Lucene search
+L

86 matches found

CNNVD
CNNVD
added 2025/11/27 12:00 a.m.10 views

WordPress plugin AI ChatBot with ChatGPT and Content Generator by AYS 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A code issue...

6.5CVSS6.9AI score0.00285EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2025/11/27 12:00 a.m.17 views

PT-2025-48253

The AI ChatBot with ChatGPT and Content Generator by AYS plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.7.0 via the ays chatgpt pinecone upsert function. This makes it possible for unauthenticated attackers to make web requests to arbitra...

6.5CVSS5.9AI score0.00285EPSS
SaveExploits0References6
OSV
OSV
added 2025/11/06 12:53 p.m.43 views

BIT-AIRFLOW-2025-62503 Apache Airflow: Privilege boundary bypass in bulk APIs (create action can upsert existing Pools/Connections/Variables)

User with CREATE and no UPDATE privilege for Pools, Connections, Variables could update existing records via bulk create API with overwrite action...

4.6CVSS6.8AI score0.00405EPSS
SaveExploits0References3
IBM Security Bulletins
IBM Security Bulletins
added 2025/10/30 5:17 p.m.24 views

Security Bulletin: Multiple Vulnerabilities in IBM CloudPak for AIOps

Summary Multiple vulnerabilities were addressed in IBM Cloud Pak for AIOps version 4.11.1 Vulnerability Details CVEID:CVE-2025-8129 DESCRIPTION: A vulnerability, which was classified as problematic, was found in KoaJS Koa up to 3.0.0. Affected is the function back in the library lib/response.js o...

7.5CVSS6.9AI score0.0093EPSS
SaveExploits1Affected Software1
Github Security Blog
Github Security Blog
added 2025/10/30 12:31 p.m.16 views

Apache Airflow's create action can upsert existing Pools/Connections/Variables

User with CREATE and no UPDATE privilege for Pools, Connections, Variables could update existing records via bulk create API with overwrite action...

4.6CVSS7.1AI score0.00405EPSS
SaveExploits0References4Affected Software1
Redos
Redos
added 2025/10/20 12:00 a.m.8 views

ROS-20251020-06

MongoDB database management system upsert operation vulnerability is related to operations on a resource after its expiration date. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service. remotely to cause a denial of service...

7.5CVSS6.8AI score0.0037EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2025/10/09 12:00 a.m.11 views

The vulnerability of the upsert operation in the MongoDB database management system allows a hacker to cause a service failure.

The vulnerability of the upsert operation in the MongoDB database management system is related to operations involving resources after their expiration. Exploiting this vulnerability can allow an attacker to cause service failures...

7.8CVSS5.8AI score0.0037EPSS
SaveExploits0References3Affected Software2
Tenable Nessus
Tenable Nessus
added 2025/10/07 12:00 a.m.2 views

Unity Linux 20.1070e Security Update: postgresql (UTSA-2025-986180)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986180 advisory. A flaw was found in postgresql. Using an INSERT ... ON CONFLICT ... DO UPDATE command on a purpose-crafted table, an authenticated database user could read arbitrary...

6.5CVSS7.1AI score0.01558EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2025/10/07 12:00 a.m.6 views

FreeBSD : mongodb -- MongoDB may be susceptible to Invariant Failure in Transactions due Upsert Operation (6d16b410-a2ca-11f0-8402-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 6d16b410-a2ca-11f0-8402-b42e991fc52e advisory. [email protected] reports: MongoDB Server may allow upsert operations retried within a transaction to...

7.5CVSS6.5AI score0.0037EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/03 8:07 p.m.11 views

EUVD-2025-27035

Malicious code in bioql PyPI...

7.5CVSS6.3AI score0.0037EPSS
SaveExploits0References1
OSV
OSV
added 2025/09/19 9:58 a.m.13 views

BIT-MONGODB-2025-10060 MongoDB may be susceptible to Invariant Failure in Transactions due Upsert Operation

MongoDB Server may allow upsert operations retried within a transaction to violate unique index constraints, potentially causing an invariant failure and server crash during commit. This issue may be triggered by improper WriteUnitOfWork state management. This issue affects MongoDB Server v6.0...

7.5CVSS6.9AI score0.0037EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/09/17 12:00 a.m.8 views

MongoDB 6.0.x < 6.0.25 / 7.0.x < 7.0.22 / 8.0.x < 8.0.12 (SERVER-95524)

The version of MongoDB installed on the remote host is 6.0 prior to 6.0.25, 7.0 prior to 7.0.22 and 8.0 prior to 8.0.12. It is, therefore, affected by a vulnerability as referenced in the SERVER-95524 advisory. - MongoDB Server may allow upsert operations retried within a transaction to violate...

7.5CVSS6.7AI score0.0037EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/09/10 12:00 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2025-10060

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - MongoDB Server may allow upsert operations retried within a transaction to violate unique index constraints, potentially causing an invariant failure and server...

7.5CVSS6.4AI score0.0037EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2025/09/07 9:24 p.m.22 views

CVE-2025-10060

MongoDB Server may allow upsert operations retried within a transaction to violate unique index constraints, potentially causing an invariant failure and server crash during commit. This issue may be triggered by improper WriteUnitOfWork state management. This issue affects MongoDB Server v6.0...

7.5CVSS6.8AI score0.0037EPSS
SaveExploits0References1
NVD
NVD
added 2025/09/05 9:15 p.m.7 views

CVE-2025-10060

MongoDB Server may allow upsert operations retried within a transaction to violate unique index constraints, potentially causing an invariant failure and server crash during commit. This issue may be triggered by improper WriteUnitOfWork state management. This issue affects MongoDB Server v6.0...

7.5CVSS0.0037EPSS
SaveExploits0References1
OSV
OSV
added 2025/09/05 9:15 p.m.8 views

UBUNTU-CVE-2025-10060

MongoDB Server may allow upsert operations retried within a transaction to violate unique index constraints, potentially causing an invariant failure and server crash during commit. This issue may be triggered by improper WriteUnitOfWork state management. This issue affects MongoDB Server v6.0...

7.5CVSS6.6AI score0.0037EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2025/09/05 8:39 p.m.20 views

CVE-2025-10060 MongoDB may be susceptible to Invariant Failure in Transactions due Upsert Operation

MongoDB Server may allow upsert operations retried within a transaction to violate unique index constraints, potentially causing an invariant failure and server crash during commit. This issue may be triggered by improper WriteUnitOfWork state management. This issue affects MongoDB Server v6.0...

6.5CVSS0.0037EPSS
SaveExploits0References1
CVE
CVE
added 2025/09/05 8:39 p.m.48 views

CVE-2025-10060

CVE-2025-10060 : MongoDB Server may allow upsert operations retried within a transaction to violate a unique index constraint, potentially causing an invariant failure and server crash during commit. Root cause: improper WriteUnitOfWork state management. Affected: MongoDB Server v6.0 before 6.0.2...

7.5CVSS6.3AI score0.0037EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2025/09/05 8:39 p.m.8 views

CVE-2025-10060 MongoDB may be susceptible to Invariant Failure in Transactions due Upsert Operation

MongoDB Server may allow upsert operations retried within a transaction to violate unique index constraints, potentially causing an invariant failure and server crash during commit. This issue may be triggered by improper WriteUnitOfWork state management. This issue affects MongoDB Server v6.0...

6.5CVSS6.4AI score
SaveExploits0References3
MongoDB
MongoDB
added 2025/09/05 8:39 p.m.21 views

MongoDB may be susceptible to Invariant Failure in Transactions due Upsert Operation

MongoDB Server may allow upsert operations retried within a transaction to violate unique index constraints, potentially causing an invariant failure and server crash during commit. This issue may be triggered by improper WriteUnitOfWork state management. This issue affects MongoDB Server v6.0...

7.5CVSS6.9AI score0.0037EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder