Lucene search
+L

446 matches found

Github Security Blog
Github Security Blog
•added 2022/05/14 2:10 a.m.•51 views

Use of NullPointerException Catch to Detect NULL Pointer Dereference in Pymongo

bson/cbsonmodule.c in the mongo-python-driver aka. pymongo before 2.5.2, as used in MongoDB, allows context-dependent attackers to cause a denial of service NULL pointer dereference and crash via vectors related to decoding of an "invalid DBRef."...

4.3CVSS7.3AI score0.04108EPSS
SaveExploits2References10Affected Software1
osv_ghsa
osv_ghsa
•added 2022/05/14 2:10 a.m.•38 views

GHSA-X33V-F3GP-GW2C Use of NullPointerException Catch to Detect NULL Pointer Dereference in Pymongo

bson/cbsonmodule.c in the mongo-python-driver aka. pymongo before 2.5.2, as used in MongoDB, allows context-dependent attackers to cause a denial of service NULL pointer dereference and crash via vectors related to decoding of an "invalid DBRef."...

6.9CVSS7.3AI score0.04108EPSS
SaveExploits2References10
OpenVAS
OpenVAS
•added 2022/01/28 12:00 a.m.•22 views

Mageia: Security Advisory (MGASA-2013-0201)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

4.3CVSS7.5AI score0.04108EPSS
SaveExploits2References4
Rockylinux
Rockylinux
•added 2020/04/28 8:55 a.m.•72 views

python27:2.7 security, bug fix, and enhancement update

An update is available for python-pymongo, python2-rpm-macros, python-docutils, pytest, python-psycopg2, python-PyMySQL, python-lxml, PyYAML, python-pytest-mock, python-attrs, python-jinja2, python-docs, python-requests, python-mock, python-ipaddress, python-funcsigs, python-py, python-chardet,...

9.8CVSS6.4AI score0.07443EPSS
SaveExploits5
Rockylinux
Rockylinux
•added 2019/11/05 5:33 p.m.•29 views

python36:3.6 bug fix and enhancement update

An update is available for python-pymongo, python-docutils, python-pygments, python-PyMySQL, python-docs, python36, python-virtualenv, python-distro, python-nose, python-wheel, scipy. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

1.8AI score
SaveExploits0
Oracle linux
Oracle linux
•added 2019/07/30 12:00 a.m.•64 views

python36:3.6 security update

python-PyMySQL 0.8.0-10 - Bumping due to problems with modular RPM upgrade path 1695587 - Related: rhbz1693974 python-docs 3.6.7-2 - Bumping due to problems with modular RPM upgrade path - Resolves: rhbz1695587 python-docutils 0.14-12 - Bumping due to problems with modular RPM upgrade path 169558...

9.8CVSS1.3AI score0.03525EPSS
SaveExploits3
Oracle linux
Oracle linux
•added 2019/07/30 12:00 a.m.•78 views

python27:2.7 security update

Cython 0.28.1-7 - Bumping due to problems with modular RPM upgrade path 1695587 - Related: rhbz1693974 PyYAML 3.12-16 - Bumping due to problems with modular RPM upgrade path 1695587 - Related: rhbz1693974 babel 2.5.1-9 - Bumping due to problems with modular RPM upgrade path 1695587 - Related:...

9.8CVSS1.1AI score0.07673EPSS
SaveExploits3
n0where
n0where
•added 2018/04/09 1:57 a.m.•39 views

REST API Penetration Testing: Astra

REST API penetration testing is complex due to continuous changes in existing APIs and newly added APIs. Astra can be used by security engineers or developers as an integral part of their process, so they can detect and patch vulnerabilities early during development cycle. Astra can automatically...

