Lucene search
K

22 matches found

vulnersOsv
vulnersOsv
added 2026/04/27 12:0 a.m.3 views

org.springframework.ai:spring-ai-starter-vector-store-mongodb-atlas (>=1.1.0 <=1.1.4) potentially affected by CVE-2026-40967 via org.springframework.ai:spring-ai-mongodb-atlas-store (>=1.1.0-M1 <=1.1.4)

org.springframework.ai:spring-ai-mongodb-atlas-store MAVEN version =1.1.0-M1, =1.1.0, =1.1.4 Source cves: CVE-2026-40967 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORKAI-16321392...

8.6CVSS5.8AI score0.00031EPSS
Exploits0
EUVD
EUVD
added 2025/12/01 4:16 p.m.0 views

EUVD-2025-200052

Malicious code in mongodb-atlas-cli-toc-generator npm...

6.6AI score
Exploits0
OSV
OSV
added 2025/12/01 4:16 p.m.2 views

MAL-2025-191517 Malicious code in mongodb-atlas-cli-toc-generator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b43eaf31369a3ecfac60651fb3c08bc314680fd9b476179d902bbfee64b0d62 The package mongodb-atlas-cli-toc-generator was found to contain malicious code...

6.8AI score
Exploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/12/01 4:16 p.m.7 views

Malicious code in mongodb-atlas-cli-toc-generator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b43eaf31369a3ecfac60651fb3c08bc314680fd9b476179d902bbfee64b0d62 The package mongodb-atlas-cli-toc-generator was found to contain malicious code...

7AI score
Exploits0
EUVD
EUVD
added 2025/10/23 3:32 a.m.1 views

EUVD-2025-35637

Incorrect Default Permissions vulnerability in MongoDB Atlas SQL ODBC driver on Windows allows Privilege Escalation.This issue affects MongoDB Atlas SQL ODBC driver: from 1.0.0 through 2.0.0...

8.8CVSS7AI score0.00018EPSS
Exploits0References2
NVD
NVD
added 2025/10/23 1:15 a.m.6 views

CVE-2025-11575

Incorrect Default Permissions vulnerability in MongoDB Atlas SQL ODBC driver on Windows allows Privilege Escalation.This issue affects MongoDB Atlas SQL ODBC driver: from 1.0.0 through 2.0.0...

8.8CVSS0.00018EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/10/23 12:22 a.m.1 views

CVE-2025-11575 MongoDB Atlas SQL ODBC driver installation via MSI may leave ACLs unset on custom installation directories

Incorrect Default Permissions vulnerability in MongoDB Atlas SQL ODBC driver on Windows allows Privilege Escalation.This issue affects MongoDB Atlas SQL ODBC driver: from 1.0.0 through 2.0.0...

8.8CVSS7.2AI score0.00018EPSS
Exploits0References1
CVE
CVE
added 2025/10/23 12:22 a.m.15 views

CVE-2025-11575

CVE-2025-11575 affects MongoDB Atlas SQL ODBC driver for Windows, with an Incorrect Default Permissions issue that could allow Privilege Escalation. Affected versions are 1.0.0 through 2.0.0. The documents do not provide explicit exploitation details or a published fix/remediation; additional spe...

8.8CVSS7.2AI score0.00018EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/10/23 12:22 a.m.3 views

CVE-2025-11575 MongoDB Atlas SQL ODBC driver installation via MSI may leave ACLs unset on custom installation directories

Incorrect Default Permissions vulnerability in MongoDB Atlas SQL ODBC driver on Windows allows Privilege Escalation.This issue affects MongoDB Atlas SQL ODBC driver: from 1.0.0 through 2.0.0...

8.8CVSS0.00018EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/10/23 12:0 a.m.1 views

MongoDB Atlas SQL ODBC driver 安全漏洞

MongoDB Atlas SQL ODBC driver is a database component of MongoDB open source. A security vulnerability exists in the MongoDB Atlas SQL ODBC driver versions 1.0.0 through 2.0.0, which stems from incorrect default permissions and could lead to elevated privileges...

