Lucene search
+L

166 matches found

OSV
OSV
added 2022/05/24 7:2 p.m.42 views

GHSA-P9RV-QGQW-JX2W MongoDB C# Driver Risk of Exposing Authentication Data via Command Listener

Specific versions of the MongoDB C Driver may erroneously publish events containing authentication-related data to a command listener configured by an application. The published events may contain security-sensitive data when commands such as "saslStart", "saslContinue", "isMaster", "createUser",...

4.9CVSS4.8AI score0.00623EPSS
SaveExploits0References3
NVD
NVD
added 2021/05/13 8:15 a.m.26 views

CVE-2021-20331

Specific versions of the MongoDB C Driver may erroneously publish events containing authentication-related data to a command listener configured by an application. The published events may contain security-sensitive data when commands such as "saslStart", "saslContinue", "isMaster", "createUser",...

4.9CVSS0.00623EPSS
SaveExploits0References1
OSV
OSV
added 2021/05/13 8:15 a.m.10 views

CVE-2021-20331

Specific versions of the MongoDB C Driver may erroneously publish events containing authentication-related data to a command listener configured by an application. The published events may contain security-sensitive data when commands such as "saslStart", "saslContinue", "isMaster", "createUser",...

4.9CVSS4.8AI score
SaveExploits0References1
Prion
Prion
added 2021/05/13 8:15 a.m.24 views

Design/Logic Flaw

Specific versions of the MongoDB C Driver may erroneously publish events containing authentication-related data to a command listener configured by an application. The published events may contain security-sensitive data when commands such as "saslStart", "saslContinue", "isMaster", "createUser",...

3.5CVSS5.3AI score0.00623EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2021/05/13 7:40 a.m.32 views

CVE-2021-20331 MongoDB C# Driver may publish events containing authentication-related data to a command listener configured by an application

Specific versions of the MongoDB C Driver may erroneously publish events containing authentication-related data to a command listener configured by an application. The published events may contain security-sensitive data when commands such as "saslStart", "saslContinue", "isMaster", "createUser",...

4.2CVSS5.6AI score0.00623EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2021/05/13 7:40 a.m.12 views

CVE-2021-20331 MongoDB C# Driver may publish events containing authentication-related data to a command listener configured by an application

Specific versions of the MongoDB C Driver may erroneously publish events containing authentication-related data to a command listener configured by an application. The published events may contain security-sensitive data when commands such as "saslStart", "saslContinue", "isMaster", "createUser",...

4.2CVSS4.9AI score0.00623EPSS
SaveExploits0References1
CNVD
CNVD
added 2021/03/31 12:0 a.m.8 views

MongoDB mongo-c-driver suffers from denial of service vulnerability

MongoDB is a nosql database based on distributed file storage. A denial of service vulnerability exists in MongoDB mongo-c-driver. An attacker can exploit this vulnerability to cause access out of bounds...

6.9AI score
SaveExploits0
RedHat Linux
RedHat Linux
added 2020/12/22 9:27 a.m.147 views

Moderate: Red Hat Security Advisory: mariadb-connector-c security, bug fix, and enhancement update

An update for mariadb-connector-c is now available for Red Hat Enterprise Linux 8.0 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

8.8CVSS6.6AI score0.03485EPSS
SaveExploits0References8
Fedora
Fedora
added 2020/11/11 1:32 a.m.64 views

[SECURITY] Fedora 31 Update: mariadb-connector-c-3.1.11-1.fc31

The MariaDB Native Client library C driver is used to connect applications developed in C/C++ to MariaDB and MySQL databases...

8.8CVSS2.6AI score0.03049EPSS
SaveExploits0
OpenVAS
OpenVAS
added 2020/11/11 12:0 a.m.36 views

Fedora: Security Advisory for mariadb-connector-c (FEDORA-2020-ac2d47d89a)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

8.8CVSS7.3AI score0.03049EPSS
SaveExploits0References2
Fedora
Fedora
added 2020/11/09 1:21 a.m.46 views

[SECURITY] Fedora 32 Update: mariadb-connector-c-3.1.11-1.fc32

The MariaDB Native Client library C driver is used to connect applications developed in C/C++ to MariaDB and MySQL databases...

6.8CVSS2.6AI score0.03049EPSS
SaveExploits0
OpenVAS
OpenVAS
added 2020/11/09 12:0 a.m.41 views

Fedora: Security Advisory for mariadb-connector-c (FEDORA-2020-b995eb2973)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

6.8CVSS7AI score0.03049EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2019/10/04 12:0 a.m.15 views

PT-2019-3520

Name of the Vulnerable Software and Affected Versions Android versions prior to the fixed version Description The issue is related to a use-after-free vulnerability in the Android kernel, specifically in the binder.c driver. This vulnerability allows an elevation of privilege from an application ...

9.8CVSS7.1AI score0.43823EPSS
SaveExploits28References97
OpenVAS
OpenVAS
added 2019/08/16 12:0 a.m.11 views

Fedora Update for mariadb-connector-c FEDORA-2019-60befaed69

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2019/01/03 12:0 a.m.40 views

Fedora 29 : mongo-c-driver (2018-2f8f5f75f1)

libbson 1.13.0 Features: - New functions to save and restore progress of a bsonitert: bsoniterkeylen, bsoniteroffset, and soniterinitfromdataatoffset Additional functions bsoniteroverwritedatetime, bsoniteroverwriteoid, and bsoniteroverwritetimestamp. All fixed-length BSON values can now be updat...

8.1CVSS7.5AI score0.02137EPSS
SaveExploits0References2
Fedora
Fedora
added 2018/11/27 3:31 a.m.15 views

[SECURITY] Fedora 29 Update: mariadb-connector-c-3.0.7-1.fc29

The MariaDB Native Client library C driver is used to connect applications developed in C/C++ to MariaDB and MySQL databases...

2.6AI score
SaveExploits0
Fedora
Fedora
added 2018/09/29 10:2 p.m.25 views

[SECURITY] Fedora 29 Update: mongo-c-driver-1.13.0-1.fc29

mongo-c-driver is a client library written in C for MongoDB...

8.1CVSS2AI score0.02137EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2018/09/11 9:49 p.m.21 views

CVE-2018-16790

bsoniternextinternal in bson-iter.c in libbson 1.12.0, as used in MongoDB mongo-c-driver and other products, has a heap-based buffer over-read via a crafted bson buffer...

8.1CVSS3.7AI score0.02137EPSS
SaveExploits0References1
Prion
Prion
added 2018/09/10 5:29 a.m.17 views

Heap overflow

bsoniternextinternal in bson-iter.c in libbson 1.12.0, as used in MongoDB mongo-c-driver and other products, has a heap-based buffer over-read via a crafted bson buffer...

5.8CVSS7.8AI score0.02137EPSS
SaveExploits0References3Affected Software1
UbuntuCve
UbuntuCve
added 2018/09/10 5:29 a.m.16 views

CVE-2018-16790

bsoniternextinternal in bson-iter.c in libbson 1.12.0, as used in MongoDB mongo-c-driver and other products, has a heap-based buffer over-read via a crafted bson buffer...

8.1CVSS7.1AI score0.02137EPSS
SaveExploits0References4
Rows per page
Query Builder