#cwe-943
共收录 121 条相关情报。
← 返回所有主题 漏洞预警2026-09-26 发布INFO
CVE-2026-100631
Parse Server is an open source backend server. In versions prior to 8.6.90 and in versions from 9.0.0 prior to 9.10.1-al
历史摘要 · 未重新核验 · NVD
安全公告2026-09-26 发布INFO
CVE-2026-100631
Parse Server is an open source backend server. In versions prior to 8.6.90 and in versions from 9.0.0 prior to 9.10.1-al
历史摘要 · 未重新核验 · OSV.dev
漏洞预警2026-09-18 发布INFO
CVE-2026-93760
Mongoid does not restrict which query operators may come from caller-supplied filter data when an application hands that
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-16 发布INFO
CVE-2026-20284
A vulnerability in the SXP REST API of Cisco ISE could allow an authenticated, remote attacker to conduct SQL injection
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-15 发布INFO
CVE-2026-91937
Flowise before 3.1.4 fails to sanitize the overrideConfig.sessionId parameter before using it in MongoDB queries within
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-10 发布INFO
CVE-2026-88036
Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB C Driver can caus
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-10 发布INFO
CVE-2026-88034
Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB C++ Driver can ca
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-10 发布INFO
CVE-2026-88033
Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB Java Driver can c
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-10 发布INFO
CVE-2026-88031
Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB Go Driver can cau
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-10 发布INFO
CVE-2026-88030
Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB Ruby Driver can c
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-10 发布INFO
CVE-2026-88029
Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB Python Driver can
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-10 发布INFO
CVE-2026-88028
Improper neutralization of special elements in data query logic in the polymorphic relation handling of the MongoDB inte
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-10 发布INFO
CVE-2026-88027
Improper neutralization of special elements in data query logic in the embedded-document relation handling of the MongoD
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-10 发布INFO
CVE-2026-88026
Improper neutralization of regular-expression metacharacters in the LINQ query translation component of the MongoDB C# D
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-10 发布INFO
CVE-2026-88025
Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB C# Driver can cau
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-10 发布INFO
CVE-2026-88024
Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB Rust Driver can c
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-10 发布INFO
CVE-2026-88023
Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB PHP Library can c
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-10 发布INFO
CVE-2026-88022
Improper neutralization of special elements in data query logic in the MongoDB integration for Laravel can cause an arra
历史摘要 · 未重新核验 · NVD
安全公告2026-09-08 发布INFO
CVE-2026-81525
### Impact
Passing untrusted input as part of a database or collection name may result in targeting a different database
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-09-08 发布INFO
CVE-2026-82060
In MongoDB, insufficient validation of shard key values during document insertion allowed authenticated users to store d
历史摘要 · 未重新核验 · NVD