0.2AI score
SaveExploits0References1
RedHat Linux
RedHat Linux
•added 2016/05/31 10:04 a.m.•68 views

Moderate: Red Hat Security Advisory: python27 security, bug fix, and enhancement update

Updated python27 packages are now available as a part of Red Hat Software Collections 2.2 for Red Hat Enterprise Linux. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

5.9CVSS6.3AI score0.04857EPSS
SaveExploits1References13
Tenable Nessus
Tenable Nessus
•added 2016/03/04 12:00 a.m.•42 views

Fedora 23 : python-pymongo-2.5.2-8.fc23 (2016-50abc3e885)

Security fix for CVE-2013-2099, CVE-2013-7440 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

5.9CVSS6.7AI score0.04857EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
•added 2016/03/04 12:00 a.m.•50 views

Fedora 22 : python-pymongo-2.5.2-8.fc22 (2016-52b294538d)

Security fix for CVE-2013-2099, CVE-2013-7440 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

5.9CVSS6.7AI score0.04857EPSS
SaveExploits0References5
OpenVAS
OpenVAS
•added 2016/02/13 12:00 a.m.•30 views

Fedora Update for python-pymongo FEDORA-2016-50

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

4.3CVSS6.9AI score0.04857EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2016/02/13 12:00 a.m.•34 views

Fedora Update for python-pymongo FEDORA-2016-52

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

4.3CVSS6.9AI score0.04857EPSS
SaveExploits0References2
Fedora
Fedora
•added 2016/02/12 12:22 p.m.•57 views

[SECURITY] Fedora 22 Update: python-pymongo-2.5.2-8.fc22

The Python driver for MongoDB...

5.9CVSS6.8AI score0.04857EPSS
SaveExploits0
n0where
n0where
•added 2015/07/14 5:41 p.m.•64 views

Python Network Recon Framework: ivre

IVRE Instrument de veille sur les réseaux extérieurs or DRUNK Dynamic Recon of UNKnown networks is a network recon framework, including two modules for passive recon one p0f -based and one Bro -based and one module for active recon mostly Nmap -based, with a bit of ZMap . External programs /...

0.1AI score
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2014/07/22 12:00 a.m.•50 views

RHEL 6 : mongodb and pymongo (RHSA-2013:1170)

Updated mongodb and pymongo packages that fix two security issues and add one enhancement are now available for Red Hat Enterprise MRG 2.3 for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring...

6CVSS6.8AI score0.44543EPSS
SaveExploits10References5
Tenable Nessus
Tenable Nessus
•added 2014/06/13 12:00 a.m.•52 views

openSUSE Security Update : python-pymongo / python3-pymongo (openSUSE-SU-2013:1064-1)

This update of pymongo fixes a NULL pointer issue. - Add Fix-null-pointer-when-decoding-invalid-DBRef.patch - Fixed user-triggerable NULL pointer dereference due to utter plebbery CVE-2013-2132, bnc822798 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks...

4.3CVSS7.2AI score0.04108EPSS
SaveExploits2References3
n0where
n0where
•added 2014/02/08 1:10 p.m.•47 views

Automated NoSQL Database Injection Attacks: NoSQLMap

NoSQLMap is an open source Python tool designed to audit for as well as automate injection attacks and exploit default configuration weaknesses in NoSQL databases as well as web applications using NoSQL in order to disclose data from the database. It is named as a tribute to Bernardo Damele and...

0.3AI score
SaveExploits0References1
RedHat Linux
RedHat Linux
•added 2013/08/21 5:27 p.m.•70 views

Important: Red Hat Security Advisory: mongodb and pymongo security and enhancement update

Updated mongodb and pymongo packages that fix two security issues and add one enhancement are now available for Red Hat Enterprise MRG 2.3 for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring...

6CVSS7.4AI score0.44543EPSS
SaveExploits10References3
RedHat Linux
RedHat Linux
•added 2013/08/21 5:27 p.m.•14 views

pymongo: null pointer when decoding invalid DBRef

bson/cbsonmodule.c in the mongo-python-driver aka. pymongo before 2.5.2, as used in MongoDB, allows context-dependent attackers to cause a denial of service NULL pointer dereference and crash via vectors related to decoding of an "invalid DBRef."...

4.3CVSS7.2AI score0.04108EPSS
SaveExploits2References4
Rows per page
Query Builder