Lucene search
+L

75 matches found

Cvelist
Cvelist
added 2026/01/22 10:32 p.m.33 views

CVE-2025-55705 EVMAPA Insufficient Session Expiration

This vulnerability occurs when the system permits multiple simultaneous connections to the backend using the same charging station ID. This can result in unauthorized access, data inconsistency, or potential manipulation of charging sessions. The lack of proper session management and expiration...

7.3CVSS0.003EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/01/22 10:32 p.m.4 views

CVE-2025-55705 EVMAPA Insufficient Session Expiration

This vulnerability occurs when the system permits multiple simultaneous connections to the backend using the same charging station ID. This can result in unauthorized access, data inconsistency, or potential manipulation of charging sessions. The lack of proper session management and expiration...

7.3CVSS5.5AI score0.003EPSS
SaveExploits0References2
CVE
CVE
added 2026/01/22 10:32 p.m.31 views

CVE-2025-55705

CVE-2025-55705 involves charging-station backends allowing multiple simultaneous connections with the same station ID due to insufficient session management and expiration controls. Affected component is the charging-station/session backend; outcome includes unauthorized access, data inconsistenc...

9.8CVSS5.5AI score0.003EPSS
SaveExploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/01/22 10:32 p.m.4 views

CVE-2025-55705

This vulnerability occurs when the system permits multiple simultaneous connections to the backend using the same charging station ID. This can result in unauthorized access, data inconsistency, or potential manipulation of charging sessions. The lack of proper session management and expiration...

7.3CVSS5.3AI score0.003EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/01/22 12:0 a.m.24 views

PT-2026-4302

Name of the Vulnerable Software and Affected Versions Charging station software affected versions not specified Description The system allows multiple simultaneous connections to the backend using the same charging station ID. This can lead to unauthorized access, data inconsistency, or...

7.3CVSS5.3AI score0.003EPSS
SaveExploits0References4
Packet Storm News
Packet Storm News
added 2026/01/01 12:0 a.m.6 views

From Consensus to Chaos: A Vulnerability Assessment of the RAFT Algorithm

In recent decades, the RAFT distributed consensus algorithm has become a main pillar of the distributed systems ecosystem, ensuring data consistency and fault tolerance across multiple nodes. Although the fact that RAFT is well known for its simplicity, reliability, and efficiency, its security...

6.8AI score
SaveExploits0
SUSE CVE
SUSE CVE
added 2025/12/23 3:51 a.m.12 views

SUSE CVE-2025-68337

In the Linux kernel, the following vulnerability has been resolved: jbd2: avoid bugon in jbd2journalgetcreateaccess when file system corrupted There's issue when file system corrupted: ------------ cut here ------------ kernel BUG at fs/jbd2/transaction.c:1289! Oops: invalid opcode: 0000 1 SMP...

5.5CVSS5.9AI score0.00476EPSS
SaveExploits0References21
NVD
NVD
added 2025/12/22 5:16 p.m.11 views

CVE-2025-68337

In the Linux kernel, the following vulnerability has been resolved: jbd2: avoid bugon in jbd2journalgetcreateaccess when file system corrupted There's issue when file system corrupted: ------------ cut here ------------ kernel BUG at fs/jbd2/transaction.c:1289! Oops: invalid opcode: 0000 1 SMP...

7.5CVSS0.00476EPSS
SaveExploits0References9
RedhatCVE
RedhatCVE
added 2025/12/15 9:29 p.m.15 views

CVE-2025-14345

A post-authentication flaw in the network two-phase commit protocol used for cross-shard transactions in MongoDB Server may lead to logical data inconsistencies under specific conditions which are not predictable and exist for a very short period of time. This error can cause the transaction...

5.4CVSS6.7AI score0.00219EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2025/12/12 12:0 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2025-14345

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A post-authentication flaw in the network two-phase commit protocol used for cross-shard transactions in MongoDB Server may lead to logical data inconsistencies...

