共收录 65074 条相关情报。
← 返回所有主题CVE-2026-115350
Mistune before 3.3.0 contains a cross-site scripting vulnerability in the Include directive that emits included .html, .
CVE-2026-114655
libmongocrypt builds requests to external key management services (AWS, Azure and GCP) by inserting values from key vaul
CVE-2026-114654
A numeric-type conversion flaw in the BSON handling library of the MongoDB C# Driver allows an out-of-range binary subty
CVE-2026-114653
A client-side encryption schema construction component in the MongoDB C# Driver places caller-supplied field identifiers
CVE-2026-114652
A data-query-logic neutralization weakness in the update-statement construction component of the MongoDB C# Driver can c
CVE-2026-114651
A memory-handling weakness in the BSON deserialization component of the MongoDB C# Driver may cause data left over from
CVE-2026-114650
A flaw in the client-side encryption support of the MongoDB .NET/C# driver can cause data designated for client-side fie
CVE-2026-114649
The MongoDB C# Driver compares TLS client certificates by issuer and serial number only when deciding whether two client
CVE-2026-114648
The MongoDB C# Driver does not neutralize dot and dollar characters in dictionary keys, field names and array-filter ide
CVE-2026-114647
The MongoDB C# Driver does not reject replacement documents whose top-level field names begin with a dollar sign in Find
CVE-2026-114646
A data-validation flaw exists in the BSON handling and binary serialization path of the MongoDB C# Driver. When an appli
CVE-2026-114645
A 32-bit integer wraparound in the MongoDB C Driver's Windows-only Kerberos/SSPI authentication code can cause an unders
CVE-2026-114644
The MongoDB C# Driver's BSON library contains an uncontrolled resource consumption weakness in its deserialization handl
CVE-2026-114643
The MongoDB C# Driver writes GeoJSON extra members without checking whether their names collide with reserved GeoJSON me
CVE-2026-114612
LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. From 1.87.0 until 1.100.4, 1.101.3
CVE-2026-114519
Missing Authorization (CWE-862) in the user API of Roskus Prospero Flow CRM from 2.0.0 before 5.26.0 allows a user with
CVE-2026-113875
On a SmileCDR HAPI FHIR server with REST-hook subscriptions enabled, if a user is granted subscription-creation permissi
CVE-2025-65200
An issue was discovered in localstack 4.9.2 allowing attackers to execute arbitrary code via crafted content hosted on a
CVE-2022-51026
Bytebase 0.12.0 before 1.0.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to lo
CVE-2026-97635
The Agent Zero Web UI before 1.15 does not correctly sanitize user-provided input in chat messages or file uploads. When