Lucene search
+L

70 matches found

osv_rlsa
osv_rlsa
•added 2026/10/15 12:01 a.m.•40 views

RLSA-2026:82858 Important: python36:3.6 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

8.3CVSS7.3AI score0.00265EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/10/15 12:00 a.m.•12 views

Rocky Linux 8 [CIQ] Security Update: python-nose-docs / python-pymongo-debuginfo / etc (crlsa-2026_82858)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202682858 advisory. pymongo: MongoDB Python Driver: Data disclosure and denial of service via query-operator injection CVE-2026-88029 Tenable has extracted the preceding description...

8.3CVSS7.3AI score0.00265EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
•added 2026/10/15 12:00 a.m.•4 views

Linux Distros Unpatched Vulnerability : CVE-2026-106435

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The MongoDB Python Driver's binary accelerator can read outside a buffer when an application decodes malformed BSON containing a truncated regular-expression...

5.9CVSS6AI score0.00093EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/10/14 12:00 a.m.•8 views

RHEL 8 : python36:3.6 (RHSA-2026:82858)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:82858 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic da...

8.3CVSS7.3AI score0.00265EPSS
SaveExploits0References4
osv_alsa
osv_alsa
•added 2026/10/14 12:00 a.m.•19 views

ALSA-2026:82858 Important: python36:3.6 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

8.3CVSS7.4AI score0.00265EPSS
SaveExploits0References4
osv_debian
osv_debian
•added 2026/10/08 9:17 p.m.•19 views

DEBIAN-CVE-2026-106435

The MongoDB Python Driver's binary accelerator can read outside a buffer when an application decodes malformed BSON containing a truncated regular-expression element without a trailing NUL byte. An actor who can supply BSON to the documented decode or decodeall API can cause the application proce...

4.7CVSS6.2AI score0.00093EPSS
SaveExploits0References1
NVD
NVD
•added 2026/10/08 9:17 p.m.•9 views

CVE-2026-106435

The MongoDB Python Driver's binary accelerator can read outside a buffer when an application decodes malformed BSON containing a truncated regular-expression element without a trailing NUL byte. An actor who can supply BSON to the documented decode or decodeall API can cause the application proce...

5.9CVSS0.00093EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2026/10/08 9:17 p.m.•9 views

CVE-2026-106435

The MongoDB Python Driver's binary accelerator can read outside a buffer when an application decodes malformed BSON containing a truncated regular-expression element without a trailing NUL byte. An actor who can supply BSON to the documented decode or decodeall API can cause the application proce...

5.9CVSS6AI score0.00093EPSS
SaveExploits0References2
osv_ubuntu
osv_ubuntu
•added 2026/10/08 9:17 p.m.•21 views

UBUNTU-CVE-2026-106435

The MongoDB Python Driver's binary accelerator can read outside a buffer when an application decodes malformed BSON containing a truncated regular-expression element without a trailing NUL byte. An actor who can supply BSON to the documented decode or decodeall API can cause the application proce...

5.9CVSS6.2AI score0.00093EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/10/08 8:12 p.m.•40 views

CVE-2026-106435 Application denial of service via out-of-bounds read in BSON Regex decoding in MongoDB Python Driver

The MongoDB Python Driver's binary accelerator can read outside a buffer when an application decodes malformed BSON containing a truncated regular-expression element without a trailing NUL byte. An actor who can supply BSON to the documented decode or decodeall API can cause the application proce...

5.9CVSS0.00093EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/08 8:12 p.m.•14 views

EUVD-2026-95254

The MongoDB Python Driver's binary accelerator can read outside a buffer when an application decodes malformed BSON containing a truncated regular-expression element without a trailing NUL byte. An actor who can supply BSON to the documented decode or decodeall API can cause the application proce...

5.9CVSS6.2AI score0.00093EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/10/08 8:12 p.m.•7 views

CVE-2026-106435 Application denial of service via out-of-bounds read in BSON Regex decoding in MongoDB Python Driver

The MongoDB Python Driver's binary accelerator can read outside a buffer when an application decodes malformed BSON containing a truncated regular-expression element without a trailing NUL byte. An actor who can supply BSON to the documented decode or decodeall API can cause the application proce...

5.9CVSS6.2AI score0.00093EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/08 8:12 p.m.•30 views

CVE-2026-106435

The MongoDB Python Driver contains an out-of-bounds read vulnerability in its binary accelerator. This occurs when an application decodes malformed BSON containing a truncated regular-expression element missing a trailing NUL byte. An attacker who can supply BSON to the decode or decode_all APIs ...

5.9CVSS6.2AI score0.00093EPSS
SaveExploits0References1Affected Software1
Debian CVE
Debian CVE
•added 2026/10/08 8:12 p.m.•12 views

CVE-2026-106435

The MongoDB Python Driver's binary accelerator can read outside a buffer when an application decodes malformed BSON containing a truncated regular-expression element without a trailing NUL byte. An actor who can supply BSON to the documented decode or decodeall API can cause the application proce...

5.9CVSS6.2AI score0.00093EPSS
SaveExploits0
osv_cve
osv_cve
•added 2026/10/08 8:12 p.m.•2 views

CVE-2026-106435 Application denial of service via out-of-bounds read in BSON Regex decoding in MongoDB Python Driver

The MongoDB Python Driver's binary accelerator can read outside a buffer when an application decodes malformed BSON containing a truncated regular-expression element without a trailing NUL byte. An actor who can supply BSON to the documented decode or decodeall API can cause the application proce...

5.9CVSS6.2AI score
SaveExploits0References3
Mend
Mend
•added 2026/10/08 8:12 p.m.•15 views

CVE-2026-106435

The MongoDB Python Driver's binary accelerator can read outside a buffer when an application decodes malformed BSON containing a truncated regular-expression element without a trailing NUL byte. An actor who can supply BSON to the documented decode or decodeall API can cause the application proce...

5.9CVSS6.2AI score0.00093EPSS
SaveExploits0References2
MongoDB
MongoDB
•added 2026/10/08 8:12 p.m.•12 views

Application denial of service via out-of-bounds read in BSON Regex decoding in MongoDB Python Driver

The MongoDB Python Driver's binary accelerator can read outside a buffer when an application decodes malformed BSON containing a truncated regular-expression element without a trailing NUL byte. An actor who can supply BSON to the documented decode or decodeall API can cause the application proce...

5.9CVSS6.2AI score0.00093EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/08 12:00 a.m.•8 views

CVE-2026-106435: Out-of-bounds Read

The MongoDB Python Driver's binary accelerator can read outside a buffer when an application decodes malformed BSON containing a truncated regular-expression element without a trailing NUL byte. An actor who can supply BSON to the documented decode or decodeall API can cause the application proce...

5.9CVSS6.2AI score0.00093EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/10/08 12:00 a.m.•18 views

PT-2026-108198

Name of the Vulnerable Software and Affected Versions MongoDB Python Driver affected versions not specified Description The binary accelerator in the driver can perform an out-of-bounds read when decoding malformed BSON that contains a truncated regular-expression element missing a trailing NUL...

5.9CVSS5.8AI score0.00093EPSS
SaveExploits0References3
Veracode
Veracode
•added 2026/10/07 9:34 a.m.•34 views

Improper Neutralization Of Special Elements In Data Query Logic

MongoDB Python Driver is vulnerable to Improper Neutralization of Special Elements in Data Query Logic. The vulnerability is due to improper handling of caller-supplied structured file identifiers, which allows an authenticated attacker to manipulate GridFS queries to access unintended stored fil...

8.3CVSS7.4AI score0.00265EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder