All CVEs — page 561 of 631
The complete archive, 25 per page, newest first. 15775 records. Search instead.
The flaw allows an unauthenticated party to obtain sensitive data and permanently delete documents by manipulating field names in query methods, posing a significant security risk.
The flaw allows an attacker to manipulate query operators in Mongoid, potentially leading to data disclosure and reduced database performance.
The flaw allows an unauthenticated attacker to inject server-side JavaScript code into MongoDB queries via the Mongoid ORM, potentially leading to data exposure and performance degradation.
The flaw in Cocos AI allows a relying party to be induced to trust an unintended attestation context due to the lack of attestation freshness enforcement.
The flaw in Cocos AI allows a relying party to accept a TDX QuoteV4 Evidence with mismatched or reused reportData, enabling session-misbinding and potential unauthorized access to application data.
The flaw allows a crafted legacy DOC file to inject unsafe URL schemes, leading to potential script execution in the embedding application's origin.