2026-08-12 归档

今日共收录 1910 条安全情报,包含 1065 个 CVE,437 篇安全通告,以及 97 篇研究论文。

← 返回归档列表
漏洞预警2026-08-11 发布INFO

An issue in MongoDB Server's $graphLookup aggregation stage could allow an authenticated user able to issue aggregation and memory-management commands to cause an internal refer...

CVE-2026-18706

An issue in MongoDB Server's $graphLookup aggregation stage could allow an authenticated user able to issue aggregation

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

An issue in MongoDB Server's Atlas Vector Search feature could allow an authenticated user with read access to one view to retrieve documents from a different, protected view ov...

CVE-2026-18705

An issue in MongoDB Server's Atlas Vector Search feature could allow an authenticated user with read access to one view

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

An issue in MongoDB Server's aggregation framework could allow an authenticated user with only read privileges to perform write operations against collections they should not be...

CVE-2026-18704

An issue in MongoDB Server's aggregation framework could allow an authenticated user with only read privileges to perfor

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

An issue in MongoDB Server could allow a party with a valid client certificate and a corresponding user account to authenticate using a certificate-based authentication method, ...

CVE-2026-18703

An issue in MongoDB Server could allow a party with a valid client certificate and a corresponding user account to authe

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

An issue in MongoDB Server could allow an authenticated user with limited, database-scoped privileges to modify diagnostic logging settings that affect the entire server rather ...

CVE-2026-18702

An issue in MongoDB Server could allow an authenticated user with limited, database-scoped privileges to modify diagnost

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

An issue in MongoDB Server's query subsystem could allow an authenticated user with read privileges to cause the server process to terminate unexpectedly by submitting a special...

CVE-2026-18701

An issue in MongoDB Server's query subsystem could allow an authenticated user with read privileges to cause the server

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

An issue in MongoDB Server's geospatial validation could allow an authenticated user with write privileges to cause an internal reference to be used after the underlying memory ...

CVE-2026-18700

An issue in MongoDB Server's geospatial validation could allow an authenticated user with write privileges to cause an i

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

An issue in MongoDB Server's query planner could allow an authenticated user with read-level privileges to cause the server process to terminate unexpectedly by submitting a spe...

CVE-2026-18699

An issue in MongoDB Server's query planner could allow an authenticated user with read-level privileges to cause the ser

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

An issue in MongoDB Server could allow an authenticated user with a limited database-scoped role to perform an action against protected system collections that should require mo...

CVE-2026-18698

An issue in MongoDB Server could allow an authenticated user with a limited database-scoped role to perform an action ag

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

An issue in MongoDB Server's applyOps command could allow an authenticated user with specific non-default privileges to perform certain data-definition operations, such as dropp...

CVE-2026-18696

An issue in MongoDB Server's applyOps command could allow an authenticated user with specific non-default privileges to

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

An issue in MongoDB Server's handling of certain query predicates against time-series collections with a metaField could allow an authenticated user with write access to cause t...

CVE-2026-18695

An issue in MongoDB Server's handling of certain query predicates against time-series collections with a metaField could

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

An issue in MongoDB Server's geospatial query processing could allow an authenticated user with write privileges to cause certain malformed geometry data to be stored and later ...

CVE-2026-18694

An issue in MongoDB Server's geospatial query processing could allow an authenticated user with write privileges to caus

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

An issue in MongoDB Server's handling of timeseries collections could allow an authenticated user with write privileges to cause an internal data structure to become inconsisten...

CVE-2026-18693

An issue in MongoDB Server's handling of timeseries collections could allow an authenticated user with write privileges

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

An issue in MongoDB Server's handling of timeseries bucket lifecycle could allow an authenticated user with write privileges to cause an internal reference to be used after the ...

CVE-2026-18692

An issue in MongoDB Server's handling of timeseries bucket lifecycle could allow an authenticated user with write privil

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

An issue in MongoDB Server's intra-cluster connection setup could allow a party with suitable network access to influence which authentication mechanism is used when one replica...

CVE-2026-18691

An issue in MongoDB Server's intra-cluster connection setup could allow a party with suitable network access to influenc

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

An issue in MongoDB Server could allow an authenticated user with a limited database-scoped role to perform an action against protected system collections that their assigned pr...

CVE-2026-18690

An issue in MongoDB Server could allow an authenticated user with a limited database-scoped role to perform an action ag

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

An issue in MongoDB Server's aggregation framework could allow an authenticated user to trigger an out-of-bounds memory read by providing a specially formed numeric parameter in...

CVE-2026-18688

An issue in MongoDB Server's aggregation framework could allow an authenticated user to trigger an out-of-bounds memory

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

MongoDB Server's handling of a Queryable Encryption maintenance operation did not properly validate certain request parameters against the collection's encrypted field configura...

CVE-2026-18687

MongoDB Server's handling of a Queryable Encryption maintenance operation did not properly validate certain request para

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

The AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress plugin for WordPress is vulnerable to authorization bypass in all versions up to, ...

CVE-2026-15426

The AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress plugin for WordPress is v

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

CVAT is an open source interactive video and image annotation tool for computer vision. From 2.17.0 until 2.72.0, a user with write access to a CVAT job can submit a batch autom...

CVE-2026-73219

CVAT is an open source interactive video and image annotation tool for computer vision. From 2.17.0 until 2.72.0, a user

历史摘要 · 未重新核验 · NVD