Lucene search
+L

512 matches found

Veracode
Veracode
•added 2019/05/02 6:02 a.m.•54 views

XML External Entity (XXE)

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The rh-php56 packages provide a recent stable release of PHP with PEAR 1.9.5 and enhanced language features including constant expressions, variadic functions, arguments unpacking, and the interactive debuger. T...

9.8CVSS7.4AI score0.37226EPSS
SaveExploits80References16Affected Software3
Veracode
Veracode
•added 2019/05/02 6:02 a.m.•56 views

Denial Of Service (DoS)

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The rh-php56 packages provide a recent stable release of PHP with PEAR 1.9.5 and enhanced language features including constant expressions, variadic functions, arguments unpacking, and the interactive debuger. T...

9.8CVSS7.4AI score0.37226EPSS
SaveExploits80References10Affected Software3
Veracode
Veracode
•added 2019/05/02 6:02 a.m.•59 views

Arbitrary Code Execution

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The rh-php56 packages provide a recent stable release of PHP with PEAR 1.9.5 and enhanced language features including constant expressions, variadic functions, arguments unpacking, and the interactive debuger. T...

9.8CVSS7.4AI score0.37226EPSS
SaveExploits80References7Affected Software4
Veracode
Veracode
•added 2019/05/02 6:02 a.m.•63 views

Denial Of Service (DoS)

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The rh-php56 packages provide a recent stable release of PHP with PEAR 1.9.5 and enhanced language features including constant expressions, variadic functions, arguments unpacking, and the interactive debuger. T...

9.8CVSS7.4AI score0.37226EPSS
SaveExploits80References13Affected Software3
Veracode
Veracode
•added 2019/05/02 5:39 a.m.•64 views

Denial Of Service (DoS)

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The php55 packages provide a recent stable release of PHP with the PEAR 1.9.4, memcache 3.0.8, and mongo 1.4.5 PECL extensions, and a number of additional utilities. The php55 packages have been upgraded to...

7.5CVSS9.2AI score0.53166EPSS
SaveExploits33References52Affected Software6
Veracode
Veracode
•added 2019/05/02 5:39 a.m.•55 views

Denial Of Service (DoS)

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The php55 packages provide a recent stable release of PHP with the PEAR 1.9.4, memcache 3.0.8, and mongo 1.4.5 PECL extensions, and a number of additional utilities. The php55 packages have been upgraded to...

7.5CVSS9.2AI score0.53166EPSS
SaveExploits33References24Affected Software5
Veracode
Veracode
•added 2019/05/02 5:39 a.m.•56 views

Denial Of Service (DoS)

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The php55 packages provide a recent stable release of PHP with the PEAR 1.9.4, memcache 3.0.8, and mongo 1.4.5 PECL extensions, and a number of additional utilities. The php55 packages have been upgraded to...

7.5CVSS9.2AI score0.53166EPSS
SaveExploits33References26Affected Software6
Tenable Nessus
Tenable Nessus
•added 2019/01/03 12:00 a.m.•44 views

Fedora 29 : mongo-c-driver (2018-2f8f5f75f1)

libbson 1.13.0 Features: - New functions to save and restore progress of a bsonitert: bsoniterkeylen, bsoniteroffset, and soniterinitfromdataatoffset Additional functions bsoniteroverwritedatetime, bsoniteroverwriteoid, and bsoniteroverwritetimestamp. All fixed-length BSON values can now be updat...

8.1CVSS7.5AI score0.02137EPSS
SaveExploits0References2
Check Point Advisories
Check Point Advisories
•added 2018/11/18 12:00 a.m.•12 views

Mongo Web Admin Information Disclosure

An information disclosure vulnerability exists in Mongo Web Admin. Successful exploitation of this vulnerability could allow a remote attacker to access to a restricted file...

3.1AI score
SaveExploits0
Packet Storm
Packet Storm
•added 2018/11/05 12:00 a.m.•162 views

Mongo Web Admin 6.0 Information Disclosure

Exploit Title: Mongo Web Admin 6.0 - Information Disclosure Dork: N/A Date: 2018-11-04 Exploit Author: Ihsan Sencan Vendor Homepage: http://www.mongoadmin.org/ Software Link: https://netix.dl.sourceforge.net/project/mongo-web-admin/mongoDesktopAdminSetup-beta-6.exe Version: 6.0 Category: Webapps...

7.4AI score
SaveExploits0
exploitpack
exploitpack
•added 2018/11/05 12:00 a.m.•21 views

Mongo Web Admin 6.0 - Information Disclosure

Mongo Web Admin 6.0 - Information Disclosure Exploit Title: Mongo Web Admin 6.0 - Information Disclosure Dork: N/A Date: 2018-11-04 Exploit Author: Ihsan Sencan Vendor Homepage: http://www.mongoadmin.org/ Software Link:...

7.2AI score
SaveExploits0
Fedora
Fedora
•added 2018/09/29 10:02 p.m.•30 views

[SECURITY] Fedora 29 Update: mongo-c-driver-1.13.0-1.fc29

mongo-c-driver is a client library written in C for MongoDB...

8.1CVSS2AI score0.02137EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2018/09/11 9:49 p.m.•27 views

CVE-2018-16790

bsoniternextinternal in bson-iter.c in libbson 1.12.0, as used in MongoDB mongo-c-driver and other products, has a heap-based buffer over-read via a crafted bson buffer...

8.1CVSS3.7AI score0.02137EPSS
SaveExploits0References1
Prion
Prion
•added 2018/09/10 5:29 a.m.•23 views

Heap overflow

bsoniternextinternal in bson-iter.c in libbson 1.12.0, as used in MongoDB mongo-c-driver and other products, has a heap-based buffer over-read via a crafted bson buffer...

5.8CVSS7.8AI score0.02137EPSS
SaveExploits0References3Affected Software1
UbuntuCve
UbuntuCve
•added 2018/09/10 5:29 a.m.•23 views

CVE-2018-16790

bsoniternextinternal in bson-iter.c in libbson 1.12.0, as used in MongoDB mongo-c-driver and other products, has a heap-based buffer over-read via a crafted bson buffer...

8.1CVSS7.1AI score0.02137EPSS
SaveExploits0References4
NVD
NVD
•added 2018/09/10 5:29 a.m.•24 views

CVE-2018-16790

bsoniternextinternal in bson-iter.c in libbson 1.12.0, as used in MongoDB mongo-c-driver and other products, has a heap-based buffer over-read via a crafted bson buffer...

8.1CVSS8AI score0.02137EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2018/09/10 5:00 a.m.•43 views

CVE-2018-16790

bsoniternextinternal in bson-iter.c in libbson 1.12.0, as used in MongoDB mongo-c-driver and other products, has a heap-based buffer over-read via a crafted bson buffer...

7.9AI score0.02137EPSS
SaveExploits0References3
CVE
CVE
•added 2018/09/10 5:00 a.m.•119 views

CVE-2018-16790

CVE-2018-16790 affects libbson 1.12.0 (used by MongoDB’s libbson and the mongo-c-driver). The vulnerability is a heap-based buffer over-read triggered by a crafted BSON buffer in bson_iter_next_internal, as described for libbson 1.12.0. This can impact applications that consume BSON via the affec...

8.1CVSS7.8AI score0.02137EPSS
SaveExploits0References4Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/09/10 12:00 a.m.•4 views

CVE-2018-16790: Out-of-bounds Read

bsoniternextinternal in bson-iter.c in libbson 1.12.0, as used in MongoDB mongo-c-driver and other products, has a heap-based buffer over-read via a crafted bson buffer...

8.1CVSS7.6AI score0.02137EPSS
SaveExploits0References2
GitLab Advisory Database
GitLab Advisory Database
•added 2018/07/12 12:00 a.m.•55 views

Eve allows execution of arbitrary code

io/mongo/parser.py in Eve aka pyeve before 0.7.5 allows remote attackers to execute arbitrary code via Code Injection in the where parameter...

9.8CVSS9.9AI score0.06201EPSS
SaveExploits0References6Affected Software1
Rows per page
Query Builder