#cwe-943

共收录 121 条相关情报。

← 返回所有主题
漏洞预警2026-09-26 发布INFO

Parse Server is an open source backend server. In versions prior to 8.6.90 and in versions from 9.0.0 prior to 9.10.1-alpha.9, the device token deduplication logic for installat...

CVE-2026-100631

Parse Server is an open source backend server. In versions prior to 8.6.90 and in versions from 9.0.0 prior to 9.10.1-al

历史摘要 · 未重新核验 · NVD

安全公告2026-09-26 发布INFO

Parse Server 9.0.0 Unauthenticated Installation Deletion via Operator Injection

CVE-2026-100631

Parse Server is an open source backend server. In versions prior to 8.6.90 and in versions from 9.0.0 prior to 9.10.1-al

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-09-18 发布INFO

Mongoid does not restrict which query operators may come from caller-supplied filter data when an application hands that data to its query-building methods. In an application th...

CVE-2026-93760

Mongoid does not restrict which query operators may come from caller-supplied filter data when an application hands that

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-16 发布INFO

A vulnerability in the SXP REST API of Cisco ISE could allow an authenticated, remote attacker to conduct SQL injection attacks. This vulnerability is due to insufficient val...

CVE-2026-20284

A vulnerability in the SXP REST API of Cisco ISE could allow an authenticated, remote attacker to conduct SQL injection

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

Flowise before 3.1.4 fails to sanitize the overrideConfig.sessionId parameter before using it in MongoDB queries within the MongoDBMemory node. Unauthenticated attackers can sub...

CVE-2026-91937

Flowise before 3.1.4 fails to sanitize the overrideConfig.sessionId parameter before using it in MongoDB queries within

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-10 发布INFO

Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB C Driver can cause a caller-supplied structured file identifier to be inte...

CVE-2026-88036

Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB C Driver can caus

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-10 发布INFO

Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB C++ Driver can cause a caller-supplied structured file identifier to be in...

CVE-2026-88034

Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB C++ Driver can ca

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-10 发布INFO

Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB Java Driver can cause a caller-supplied structured file identifier to be i...

CVE-2026-88033

Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB Java Driver can c

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-10 发布INFO

Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB Go Driver can cause a caller-supplied structured file identifier to be int...

CVE-2026-88031

Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB Go Driver can cau

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-10 发布INFO

Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB Ruby Driver can cause a caller-supplied structured file identifier to be i...

CVE-2026-88030

Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB Ruby Driver can c

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-10 发布INFO

Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB Python Driver can cause a caller-supplied structured file identifier to be...

CVE-2026-88029

Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB Python Driver can

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-10 发布INFO

Improper neutralization of special elements in data query logic in the polymorphic relation handling of the MongoDB integration for Laravel can cause a caller-supplied relation ...

CVE-2026-88028

Improper neutralization of special elements in data query logic in the polymorphic relation handling of the MongoDB inte

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-10 发布INFO

Improper neutralization of special elements in data query logic in the embedded-document relation handling of the MongoDB integration for Laravel can cause a caller-supplied emb...

CVE-2026-88027

Improper neutralization of special elements in data query logic in the embedded-document relation handling of the MongoD

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-10 发布INFO

Improper neutralization of regular-expression metacharacters in the LINQ query translation component of the MongoDB C# Driver can cause a caller-supplied character sequence to a...

CVE-2026-88026

Improper neutralization of regular-expression metacharacters in the LINQ query translation component of the MongoDB C# D

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-10 发布INFO

Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB C# Driver can cause a caller-supplied structured file identifier to be int...

CVE-2026-88025

Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB C# Driver can cau

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-10 发布INFO

Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB Rust Driver can cause a caller-supplied structured file identifier to be i...

CVE-2026-88024

Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB Rust Driver can c

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-10 发布INFO

Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB PHP Library can cause a caller-supplied structured file identifier to be i...

CVE-2026-88023

Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB PHP Library can c

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-10 发布INFO

Improper neutralization of special elements in data query logic in the MongoDB integration for Laravel can cause an array supplied to an explicit equality filter to be interpret...

CVE-2026-88022

Improper neutralization of special elements in data query logic in the MongoDB integration for Laravel can cause an arra

历史摘要 · 未重新核验 · NVD

安全公告2026-09-08 发布INFO

mongodb: Reject "." and NUL bytes in database and collection names

CVE-2026-81525

### Impact Passing untrusted input as part of a database or collection name may result in targeting a different database

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-08 发布INFO

In MongoDB, insufficient validation of shard key values during document insertion allowed authenticated users to store documents with specially crafted, operator-shaped objects ...

CVE-2026-82060

In MongoDB, insufficient validation of shard key values during document insertion allowed authenticated users to store d

历史摘要 · 未重新核验 · NVD