Lucene search
+L

6 matches found

EUVD
EUVD
added 2026/08/29 12:31 a.m.9 views

EUVD-2026-67941

A user able to submit SQL through an application using the MongoDB Connector for BI ODBC driver can supply a positioned-cursor statement whose cursor name exceeds the size of an internal fixed-length buffer. Because the name length is not bounded before the driver builds its diagnostic message,...

8.8CVSS6.1AI score0.00282EPSS
SaveExploits0References2
NVD
NVD
added 2026/08/28 10:16 p.m.10 views

CVE-2026-81532

A user able to submit SQL through an application using the MongoDB Connector for BI ODBC driver can supply a positioned-cursor statement whose cursor name exceeds the size of an internal fixed-length buffer. Because the name length is not bounded before the driver builds its diagnostic message,...

8.8CVSS0.00282EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/28 8:26 p.m.35 views

CVE-2026-81532 BI Connector ODBC Driver Improper Bounds Checking on Cursor Name Leading to Memory Corruption

A user able to submit SQL through an application using the MongoDB Connector for BI ODBC driver can supply a positioned-cursor statement whose cursor name exceeds the size of an internal fixed-length buffer. Because the name length is not bounded before the driver builds its diagnostic message,...

8.8CVSS0.00282EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/28 8:26 p.m.19 views

CVE-2026-81532

CVE-2026-81532 affects the MongoDB Connector for BI ODBC driver . The root cause is improper bounds checking on a positioned-cursor statement's cursor name : because the name length is not bounded before the driver builds its diagnostic message, an overly long name overwrites memory adjacent to a...

8.8CVSS6.1AI score0.00282EPSS
SaveExploits0References1
MongoDB
MongoDB
added 2026/08/28 8:26 p.m.13 views

BI Connector ODBC Driver Improper Bounds Checking on Cursor Name Leading to Memory Corruption

A user able to submit SQL through an application using the MongoDB Connector for BI ODBC driver can supply a positioned-cursor statement whose cursor name exceeds the size of an internal fixed-length buffer. Because the name length is not bounded before the driver builds its diagnostic message,...

8.8CVSS6.1AI score0.00282EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2026/08/28 12:00 a.m.10 views

PT-2026-83363

Name of the Vulnerable Software and Affected Versions MongoDB Connector for BI ODBC driver affected versions not specified Description An issue exists where a user submitting SQL through an application can provide a positioned-cursor statement with a cursor name that exceeds the size of an intern...

8.8CVSS6.2AI score0.00282EPSS
SaveExploits0References3
Rows per page
Query Builder