Lucene search
K

126 matches found

Mageia
Mageia
added 2024/05/21 11:17 p.m.38 views

Updated python-pymongo packages fix security vulnerability

Versions of the package pymongo before 4.6.3 are vulnerable to Out-of-bounds Read in the bson module. Using the crafted payload the attacker could force the parser to deserialize unmanaged memory. The parser tries to interpret bytes next to buffer and throws an exception with string. If the...

7.3AI score
Exploits0References2
OSV
OSV
added 2024/05/21 11:17 p.m.10 views

MGASA-2024-0187 Updated python-pymongo packages fix security vulnerability

Versions of the package pymongo before 4.6.3 are vulnerable to Out-of-bounds Read in the bson module. Using the crafted payload the attacker could force the parser to deserialize unmanaged memory. The parser tries to interpret bytes next to buffer and throws an exception with string. If the...

6.7AI score
Exploits0References3
Amazon
Amazon
added 2024/05/13 12:0 a.m.4 views

Medium: python-pymongo

Issue Overview: Versions of the package pymongo before 4.6.3 are vulnerable to Out-of-bounds Read in the bson module. Using the crafted payload the attacker could force the parser to deserialize unmanaged memory. The parser tries to interpret bytes next to buffer and throws an exception with...

8.1CVSS7.1AI score0.0017EPSS
Exploits0
Amazon
Amazon
added 2024/05/13 12:0 a.m.7 views

Medium: python-pymongo

Issue Overview: Versions of the package pymongo before 4.6.3 are vulnerable to Out-of-bounds Read in the bson module. Using the crafted payload the attacker could force the parser to deserialize unmanaged memory. The parser tries to interpret bytes next to buffer and throws an exception with...

8.1CVSS7.4AI score0.0017EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2024/05/10 12:0 a.m.26 views

SUSE SLES15 / openSUSE 15 Security Update : python-pymongo (SUSE-SU-2024:1571-1)

The remote SUSE Linux SLES15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2024:1571-1 advisory. - Versions of the package pymongo before 4.6.3 are vulnerable to Out-of-bounds Read in the bson module. Using the crafted payload the...

6.1AI score
Exploits0References4
OSV
OSV
added 2024/05/09 11:18 a.m.7 views

SUSE-SU-2024:1571-1 Security update for python-pymongo

This update for python-pymongo fixes the following issues: - CVE-2024-21506: Fixed out-of-bounds read in the BSON module bsc1222492...

6.6AI score
Exploits0References3
OSV
OSV
added 2024/04/12 11:7 a.m.2 views

OESA-2024-1388 python-pymongo security update

The PyMongo distribution contains tools for interacting with \ MongoDB database from Python.\ PyMongo supports MongoDB 2.6, 3.0, 3.2, 3.4, 3.6, 4.0 and 4.2. Security Fixes: Versions of the package pymongo before 4.6.3 are vulnerable to Out-of-bounds Read in the bson module. Using the crafted...

7.1AI score
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2024/04/11 12:0 a.m.78 views

PyMongo < 4.6.3 Out-of-bounds Read

Versions of the package pymongo before 4.6.3 are vulnerable to Out-of-bounds Read in the bson module. Using the crafted payload the attacker could force the parser to deserialize unmanaged memory. The parser tries to interpret bytes next to buffer and throws an exception with string. If the...

8.1CVSS6.5AI score0.0017EPSS
Exploits0References2
Veracode
Veracode
added 2024/04/08 4:56 a.m.24 views

Out-of-bounds Read

pymongo is vulnerable to Out-of-bounds Read. The vulnerability is due to improper validation of encoded BSON data during the deserialization process, which allows an attacker to submit a crafting payload resulting in an out-of-bounds read...

8.1CVSS6.7AI score0.0017EPSS
Exploits0References6Affected Software1
RedhatCVE
RedhatCVE
added 2024/04/07 2:25 p.m.30 views

CVE-2024-21506

An out-of-bounds read vulnerability was found in Pymongo. When using a crafted payload, this flaw allows an attacker to force the parser to deserialize unmanaged memory. Mitigation Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product...

5.2CVSS5.9AI score
Exploits0References5
OSV
OSV
added 2024/04/06 6:31 a.m.5 views

GHSA-CR6F-GF5W-VHRC PyMongo Out-of-bounds Read in the bson module

Versions of the package pymongo before 4.6.3 are vulnerable to Out-of-bounds Read in the bson module. Using the crafted payload the attacker could force the parser to deserialize unmanaged memory. The parser tries to interpret bytes next to buffer and throws an exception with string. If the...

5.2CVSS6.8AI score
Exploits0References5
Github Security Blog
Github Security Blog
added 2024/04/06 6:31 a.m.48 views

PyMongo Out-of-bounds Read in the bson module

Versions of the package pymongo before 4.6.3 are vulnerable to Out-of-bounds Read in the bson module. Using the crafted payload the attacker could force the parser to deserialize unmanaged memory. The parser tries to interpret bytes next to buffer and throws an exception with string. If the...

4.6AI score
Exploits0References5Affected Software1
Chainguard
Chainguard
added 2024/04/06 6:31 a.m.10 views

GHSA-CR6F-GF5W-VHRC vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server, py3-pymongo, datadog-agent...

7AI score
Exploits0
Chainguard
Chainguard
added 2024/04/06 5:15 a.m.40 views

CVE-2024-21506 vulnerabilities

Vulnerabilities for packages: py3-pymongo, datadog-agent, kubeflow-pipelines-visualization-server...

6.5AI score
Exploits0
Wolfi
Wolfi
added 2024/04/06 5:15 a.m.153 views

CVE-2024-21506 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server, py3-pymongo, datadog-agent...

6.5AI score
Exploits0
OSV
OSV
added 2024/04/06 5:15 a.m.21 views

CVE-2024-21506

Rejected reason: Duplicate...

3.7CVSS5AI score
Exploits0Affected Software1
UbuntuCve
UbuntuCve
added 2024/04/06 5:15 a.m.29 views

CVE-2024-21506

Rejected reason: Duplicate of CVE-2024-5629...

6.7AI score
Exploits0References3
Debian CVE
Debian CVE
added 2024/04/06 5:0 a.m.24 views

CVE-2024-21506

Removed by vendor...

6.2AI score
Exploits0
CVE
CVE
added 2024/04/06 5:0 a.m.295 views

CVE-2024-21506

CVE-2024-21506 entry is rejected/not active and duplicates CVE-2024-5629.

4.6AI score
Exploits0
CNNVD
CNNVD
added 2024/04/06 12:0 a.m.2 views

编号撤回

PyMongo is an official MongoDB Python driver for MongoDB Open Source. This CVE number has been withdrawn...

6.2AI score
Exploits0References6
Rows per page
Query Builder