419 matches found
MAL-2025-16010 Malicious code in botkit-storage-mongo-updated (npm)
The package botkit-storage-mongo-updated was found to contain malicious code...
Malicious code in bangscripts-mongo (npm)
The package bangscripts-mongo was found to contain malicious code...
Security Bulletin: Multiple security vulnerabilities have been identified in IBM Db2 shipped with IBM Security Guardium Key Lifecycle Manager
Summary IBM Db2 is shipped as a component of IBM Security Key Lifecycle Manager SKLM/GKLM. Information about multiple security vulnerabilities affecting IBM Db2 has been published in security bulletins. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section...
MAL-2025-5940 Malicious code in node-mongo-orm (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f411be6c895479c4587ef217ba34c6089de665249a67a929c3d1bad146ee7ea5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in node-mongo-orm (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f411be6c895479c4587ef217ba34c6089de665249a67a929c3d1bad146ee7ea5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS : mongo-c-driver vulnerabilities (USN-7613-1)
The remote Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7613-1 advisory. Karman Liu discovered that mongo-c-driver did not correctly handle certain memory operations. An attacker could possibly use this...
Ubuntu: Security Advisory (USN-7613-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
USN-7613-1 mongo-c-driver vulnerabilities
Karman Liu discovered that mongo-c-driver did not correctly handle certain memory operations. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. CVE-2024-6381 Karman Liu discovered that mongo-c-driver did not correctly handle certain memory operation...
USN-7613-1: mongo-c-driver vulnerabilities
Karman Liu discovered that mongo-c-driver did not correctly handle certain memory operations. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. CVE-2024-6381 Karman Liu discovered that mongo-c-driver did not correctly handle certain memory operation...
Malicious code in waterline-mongo-native (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7b59ac87de0044bdf2154f6f15d3b82b244bc9c62b29835eb050f3b9b215437b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-4908 Malicious code in waterline-mongo-native (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7b59ac87de0044bdf2154f6f15d3b82b244bc9c62b29835eb050f3b9b215437b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in sails-mongo-ng (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 99dac97342765bfd9039172f29af80e20ed854d90c64b5f495703527188c6df9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in portfolio-config-manager-mongo (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b7313dd72cd35e9b2cc754bd7b41842071deb31b3be1bef658e61241e6bca17e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-4692 Malicious code in portfolio-config-manager-mongo (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b7313dd72cd35e9b2cc754bd7b41842071deb31b3be1bef658e61241e6bca17e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2022-32229
A information disclosure vulnerability exists in Rockert.Chat...
CVE-2021-21422
mongo-express is a web-based MongoDB admin interface, written with Node.js and express. 1: As mentioned in this issue: https://github.com/mongo-express/mongo-express/issues/577, when the content of a cell grows larger than supported size, clicking on a row will show full document unescaped, howev...
CVE-2020-24391
mongo-express before 1.0.0 offers support for certain advanced syntax but implements this in an unsafe way. NOTE: this may overlap CVE-2019-10769...
CVE-2019-10758
mongo-express before 0.54.0 is vulnerable to Remote Code Execution via endpoints that uses the toBSON method. A misuse of the vm dependency to perform exec commands in a non-safe environment...
Debian: Security Advisory (DLA-4175-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...