5.4CVSS5.9AI score0.00219EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/12/09 6:30 p.m.10 views

EUVD-2025-201945

A post-authentication flaw in the network two-phase commit protocol used for cross-shard transactions in MongoDB Server may lead to logical data inconsistencies under specific conditions which are not predictable and exist for a very short period of time. This error can cause the transaction...

4.2CVSS6.2AI score0.00219EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/12/09 3:0 p.m.33 views

CVE-2025-14345 Cross-Shard Failovers May Lead to Partial Transaction Commit in MongoDB Server

A post-authentication flaw in the network two-phase commit protocol used for cross-shard transactions in MongoDB Server may lead to logical data inconsistencies under specific conditions which are not predictable and exist for a very short period of time. This error can cause the transaction...

4.2CVSS0.00219EPSS
SaveExploits0References1
OSV
OSV
added 2025/12/09 3:0 p.m.7 views

CVE-2025-14345 Cross-Shard Failovers May Lead to Partial Transaction Commit in MongoDB Server

A post-authentication flaw in the network two-phase commit protocol used for cross-shard transactions in MongoDB Server may lead to logical data inconsistencies under specific conditions which are not predictable and exist for a very short period of time. This error can cause the transaction...

2.3CVSS5.9AI score
SaveExploits0References3
CVE
CVE
added 2025/12/09 3:0 p.m.522 views

CVE-2025-14345

CVE-2025-14345 describes a post-authentication flaw in MongoDB Server’s network two‑phase commit protocol used for cross‑shard transactions. The issue can cause the transaction coordination logic to misinterpret a transaction as committed, leading to inconsistent shard state and potential low int...

5.4CVSS6.3AI score0.00219EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2025/12/09 12:0 a.m.9 views

MongoDB Server 安全漏洞

MongoDB Server is a set of open source NoSQL databases from the American company MongoDB. The database provides collection-oriented storage, dynamic querying, data replication and automatic failover. A security vulnerability exists in MongoDB Server versions prior to 8.0.16, prior to 7.0.26, and...

5.4CVSS6.2AI score0.00219EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/12/09 12:0 a.m.6 views

PT-2025-49980

Name of the Vulnerable Software and Affected Versions MongoDB Server versions prior to 8.0.16 MongoDB Server versions prior to 7.0.26 MongoDB Server versions prior to 8.2.2 Description A flaw exists in the network two-phase commit protocol used for cross-shard transactions. This issue can lead to...

5.4CVSS5.8AI score0.00219EPSS
SaveExploits0References12
FreeBSD
FreeBSD
added 2025/12/09 12:0 a.m.9 views

MongoDB Server -- Improper Locking

https://jira.mongodb.org/browse/SERVER-106075 reports: A post-authenticationflaw in the network two-phase commit protocol used for cross-shard transactions in MongoDB Server may lead to logical data inconsistencies under specific conditions which are not predictable and exist for a very short...

5.4CVSS6.9AI score0.00219EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
added 2025/11/13 7:1 p.m.6 views

database/sql: Postgres Scan Race Condition

A flaw was found in database/sql. Concurrent queries can produce unexpected results when a query is cancelled during a Scan method call on returned Rows, creating a race condition. This vulnerability allows an attacker who can initiate and cancel queries to trigger this condition, possibly leadin...

7CVSS6AI score0.00355EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
added 2025/11/13 3:20 p.m.5 views

database/sql: Postgres Scan Race Condition

A flaw was found in database/sql. Concurrent queries can produce unexpected results when a query is cancelled during a Scan method call on returned Rows, creating a race condition. This vulnerability allows an attacker who can initiate and cancel queries to trigger this condition, possibly leadin...

7CVSS6AI score0.00355EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
added 2025/11/11 7:19 p.m.5 views

database/sql: Postgres Scan Race Condition

A flaw was found in database/sql. Concurrent queries can produce unexpected results when a query is cancelled during a Scan method call on returned Rows, creating a race condition. This vulnerability allows an attacker who can initiate and cancel queries to trigger this condition, possibly leadin...

7CVSS6AI score0.00355EPSS
SaveExploits0References8
Rows per page
Query Builder