Improper neutralization of special elements in data query logic in Microsoft Discovery Studio...
CVE-2026-62906
Improper neutralization of special elements in data query logic in Microsoft Discovery Studio allows an unauthorized att
#cwe-943
共收录 121 条相关情报。
← 返回所有主题Improper neutralization of special elements in data query logic in Microsoft Discovery Studio allows an unauthorized attacker to disclose information over a network.
CVE-2026-62906
Improper neutralization of special elements in data query logic in Microsoft Discovery Studio allows an unauthorized att
n8n before 2.35.4 and 2.36.x before 2.36.2 contain a query injection vulnerability in the Elasticsearch Document Get All and Google Cloud Firestore Document Query operations, wh...
CVE-2026-85167
n8n before 2.35.4 and 2.36.x before 2.36.2 contain a query injection vulnerability in the Elasticsearch Document Get All
n8n before 2.36.2 Query Injection via Elasticsearch Firestore Nodes
CVE-2026-85167
n8n before 2.35.4 and 2.36.x before 2.36.2 contain a query injection vulnerability in the Elasticsearch Document Get All
Improper Neutralization of Special Elements in Data Query Logic (CWE-943) in Kibana can lead to information disclosure via NoSQL Injection (CAPEC-676). An authenticated user wit...
CVE-2026-63138
Improper Neutralization of Special Elements in Data Query Logic (CWE-943) in Kibana can lead to information disclosure v
FastGPT Community Edition 4.10.0 through 4.14.0 are vulnerable to a NoSQL injection in the POST /api/core/chat/getHistories endpoint. An unauthenticated attacker can inject mali...
CVE-2026-79483
FastGPT Community Edition 4.10.0 through 4.14.0 are vulnerable to a NoSQL injection in the POST /api/core/chat/getHistor
Improper Neutralization of Special Elements in Data Query Logic vulnerability in ash-project ash_sql allows a user who supplies a search term to contains/2, string_starts_with/2...
CVE-2026-78691
Improper Neutralization of Special Elements in Data Query Logic vulnerability in ash-project ash_sql allows a user who s
Unescaped backslash allows LIKE wildcard injection in AshSql string search
CVE-2026-78691
Improper Neutralization of Special Elements in Data Query Logic vulnerability in ash-project ash_sql allows a user who s
Improper Neutralization of Special Elements in Data Query Logic vulnerability in ash-project ash_sqlite allows an attacker who controls a get_path/2 segment to traverse into nes...
CVE-2026-77846
CVE-2026-77846 是 ash-project 的 ash_sqlite 组件中存在的一处 JSON 查询路径注入漏洞。该库用于在 SQLite 中存储和查询 Ash 数据模型。其 SqlImplementation 在构建 SQ
A MongoDB C# driver document-replacement code path omits the element-name/shape validation that the equivalent write paths apply, so a value supplied as a replacement is forward...
CVE-2026-81528
A MongoDB C# driver document-replacement code path omits the element-name/shape validation that the equivalent write pat
A NoSQL/expression injection weakness exists in the LINQ-to-aggregation query translation layer of the MongoDB C# Driver, in both aggregation expression and query filter transla...
CVE-2026-81527
A NoSQL/expression injection weakness exists in the LINQ-to-aggregation query translation layer of the MongoDB C# Driver
The MongoDB client library for PHP does not sufficiently sanitize special elements in application-supplied namespace identifiers before using them to construct the target namesp...
CVE-2026-81525
The MongoDB client library for PHP does not sufficiently sanitize special elements in application-supplied namespace ide
RedisChatMemoryRepository.findByMetadata() builds RediSearch tag and text queries from caller-supplied metadata values without applying RediSearchUtil.escape(), unlike get(), cl...
CVE-2026-59319
RedisChatMemoryRepository.findByMetadata() builds RediSearch tag and text queries from caller-supplied metadata values w
Cross-tenant database retargeting via dot/NUL injection in namespace strings in the PHP Driver
CVE-2026-81525
The MongoDB client library for PHP does not sufficiently sanitize special elements in application-supplied namespace ide
The extension passes the user-supplied search query parameter to Apache Solr without restricting advanced Solr query syntax such as wildcards, field selectors and range queries....
CVE-2026-56096
The extension passes the user-supplied search query parameter to Apache Solr without restricting advanced Solr query syn
The extension allows a request-provided additionalFilters parameter to register a named siteHash filter before the system's own siteHash filter is applied, and the query builder...
CVE-2026-56094
The extension allows a request-provided additionalFilters parameter to register a named siteHash filter before the syste
n8n before 1.123.69, 2.33.4, and 2.34.1 contains a NoSQL injection vulnerability in the MongoDB node's Find, Delete, and Aggregate operations, which parse the Query parameter as...
CVE-2026-77070
n8n before 1.123.69, 2.33.4, and 2.34.1 contains a NoSQL injection vulnerability in the MongoDB node's Find, Delete, and
In Splunk SOAR versions below 8.6.0, a user who holds the "Automation Engineer" role could run...
CVE-2026-76363
In Splunk SOAR versions below 8.6.0, a user who holds the "Automation Engineer" role could run arbitrary Structured Quer
In Splunk SOAR versions below 8.6.0, a user who holds the "Automation Engineer" role could run arbitrary Structured Query Language (SQL) statements against the Splunk SOAR datab...
CVE-2026-76363
In Splunk SOAR versions below 8.6.0, a user who holds the "Automation Engineer" role could run arbitrary Structured Quer
In Splunk Enterprise versions below 10.2.6, 10.0.9, and 9.4.14, an unauthenticated user could trick an authenticated user into running arbitrary Search Processing Language (SPL)...
CVE-2026-76349
In Splunk Enterprise versions below 10.2.6, 10.0.9, and 9.4.14, an unauthenticated user could trick an authenticated use