Adding fromRouter:true and runtimeConstants.userRoles could cause aggregations to crash mongodb...
CVE-2026-9747
Adding fromRouter:true and runtimeConstants.userRoles could cause aggregations to crash mongodb server.
#severity:high
共收录 5509 条相关情报。
← 返回所有主题A vulnerability in MongoDB Server's BSON validation logic allows an unauthenticated user to crash...
CVE-2026-9740
A vulnerability in MongoDB Server's BSON validation logic allows an unauthenticated user to crash the mongod process by
An authorized user could trigger a server crash by running a query with a 2dsphere index on a...
CVE-2026-9752
An authorized user could trigger a server crash by running a query with a 2dsphere index on a field that stores a GeoJSO
When OIDC authentication is enabled in configuration, clients may set specific values in the ...
CVE-2026-9742
When OIDC authentication is enabled in configuration, clients may set specific values in the "mechanism" parameter of th
An authenticated user can cause a MongoDB server to crash or return incorrect results by creating...
CVE-2026-9750
An authenticated user can cause a MongoDB server to crash or return incorrect results by creating documents that interfe
A bug in query analysis processing of the $vectorSearch aggregation stage for Queryable...
CVE-2026-9741
A bug in query analysis processing of the $vectorSearch aggregation stage for Queryable Encryption (QE) or Client-Side F
In MongoDB Server 8.0, an aggregation stage can leave its _subPipeline field null during...
CVE-2026-9743
In MongoDB Server 8.0, an aggregation stage can leave its _subPipeline field null during processing of certain pipelines
The $_internalConvertBucketIndexStats stage used PauseExecution as a way to signal "skip this...
CVE-2026-9748
The $_internalConvertBucketIndexStats stage used PauseExecution as a way to signal "skip this document" when an index st
CAI Content Credentials versions c2pa-web@0.7.1, c2pa-v0.80.1 and earlier are affected by an...
CVE-2026-34713
CAI Content Credentials versions c2pa-web@0.7.1, c2pa-v0.80.1 and earlier are affected by an Uncontrolled Resource Consu
CAI Content Credentials versions c2pa-web@0.7.1, c2pa-v0.80.1 and earlier are affected by an...
CVE-2026-34712
CAI Content Credentials versions c2pa-web@0.7.1, c2pa-v0.80.1 and earlier are affected by an Improper Input Validation v
CAI Content Credentials versions c2pa-web@0.7.1, c2pa-v0.80.1 and earlier are affected by an...
CVE-2026-34711
CAI Content Credentials versions c2pa-web@0.7.1, c2pa-v0.80.1 and earlier are affected by an Integer Overflow or Wraparo
Dex: Token-exchange endpoint is missing AllowedConnectors enforcement
## Summary `server/handlers.go::handleTokenExchange` (lines 1804-1893) does not call `isConnectorAllowed(client.Allowed
PhoenixStorybook: Unbounded atom creation from LiveView event params (atom-table DoS)
CVE-2026-8469
### Summary An attacker who can deliver `psb-assign`, `psb-toggle`, `psb-set-theme`, `upper-tab-navigation`, `lower-tab-
ColdFusion versions 2023.19, 2025.8 and earlier are affected by an Improper Input Validation...
CVE-2026-47930
ColdFusion versions 2023.19, 2025.8 and earlier are affected by an Improper Input Validation vulnerability that could re
Format Plugins versions 1.1.2 and earlier are affected by a Heap-based Buffer Overflow...
CVE-2026-48291
Format Plugins versions 1.1.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result i
Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Stack-based...
CVE-2026-47959
Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Stack-based Buffer Overflow vulnerabili
ColdFusion versions 2023.19, 2025.8 and earlier are affected by an Improper Input Validation...
CVE-2026-47931
ColdFusion versions 2023.19, 2025.8 and earlier are affected by an Improper Input Validation vulnerability that could re
Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Heap-based...
CVE-2026-47952
Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Heap-based Buffer Overflow vulnerabilit
ColdFusion versions 2023.19, 2025.8 and earlier are affected by an Incorrect Authorization...
CVE-2026-47929
ColdFusion versions 2023.19, 2025.8 and earlier are affected by an Incorrect Authorization vulnerability that could resu
ColdFusion versions 2023.19, 2025.8 and earlier are affected by an Improper Limitation of a...
CVE-2026-47932
ColdFusion versions 2023.19, 2025.8 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Dir