...

CVE-2026-18700

An issue in MongoDB Server's geospatial validation could allow an authenticated user with write privileges to cause an i

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-11 发布INFO

An issue in MongoDB Server's query planner could allow an authenticated user with read-level...

CVE-2026-18699

An issue in MongoDB Server's query planner could allow an authenticated user with read-level privileges to cause the ser

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-11 发布INFO

An issue in MongoDB Server's query subsystem could allow an authenticated user with read...

CVE-2026-18701

An issue in MongoDB Server's query subsystem could allow an authenticated user with read privileges to cause the server

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-11 发布INFO

An issue in MongoDB Server could allow an authenticated user with limited, database-scoped...

CVE-2026-18702

An issue in MongoDB Server could allow an authenticated user with limited, database-scoped privileges to modify diagnost

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-11 发布INFO

An issue in MongoDB Server could allow a party with a valid client certificate and a...

CVE-2026-18703

An issue in MongoDB Server could allow a party with a valid client certificate and a corresponding user account to authe

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-11 发布INFO

An issue in MongoDB Server's aggregation framework could allow an authenticated user with only...

CVE-2026-18704

An issue in MongoDB Server's aggregation framework could allow an authenticated user with only read privileges to perfor

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-11 发布INFO

An issue in MongoDB Server's intra-cluster connection setup could allow a party with suitable...

CVE-2026-18691

An issue in MongoDB Server's intra-cluster connection setup could allow a party with suitable network access to influenc

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-11 发布INFO

An issue in MongoDB Server's applyOps command could allow an authenticated user with specific non...

CVE-2026-18696

An issue in MongoDB Server's applyOps command could allow an authenticated user with specific non-default privileges to

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-11 发布INFO

An issue in MongoDB Server's handling of certain query predicates against time-series collections...

CVE-2026-18695

An issue in MongoDB Server's handling of certain query predicates against time-series collections with a metaField could

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-11 发布INFO

An issue in MongoDB Server's handling of timeseries bucket lifecycle could allow an authenticated...

CVE-2026-18692

An issue in MongoDB Server's handling of timeseries bucket lifecycle could allow an authenticated user with write privil

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-11 发布INFO

An issue in MongoDB Server's geospatial query processing could allow an authenticated user with...

CVE-2026-18694

An issue in MongoDB Server's geospatial query processing could allow an authenticated user with write privileges to caus

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-11 发布INFO

An issue in MongoDB Server's handling of timeseries collections could allow an authenticated user...

CVE-2026-18693

An issue in MongoDB Server's handling of timeseries collections could allow an authenticated user with write privileges

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-11 发布INFO

An issue in MongoDB Server could allow an authenticated user with a limited database-scoped role...

CVE-2026-18690

An issue in MongoDB Server could allow an authenticated user with a limited database-scoped role to perform an action ag

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-11 发布INFO

An issue in MongoDB Server's aggregation framework could allow an authenticated user to trigger...

CVE-2026-18688

An issue in MongoDB Server's aggregation framework could allow an authenticated user to trigger an out-of-bounds memory

历史摘要 · 未重新核验 · GitHub Advisory