512 matches found
Apache Airflow 信任管理问题漏洞
Apache Airflow is the United States Apache Apache Foundation's set of open source platform for creating, managing and monitoring workflow. The platform is scalable and dynamic monitoring and other characteristics. Apache Airflow suffers from a trust management issue vulnerability that stems from...
CVE-2024-25141: Improper Certificate Validation
When ssl was enabled for Mongo Hook, default settings included "allowinsecure" which caused that certificates were not validated. This was unexpected and undocumented. Users are recommended to upgrade to version 4.0.0, which fixes this issue...
PT-2024-20775
Name of the Vulnerable Software and Affected Versions apache-airflow-providers-mongo versions prior to 4.0.0 Description The issue arises when SSL is enabled for the Mongo Hook, and the default settings include allow insecure, which causes certificates not to be validated. This behavior is...
[SECURITY] Fedora 38 Update: mongo-c-driver-1.24.3-2.fc38
mongo-c-driver is a client library written in C for MongoDB...
Fedora: Security Advisory for mongo-c-driver (FEDORA-2024-fb4958e901)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 38 : mongo-c-driver (2024-fb4958e901)
The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-fb4958e901 advisory. - fix: bsonutf8validate on some inputs leads to an infinite loop CVE-2023-0437 Tenable has extracted the preceding description block directly from t...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.14.0 security update
Red Hat OpenShift Container Platform release 4.14.0 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.14. Red Hat Product Security has rated this update as having a...
Sirius - First Truly Open-Source General Purpose Vulnerability Scanner
Sirius is the first truly open-source general purpose vulnerability scanner. Today, the information security community remains the best and most expedient source for cybersecurity intelligence. The community itself regularly outperforms commercial vendors. This is the primary advantage Sirius Sca...
Jumpserver Code Injection Vulnerability
Jumpserver is an open source bastion machine from Hangzhou Feizhiyun Information Technology Co. in China. JumpServer suffers from a code injection vulnerability that originates from an authenticated user who can execute arbitrary commands using a vulnerability in a MongoDB session, leading to...
Malicious code in mmolecule-mongo (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 58a366e3569240ed527be31fd441fd81fffa6cda4ef1aafff18620fb71f1b433 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2023-7972 Malicious code in mmolecule-mongo (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 58a366e3569240ed527be31fd441fd81fffa6cda4ef1aafff18620fb71f1b433 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malware in mmolecule-mongo
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Malware in @lg-private/mongo-nav
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Moderate: Red Hat Security Advisory: OpenShift Container Platform 4.13.0 security update
Red Hat OpenShift Container Platform release 4.13.0 is now available with updates to packages and images that fix several bugs and add enhancements. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which...
Moderate: Red Hat Security Advisory: OpenShift Container Platform 4.9.59 security update
Red Hat OpenShift Container Platform release 4.9.59 is now available with updates to packages and images that fix several bugs and add enhancements. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which...
Security Bulletin: Multiple vulnerabilities in the mongo-tools utility affect IBM WebSphere Automation
Summary There are multiple vulnerabilities in the mongo-tools utility used in IBM WebSphere Automation. These have been addressed in the remediation section. Vulnerability Details CVEID:CVE-2022-41715 DESCRIPTION: Golang Go is vulnerable to a denial of service, caused by the compilation of regula...
Moderate: Red Hat Security Advisory: OpenShift Container Platform 4.10.55 security update
Red Hat OpenShift Container Platform release 4.10.55 is now available with updates to packages and images that fix several bugs and add enhancements. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, whic...
Moderate: Red Hat Security Advisory: OpenShift Container Platform 4.12.9 security update
Red Hat OpenShift Container Platform release 4.12.9 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.12. Red Hat Product Security has rated this update as having a...
SUSE CVE-2013-2132
bson/cbsonmodule.c in the mongo-python-driver aka. pymongo before 2.5.2, as used in MongoDB, allows context-dependent attackers to cause a denial of service NULL pointer dereference and crash via vectors related to decoding of an "invalid DBRef."...