CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

110 matches found

Cvelist•added 2022/02/28 8:14 p.m.•50 views

CVE-2021-45414

A Remote Code Execution RCE vulnerability exists in DataRobot through 2021-10-28 because it allows submission of a Docker environment or Java driver...

9.9AI score0.03499EPSS

SaveExploits2References1

CVE•added 2022/02/28 8:14 p.m.•118 views

CVE-2021-45414

CVE-2021-45414 describes a Remote Code Execution vulnerability in DataRobot (through 2021-10-28) that permits submission of a Docker environment or Java driver, enabling arbitrary code execution on the server. Documentation confirms affected product scope as DataRobot and notes high-severity impa...

9.8CVSS9.6AI score0.03499EPSS

SaveExploits2References1Affected Software1

Positive Technologies•added 2022/02/28 12:00 a.m.•10 views

PT-2022-12346

Name of the Vulnerable Software and Affected Versions DataRobot versions prior to 2021-10-28 Description A Remote Code Execution RCE issue exists because it allows submission of a Docker environment or Java driver. Recommendations For versions prior to 2021-10-28, update to a version released aft...

9.8CVSS0.03499EPSS

SaveExploits2References5

Rapid7 Vulnerability Database (full)•added 2022/02/28 12:00 a.m.•10 views

CVE-2021-45414: Undefined Security Weakness

A Remote Code Execution RCE vulnerability exists in DataRobot through 2021-10-28 because it allows submission of a Docker environment or Java driver...

9.8CVSS8.3AI score0.03499EPSS

SaveExploits2References1

RedHat Linux•added 2021/12/02 4:17 p.m.•16 views

mongo-java-driver: client-side field level encryption not verifying KMS host name

Specific versions of the Java driver that support client-side field level encryption CSFLE fail to perform correct host name verification on the KMS server’s certificate. This vulnerability in combination with a privileged network position active MITM attack could result in interception of traffi...

6.8CVSS5.8AI score0.00436EPSS

SaveExploits0References4

RedHat Linux•added 2021/11/23 10:34 a.m.•19 views

mongo-java-driver: client-side field level encryption not verifying KMS host name

6.8CVSS5.8AI score0.00436EPSS

SaveExploits0References4

RedHat Linux•added 2021/03/16 11:57 a.m.•90 views

Moderate: Red Hat Security Advisory: Red Hat Integration Debezium 1.4.2 security update

An update for Debezium MongoDB connector is now available for Red Hat Integration. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

6.8CVSS6.8AI score0.00436EPSS

SaveExploits0References3

RedHat Linux•added 2021/03/16 11:57 a.m.•17 views

mongo-java-driver: client-side field level encryption not verifying KMS host name

6.8CVSS5.8AI score0.00436EPSS

SaveExploits0References4

RedhatCVE•added 2021/03/02 7:03 p.m.•35 views

CVE-2021-20328

6.8CVSS6.5AI score0.00436EPSS

SaveExploits0References3

osv_cve•added 2021/02/25 5:15 p.m.•37 views

CVE-2021-20328

6.8CVSS6.3AI score

SaveExploits0References1

NVD•added 2021/02/25 5:15 p.m.•36 views

CVE-2021-20328

6.8CVSS0.00436EPSS

SaveExploits0References1

UbuntuCve•added 2021/02/25 5:15 p.m.•44 views

CVE-2021-20328

6.8CVSS6.8AI score0.00436EPSS

SaveExploits0References2

osv_ubuntu•added 2021/02/25 5:15 p.m.•29 views

UBUNTU-CVE-2021-20328

6.8CVSS6.8AI score0.00436EPSS

SaveExploits0References3

Prion•added 2021/02/25 5:15 p.m.•37 views

Design/Logic Flaw

4.3CVSS6.5AI score0.00436EPSS

SaveExploits0References1Affected Software2

attackerkb•added 2021/02/25 5:00 p.m.•13 views

CVE-2021-20328

6.8CVSS6.6AI score0.00436EPSS

SaveExploits0References2Affected Software4

vulnersOsv•added 2021/02/25 4:30 p.m.•5 views

ai.tripl:arc-mongodb-pipeline-plugin_2.12 (>=1.3.0, <=1.4.0), be.personify.iam:personify-scim-server (>=1.1.5.release, <=1.2.5.release) +346 more potentially affected by CVE-2021-20328 via org.mongodb:mongo-java-driver (>=3.12.0, <=3.12.7)

org.mongodb:mongo-java-driver MAVEN version =3.12.0, =1.3.0, =1.1.5.release, =1.3.0, =1.3.0, =1.2.0, =1.3.0, =1.3.0, =1.3.0, =1.3.0, =3.13.0, =3.13.0, =3.15.3, =3.16.3 - ch.exense.step:step-controller-plugins-measurements-jdbc 3.15.3 - ch.exense.step:step-controller-plugins-measurements-log 3.15....

6.8CVSS0.00436EPSS

SaveExploits0

Mend•added 2021/02/25 4:30 p.m.•25 views

CVE-2021-20328

7.4CVSS0.00436EPSS

SaveExploits0References2

CVE•added 2021/02/25 4:30 p.m.•171 views

CVE-2021-20328

CVE-2021-20328 affects specific versions of the MongoDB Java driver that support Field Level Encryption (CSFLE). The root cause is improper host name verification on the KMS server’s certificate, enabling a privileged MITM attacker to intercept traffic between the Java driver and the KMS service ...

6.8CVSS6.4AI score0.00436EPSS

SaveExploits0References1Affected Software1

Vulnrichment•added 2021/02/25 4:30 p.m.•26 views

CVE-2021-20328 MongoDB Java driver client-side field level encryption not verifying KMS host name

6.4CVSS6.5AI score0.00436EPSS

SaveExploits0References1

Cvelist•added 2021/02/25 4:30 p.m.•96 views

CVE-2021-20328 MongoDB Java driver client-side field level encryption not verifying KMS host name

6.4CVSS6.8AI score0.00436EPSS

SaveExploits0References1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by