CVE-2026-8053-MongoDB

CVE-2026-8053 — MongoDB Server Écriture hors limites Aperçu Propriété| Valeur ---|--- Identifiant CVE| CVE-2026-8053 Nom technique| FlatBSON Duplicate Field Index Drift Type de vulnérabilité| CWE-787 — Out-of-bounds Write CVSS v4.0| 8.7 HIGH CVSS v3.1| 8.8 HIGH EPSS| 0.064% 20e percentile — faibl...

CVE-2026-8053

An issue in MongoDB Server's time-series collection implementation allows an authenticated user with database write privileges to trigger an out-of-bounds memory write in the mongod process. The issue results from an inconsistency in the internal field-name-to-index mapping within the time-series...

CVE-2026-8053

An issue in MongoDB Server's time-series collection implementation allows an authenticated user with database write privileges to trigger an out-of-bounds memory write in the mongod process. The issue results from an inconsistency in the internal field-name-to-index mapping within the time-series...

CVE-2026-8053

creationtimestamp| type| source ---|---|--- 2026-05-13 01:41:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlp6dzbsyw2i 2026-05-14 02:42:07+00:00| seen| https://bsky.app/profile/kitafox.bsky.social/post/3mlrs7g2for2f 2026-05-14 04:23:40+00:00| seen|...

CVE-2025-8053

creationtimestamp| type| source ---|---|--- 2025-10-20 20:38:53+00:00| seen| https://infosec.exchange/users/BugBountyShorts/statuses/115408419669164166 2025-10-20 23:10:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m3nws4gq6j2h...

MAL-2025-8053 Malicious code in @hishprorg/quisquam-aperiam-temporibus (npm)

The package @hishprorg/quisquam-aperiam-temporibus was found to contain malicious code...

CVE-2025-24473

A exposure of sensitive system information to an unauthorized control sphere vulnerability in Fortinet FortiClientWindows 7.2.0 through 7.2.1, FortiClientWindows 7.0.13 through 7.0.14 may allow an unauthorized remote attacker to view application information via navigation to a hosted webpage, if...

CVE-2025-24473

Fortinet FortiClientWindows vulnerability CVE-2025-24473 affects FortiClientWindows versions 7.2.0–7.2.1 (and 7.0.13–7.0.14 in some phrasing) where an unauthorized remote attacker can view application information by navigating to a hosted webpage if Windows is configured to accept incoming connec...

CVE-2025-24473: Exposure of Sensitive System Information to an Unauthorized Control Sphere

A exposure of sensitive system information to an unauthorized control sphere vulnerability in Fortinet FortiClientWindows 7.2.0 through 7.2.1, FortiClientWindows 7.0.13 through 7.0.14 may allow an unauthorized remote attacker to view application information via navigation to a hosted webpage, if...

CVE-2019-8053

Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.30497 and earlier, and 2015.006.30498 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code...

CVE-2024-8053

In version v0.3.10 of open-webui/open-webui, the api/v1/utils/pdf endpoint lacks authentication mechanisms, allowing unauthenticated attackers to access the PDF generation service. This vulnerability can be exploited by sending a POST request with an excessively large payload, potentially leading...

CVE-2024-8053 Improper Authentication in open-webui/open-webui

In version v0.3.10 of open-webui/open-webui, the api/v1/utils/pdf endpoint lacks authentication mechanisms, allowing unauthenticated attackers to access the PDF generation service. This vulnerability can be exploited by sending a POST request with an excessively large payload, potentially leading...

CVE-2024-8053

Open WebUI vulnerability CVE-2024-8053 affects open-webui/open-webui v0.3.10 where the api/v1/utils/pdf endpoint lacks authentication, allowing unauthenticated access to the PDF generation service. Exploitation can involve sending a POST with an excessively large payload, potentially exhausting s...

SUSE CVE-2015-8053

Cross-site scripting XSS vulnerability in Adobe ColdFusion 10 before Update 18 and 11 before Update 7 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2015-8052...

CVE-2019-8053

Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.30497 and earlier, and 2015.006.30498 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code...

CVE-2019-8053

Adobe Acrobat/Reader CVE-2019-8053 is a use-after-free vulnerability affecting multiple old releases (including 2015.006.30497/30498, 2017.011.30142/30143, 2019.012.20035 and earlier). Exploitation could lead to arbitrary code execution. Connected documents corroborate the vulnerability class and...

Adobe Reader < 2015.006.30499 / 2017.011.30144 / 2019.012.20036 Multiple Vulnerabilities (APSB19-41)

The version of Adobe Reader installed on the remote Windows host is a version prior to 2015.006.30499, 2017.011.30144, or 2019.012.20036. It is, therefore, affected by multiple vulnerabilities. - Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier,...

Adobe Acrobat 2017 Security Updates (APSB19-41) - Windows

Adobe Acrobat 2017 is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:acrobat";...

Adobe Acrobat and Reader Use After Free (APSB19-41: CVE-2019-8053)

A use-after-free vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Fedora Update for podofo FEDORA-2018-2f3c0cdf93

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...