共收录 69142 条相关情报。
← 返回所有主题CVE-2026-114649
The MongoDB C# Driver compares TLS client certificates by issuer and serial number only when deciding whether two client
CVE-2026-114648
The MongoDB C# Driver does not neutralize dot and dollar characters in dictionary keys, field names and array-filter ide
CVE-2026-114647
The MongoDB C# Driver does not reject replacement documents whose top-level field names begin with a dollar sign in Find
CVE-2026-114646
A data-validation flaw exists in the BSON handling and binary serialization path of the MongoDB C# Driver. When an appli
CVE-2026-114645
A 32-bit integer wraparound in the MongoDB C Driver's Windows-only Kerberos/SSPI authentication code can cause an unders
CVE-2026-114644
The MongoDB C# Driver's BSON library contains an uncontrolled resource consumption weakness in its deserialization handl
CVE-2026-114643
The MongoDB C# Driver writes GeoJSON extra members without checking whether their names collide with reserved GeoJSON me
CVE-2026-114612
LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. From 1.87.0 until 1.100.4, 1.101.3
CVE-2026-114519
Missing Authorization (CWE-862) in the user API of Roskus Prospero Flow CRM from 2.0.0 before 5.26.0 allows a user with
CVE-2026-113875
On a SmileCDR HAPI FHIR server with REST-hook subscriptions enabled, if a user is granted subscription-creation permissi
CVE-2025-65200
An issue was discovered in localstack 4.9.2 allowing attackers to execute arbitrary code via crafted content hosted on a
CVE-2022-51026
Bytebase 0.12.0 before 1.0.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to lo
CVE-2026-97635
The Agent Zero Web UI before 1.15 does not correctly sanitize user-provided input in chat messages or file uploads. When
CVE-2026-93336
Missing authorization in the unit resources download route in Canonical Juju 4.0 through 4.0.15 allows a controller-auth
CVE-2026-77157
ast-cli downloads two helper binaries, the Vorpal ASCA real-time engine and the SCA Resolver, from "download.checkmarx.c
CVE-2026-77156
Incomplete validation of extracted archive entry paths in ast-cli's tar extraction logic on Linux and macOS (used when i
CVE-2026-54532
CloudPirates Open Source Helm Charts is a collection of Helm charts. Prior to commit 271d415, pull_request_target workfl
CVE-2026-54238
Supabase Realtime provides Broadcast, Presence, and Postgres Changes via WebSockets. Prior to version 2.103.1, the REST
CVE-2026-114611
OCO-Server is a self-hosted endpoint management application for computer inventory, software deployment, and mobile devi
CVE-2026-114610
fpdf2 is a PDF creation library for Python. From 2.5.0 until 2.8.8, fpdf2's SVGObject.build_xref() passes nested SVG re