An issue in MongoDB Server could allow an authenticated user with direct network access to a...
CVE-2026-18709
An issue in MongoDB Server could allow an authenticated user with direct network access to a shard to improperly commit
#severity:medium
共收录 5494 条相关情报。
← 返回所有主题An issue in MongoDB Server's JavaScript scripting engine could allow an authenticated user with...
CVE-2026-18708
An issue in MongoDB Server's JavaScript scripting engine could allow an authenticated user with write privileges to caus
An issue in MongoDB Server could allow an authenticated user, including one with no assigned...
CVE-2026-18707
An issue in MongoDB Server could allow an authenticated user, including one with no assigned privileges, to cause the se
An issue in MongoDB Server could allow an authenticated user with a limited database-scoped role...
CVE-2026-18698
An issue in MongoDB Server could allow an authenticated user with a limited database-scoped role to perform an action ag
An issue in MongoDB Server's geospatial validation could allow an authenticated user with write...
CVE-2026-18700
An issue in MongoDB Server's geospatial validation could allow an authenticated user with write privileges to cause an i
An issue in MongoDB Server's query planner could allow an authenticated user with read-level...
CVE-2026-18699
An issue in MongoDB Server's query planner could allow an authenticated user with read-level privileges to cause the ser
An issue in MongoDB Server could allow an authenticated user with limited, database-scoped...
CVE-2026-18702
An issue in MongoDB Server could allow an authenticated user with limited, database-scoped privileges to modify diagnost
Microsoft Security Advisory CVE-2026-62902 – .NET Information Disclosure Vulnerability
CVE-2026-62902
## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Wind
Microsoft Security Advisory CVE-2026-62909 – .NET Elevation of Privilege Vulnerability
CVE-2026-62909
## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET
Microsoft Security Advisory CVE-2026-62899 – .NET Security Feature Bypass Vulnerability
CVE-2026-62899
## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Syst
The affected TP-Link Aginet devices do not properly validate symbolic links created on external...
CVE-2025-30240
The affected TP-Link Aginet devices do not properly validate symbolic links created on external USB storage devices. By
Cross-Site Request Forgery weaknesses in the Administrative Console of PingFederate versions...
CVE-2025-32736
Cross-Site Request Forgery weaknesses in the Administrative Console of PingFederate versions before version 13.1 may all
A type mismatch vulnerability was found in QEMU's vhost inflight migration VMState handling. The...
CVE-2026-6426
A type mismatch vulnerability was found in QEMU's vhost inflight migration VMState handling. The destination buffer size
npm-check-updates through 23.0.2, fixed in commit b554b84, contains a terminal escape sequence...
CVE-2026-73035
npm-check-updates through 23.0.2, fixed in commit b554b84, contains a terminal escape sequence injection vulnerability t
SQLBot through 1.10.0, fixed in commit c3f40a5, contains a stored cross-site scripting...
CVE-2026-72743
SQLBot through 1.10.0, fixed in commit c3f40a5, contains a stored cross-site scripting vulnerability in the SQText dashb
A flaw was found in the Feast operator. A malicious tenant could inject arbitrary code into their...
CVE-2026-18942
A flaw was found in the Feast operator. A malicious tenant could inject arbitrary code into their feature repository. Th
A flaw was found in the `odh-model-controller`. An authenticated user with permissions to create...
CVE-2026-16456
A flaw was found in the `odh-model-controller`. An authenticated user with permissions to create custom resources can ex
Typemill CMS version 2.x contains a persistent cross-site scripting vulnerability in the Markdown...
CVE-2026-44401
Typemill CMS version 2.x contains a persistent cross-site scripting vulnerability in the Markdown parser extension that
FlyEnv before 4.18.0 fails to sanitize HTML from markdown rendering and AI chat content passed to...
CVE-2026-69116
FlyEnv before 4.18.0 fails to sanitize HTML from markdown rendering and AI chat content passed to Vue v-html directives.
Hugging Face Accelerate through 1.14.0 contains a path traversal vulnerability in...
CVE-2026-69112
Hugging Face Accelerate through 1.14.0 contains a path traversal vulnerability in load_checkpoint_in_model and load_chec