8.8CVSS7.2AI score0.00018EPSS
Exploits0References1
MongoDB
MongoDB
added 2025/10/09 2:14 p.m.6 views

MongoDB Atlas SQL ODBC driver installation via MSI may leave ACLs unset on custom installation directories

Incorrect Default Permissions vulnerability in MongoDB Atlas SQL ODBC driver on Windows allows Privilege Escalation.This issue affects MongoDB Atlas SQL ODBC driver: from 1.0.0 through 2.0.0...

8.8CVSS7.6AI score0.00018EPSS
Exploits0References1Affected Software1
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2023-12491

Malicious code in bioql PyPI...

7.5CVSS7.6AI score0.00294EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2025-22952

Malicious code in bioql PyPI...

9.8CVSS6.5AI score0.00414EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/07/28 8:28 p.m.1 views

CVE-2025-54428 RevelaCode exposes Sensitive MongoDB Atlas URI in .env (potential credential leak)

RevelaCode is an AI-powered faith-tech project that decodes biblical verses, prophecies and global events into accessible language. In versions below 1.0.1, a valid MongoDB Atlas URI with embedded username and password was accidentally committed to the public repository. This could allow...

9.8CVSS6.6AI score0.00414EPSS
Exploits0References2
CVE
CVE
added 2025/07/28 8:28 p.m.12 views

CVE-2025-54428

CVE-2025-54428 affects RevelaCode prior to 1.0.1. A valid MongoDB Atlas URI with embedded credentials was committed to the public repository, enabling potential unauthorized access to production or staging databases and possible data exfiltration, modification, or deletion. The issue is resolved ...

9.8CVSS6.6AI score0.00414EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/07/28 8:28 p.m.5 views

CVE-2025-54428 RevelaCode exposes Sensitive MongoDB Atlas URI in .env (potential credential leak)

RevelaCode is an AI-powered faith-tech project that decodes biblical verses, prophecies and global events into accessible language. In versions below 1.0.1, a valid MongoDB Atlas URI with embedded username and password was accidentally committed to the public repository. This could allow...

9.8CVSS0.00414EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/07/28 12:0 a.m.1 views

RevelaCode 安全漏洞

RevelaCode is an AI program for interpreting Bible verses by the individual developer Musombi William. A security vulnerability exists in versions of RevelaCode prior to 1.0.1, which stems from a MongoDB Atlas URI disclosure that could lead to unauthorized access to the database...

9.8CVSS6.2AI score0.00414EPSS
Exploits0References3
Spring Engineering
Spring Engineering
added 2024/12/03 12:0 a.m.7 views

Extending Spring Data Repositories Just Got Easier

Since its inception, Spring Data Repositories have been designed for extension, whether you want to customize a single query method or provide a completely new base implementation. The 2024.1 release enhances your ability to extend a repository with custom functionality making it easier than ever...

6.9AI score
Exploits0
MongoDB
MongoDB
added 2023/11/07 12:41 p.m.38 views

Secret logging may occur in debug mode of Atlas Operator

The affected versions of MongoDB Atlas Kubernetes Operator may print sensitive information like GCP service account keys and API integration secrets while DEBUG mode logging is enabled. This issue affects MongoDB Atlas Kubernetes Operator versions: 1.5.0, 1.6.0, 1.6.1, 1.7.0. Please note that thi...

7.5CVSS6.5AI score0.00294EPSS
Exploits0References1Affected Software1
Prion
Prion
added 2023/11/07 12:15 p.m.10 views

Design/Logic Flaw

The affected versions of MongoDB Atlas Kubernetes Operator may print sensitive information like GCP service account keys and API integration secrets while DEBUG mode logging is enabled. This issue affects MongoDB Atlas Kubernetes Operator versions: 1.5.0, 1.6.0, 1.6.1, 1.7.0. Please note that thi...

5CVSS6.6AI score0.00294EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder