EUVD-2020-0391

Malware in sbrugna...

EUVD-2020-4450

Malware in sbrugna...

EUVD-2021-1199

Malware in sbrugna...

EUVD-2024-33350

Malicious code in bioql PyPI...

EUVD-2022-0814

Malicious code in bioql PyPI...

EUVD-2024-31961

Malicious code in bioql PyPI...

EUVD-2024-2101

Malicious code in bioql PyPI...

EUVD-2022-4714

Malicious code in bioql PyPI...

EUVD-2024-31963

Malicious code in bioql PyPI...

EUVD-2023-1678

Malicious code in bioql PyPI...

EUVD-2025-15446

Malicious code in bioql PyPI...

BIT-MONGODB-2024-10921 Improper neutralization of null bytes may lead to buffer over-reads in MongoDB Server

An authorized user may trigger crashes or receive the contents of buffer over-reads of Server memory by issuing specially crafted requests that construct malformed BSON in the MongoDB Server. This issue affects MongoDB Server v5.0 versions prior to 5.0.30 , MongoDB Server v6.0 versions prior to...

BIT-MONGODB-2024-3374 MongoDB Server (mongod) may crash when generating ftdc

An unauthenticated user can trigger a fatal assertion in the server while generating ftdc diagnostic metrics due to attempting to build a BSON object that exceeds certain memory sizes. This issue affects MongoDB Server v5.0 versions prior to and including 5.0.16 and MongoDB Server v6.0 versions...

BIT-MONGODB-2025-0755 MongoDB C Driver bson library may be susceptible to buffer overflow

The various bsonappend functions in the MongoDB C driver library may be susceptible to buffer overflow when performing operations that could result in a final BSON document which exceeds the maximum allowable size INT32MAX, resulting in a segmentation fault and possible application crash. This...

BIT-MONGODB-2024-3372 MongoDB Server may have unexpected application behaviour due to invalid BSON

Improper validation of certain metadata input may result in the server not correctly serialising BSON. This can be performed pre-authentication and may cause unexpected application behavior including unavailability of serverStatus responses. This issue affects MongoDB Server v7.0 versions prior t...

Linux Distros Unpatched Vulnerability : CVE-2024-3374

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An unauthenticated user can trigger a fatal assertion in the server while generating ftdc diagnostic metrics due to attempting to build a BSON object that excee...

Linux Distros Unpatched Vulnerability : CVE-2024-3372

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper validation of certain metadata input may result in the server not correctly serialising BSON. This can be performed pre-authentication and may cause...

Linux Distros Unpatched Vulnerability : CVE-2019-2391

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect parsing of certain JSON input may result in js-bson not correctly serializing BSON. This may cause unexpected application behaviour including data...

Linux Distros Unpatched Vulnerability : CVE-2025-40906

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - BSON::XS versions 0.8.4 and earlier for Perl includes a bundled libbson 1.1.7, which has several vulnerabilities. Those include CVE-2017-14227, CVE-2018-16790,...

Linux Distros Unpatched Vulnerability : CVE-2020-7610

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - All versions of bson before 1.1.4 are vulnerable to Deserialization of Untrusted Data. The package will ignore an unknown value for an object's bsotype, leading...