Spring Data MongoDB repository query methods annotated with @Query that use regex parameter...
CVE-2026-41696
Spring Data MongoDB repository query methods annotated with @Query that use regex parameter binding perform insufficient
#severity:medium
共收录 5584 条相关情报。
← 返回所有主题Spring Data Relational does not properly escape binding values of externally-controlled input...
CVE-2026-41697
Spring Data Relational does not properly escape binding values of externally-controlled input when using StringMatcher (
When using spring-restdocs-webtestclient or spring-restdocs-restassured to document a remote API...
CVE-2026-40991
When using spring-restdocs-webtestclient or spring-restdocs-restassured to document a remote API accessed over HTTP, an
Applications using Spring Data Commons may be vulnerable to a Denial of Service (DoS) attack...
CVE-2026-41711
Applications using Spring Data Commons may be vulnerable to a Denial of Service (DoS) attack leading to a StackOverflowE
Spring Security Authorization Server's authorization endpoint performs insufficient validation of...
CVE-2026-41008
Spring Security Authorization Server's authorization endpoint performs insufficient validation of the request_uri parame
CAI Content Credentials versions c2pa-web@0.7.1, c2pa-v0.80.1 and earlier are affected by an...
CVE-2026-47905
CAI Content Credentials versions c2pa-web@0.7.1, c2pa-v0.80.1 and earlier are affected by an Uncontrolled Resource Consu
MongoDB server may log authentication parameters, including credentials, to the server log during...
CVE-2026-9735
MongoDB server may log authentication parameters, including credentials, to the server log during SASL authentication. W
The ldapQueryPassword parameter, when set through the runtime setParameter command, will log the...
CVE-2026-9751
The ldapQueryPassword parameter, when set through the runtime setParameter command, will log the new password to the mon
OpenClinic GA 5.351.19 contains a reflected cross-site scripting vulnerability in the DICOM image...
CVE-2026-25860
OpenClinic GA 5.351.19 contains a reflected cross-site scripting vulnerability in the DICOM image upload handler that al
OSCAL-GUI contains a reflected cross-site scripting vulnerability that allows unauthenticated...
CVE-2026-34417
OSCAL-GUI contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to execute arbit
CAI Content Credentials versions c2pa-web@0.7.1, c2pa-v0.80.1 and earlier are affected by an...
CVE-2026-47904
CAI Content Credentials versions c2pa-web@0.7.1, c2pa-v0.80.1 and earlier are affected by an Uncontrolled Resource Consu
CAI Content Credentials versions c2pa-web@0.7.1, c2pa-v0.80.1 and earlier are affected by an...
CVE-2026-47903
CAI Content Credentials versions c2pa-web@0.7.1, c2pa-v0.80.1 and earlier are affected by an Improper Input Validation v
CAI Content Credentials versions c2pa-web@0.7.1, c2pa-v0.80.1 and earlier are affected by an...
CVE-2026-34657
CAI Content Credentials versions c2pa-web@0.7.1, c2pa-v0.80.1 and earlier are affected by an Improper Limitation of a Pa
CAI Content Credentials versions c2pa-web@0.7.1, c2pa-v0.80.1 and earlier are affected by an...
CVE-2026-47902
CAI Content Credentials versions c2pa-web@0.7.1, c2pa-v0.80.1 and earlier are affected by an Uncontrolled Resource Consu
SymfonyRuntime CVE-2024-50340 Patch Bypass: Web Requests Can Still Set APP_ENV/APP_DEBUG via parse_str/SAPI Argv Mismatch
CVE-2026-47767
### Description CVE-2024-50340 (GHSA-x8vp-gf4q-mw5j) addressed an issue where, with `register_argc_argv=On`, a crafted
ColdFusion versions 2023.19, 2025.8 and earlier are affected by a stored Cross-Site Scripting ...
CVE-2026-47933
ColdFusion versions 2023.19, 2025.8 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that c
Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by an out-of-bounds...
CVE-2026-47961
Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by an out-of-bounds read vulnerability that
OSCAL-GUI contains a reflected cross-site scripting vulnerability that allows unauthenticated...
CVE-2026-34416
OSCAL-GUI contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to execute arbit
Evoluted PHP Directory Listing Script through 4.0.5 contains a reflected cross-site scripting...
CVE-2026-25557
Evoluted PHP Directory Listing Script through 4.0.5 contains a reflected cross-site scripting vulnerability in index.php
Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by an out-of-bounds...
CVE-2026-47926
Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by an out-of-bounds read vulnerability that