Deserialization of untrusted data in SQL Server allows an unauthorized attacker to execute code over a network.
CVE-2026-47297
Deserialization of untrusted data in SQL Server allows an unauthorized attacker to execute code over a network.
2026-09-09 归档
今日共收录 1483 条安全情报，包含 593 个 CVE，506 篇安全通告，以及 97 篇研究论文。
← 返回归档列表A security vulnerability has been detected in aircheng-org iWebShop-5 up to 5.15. The impacted element is the function uploadFile of the file controllers/pic.php. Such manipulat...
CVE-2026-86668
A security vulnerability has been detected in aircheng-org iWebShop-5 up to 5.15. The impacted element is the function u
A weakness has been identified in aircheng-org iWebShop-5 up to 5.15. The affected element is the function member_list of the file controllers/member.php. This manipulation of t...
CVE-2026-86667
A weakness has been identified in aircheng-org iWebShop-5 up to 5.15. The affected element is the function member_list o
n8n is an open source workflow automation platform. Prior to 2.37.7 and 2.38.1, the OAuth token endpoint bound an authorization code's first access token to the consented resour...
CVE-2026-86073
n8n is an open source workflow automation platform. Prior to 2.37.7 and 2.38.1, the OAuth token endpoint bound an author
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-82514
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
An integer overflow in the query planning component of MongoDB Server can allow an authenticated user with ordinary database-level read/write privileges to bypass an internal re...
CVE-2026-82076
An integer overflow in the query planning component of MongoDB Server can allow an authenticated user with ordinary data
MongoDB Server contains an incorrect authorization vulnerability in the aggregation framework. An authenticated user with minimal privileges can craft a specially formatted aggr...
CVE-2026-82074
MongoDB Server contains an incorrect authorization vulnerability in the aggregation framework. An authenticated user wit
A security issue in the MongoDB Server aggregation framework allows an authenticated user with limited read privileges to bypass view-level authorization checks and access data ...
CVE-2026-82073
A security issue in the MongoDB Server aggregation framework allows an authenticated user with limited read privileges t
Insufficient validation of storage engine configuration options in MongoDB Server allows an authenticated user with write privileges to supply crafted parameters during collecti...
CVE-2026-82071
Insufficient validation of storage engine configuration options in MongoDB Server allows an authenticated user with writ
A security issue in MongoDB Server's diagnostic reporting interface allows an authenticated user with monitoring privileges to access insufficiently protected credentials from c...
CVE-2026-82070
A security issue in MongoDB Server's diagnostic reporting interface allows an authenticated user with monitoring privile
A security issue in MongoDB Server allows an authenticated user with write privileges to trigger a persistent fatal assertion crash by sending specially crafted retryable write ...
CVE-2026-82068
A security issue in MongoDB Server allows an authenticated user with write privileges to trigger a persistent fatal asse
Improper handling of case sensitivity in the configuration validation component of MongoDB Server may cause the authorization subsystem to remain in a default disabled state dur...
CVE-2026-82067
Improper handling of case sensitivity in the configuration validation component of MongoDB Server may cause the authoriz
A heap out-of-bounds read security issue exists in the query planning component of MongoDB Server. An authenticated user with database read and write privileges can trigger the ...
CVE-2026-82066
A heap out-of-bounds read security issue exists in the query planning component of MongoDB Server. An authenticated user
A security issue in the MongoDB Server's storage engine integration layer allows an authenticated user with collection creation privileges to cause a persistent denial of servic...
CVE-2026-82065
A security issue in the MongoDB Server's storage engine integration layer allows an authenticated user with collection c
A security issue in MongoDB Server allows an unauthenticated network user to cause a denial of service on a specific type of replica set member. The server contains an assertion...
CVE-2026-82064
A security issue in MongoDB Server allows an unauthenticated network user to cause a denial of service on a specific typ
A use-after-free security issue in the cursor management component of MongoDB Server allows an authenticated user to cause a denial of service. Under specific timing conditions ...
CVE-2026-82063
A use-after-free security issue in the cursor management component of MongoDB Server allows an authenticated user to cau
A security issue in MongoDB Server allows an authenticated user with elevated internal privileges to bypass a disabled feature gate in the applyOps command by specifying an inte...
CVE-2026-82062
A security issue in MongoDB Server allows an authenticated user with elevated internal privileges to bypass a disabled f
A use-after-free security issue exists in the server's query execution memory tracking subsystem. An authenticated user with read privileges can trigger a write to freed heap me...
CVE-2026-82061
A use-after-free security issue exists in the server's query execution memory tracking subsystem. An authenticated user
In MongoDB, insufficient validation of shard key values during document insertion allowed authenticated users to store documents with specially crafted, operator-shaped objects ...
CVE-2026-82060
In MongoDB, insufficient validation of shard key values during document insertion allowed authenticated users to store d
An internal aggregation expression in MongoDB Server was incorrectly registered as accessible to any authenticated user rather than being restricted to internal cluster operatio...
CVE-2026-82059
An internal aggregation expression in MongoDB Server was incorrectly registered as accessible to any authenticated user