33 matches found
CVE-2026-83231
Vulnerability in the Helidon product of Oracle Fusion Middleware component: helidon-dbclient-mongodb. Supported versions that are affected are 3.0.0-3.2.20 and 4.0.0-4.5.4. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon...
EUVD-2026-79583
Vulnerability in the Helidon product of Oracle Fusion Middleware component: helidon-dbclient-mongodb. Supported versions that are affected are 3.0.0-3.2.20 and 4.0.0-4.5.4. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon...
CVE-2026-83231
Vulnerability in the Helidon product of Oracle Fusion Middleware component: helidon-dbclient-mongodb. Supported versions that are affected are 3.0.0-3.2.20 and 4.0.0-4.5.4. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon...
io.helidon:helidon-all (27.0.0-m1) potentially affected by CVE-2026-83231 via io.helidon.dbclient:helidon-dbclient-mongodb (27.0.0-m1)
io.helidon.dbclient:helidon-dbclient-mongodb MAVEN version 27.0.0-m1 is affected by a known vulnerability. The following packages have a transitive dependency on io.helidon.dbclient:helidon-dbclient-mongodb and may be impacted: - io.helidon:helidon-all 27.0.0-m1 Source cves: CVE-2026-83231 Source...
io.helidon:helidon-all (>=4.0.9, <=4.5.4) potentially affected by CVE-2026-83231 via io.helidon.dbclient:helidon-dbclient-mongodb (>=4.0.9, <=4.5.4)
io.helidon.dbclient:helidon-dbclient-mongodb MAVEN version =4.0.9, =4.0.9, =4.5.4 Source cves: CVE-2026-83231 Source advisory: MEND:CVE-2026-83231...
CVE-2026-83231
Oracle Helidon (Fusion Middleware), specifically the helidon-dbclient-mongodb component, is affected in versions 3.0.0–3.2.20 and 4.0.0–4.5.4 . A difficult-to-exploit vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the component. Successful exploitation...
CVE-2026-83231: Improper Access Control
Vulnerability in the Helidon product of Oracle Fusion Middleware component: helidon-dbclient-mongodb. Supported versions that are affected are 3.0.0-3.2.20 and 4.0.0-4.5.4. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon...
PT-2026-92754
Vulnerability in the Helidon product of Oracle Fusion Middleware component: helidon-dbclient-mongodb. Supported versions that are affected are 3.0.0-3.2.20 and 4.0.0-4.5.4. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon...
Linux Distros Unpatched Vulnerability : CVE-2025-47203
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dbclient in Dropbear SSH before 2025.88 allows command injection via an untrusted hostname argument, because a shell is used. CVE-2025-47203 Note that Nessus...
Linux Distros Unpatched Vulnerability : CVE-2016-7408
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The dbclient in Dropbear SSH before 2016.74 allows remote attackers to execute arbitrary code via a crafted 1 -m or 2 -c argument. CVE-2016-7408 Note that Nessu...
Updated dropbear packages fix security vulnerability
dbclient in Dropbear SSH before 2025.88 allows command injection via an untrusted hostname argument, because a shell is used...
DEBIAN-CVE-2025-47203
dbclient in Dropbear SSH before 2025.88 allows command injection via an untrusted hostname argument, because a shell is used...
ALPINE-CVE-2025-47203
dbclient in Dropbear SSH before 2025.88 allows command injection via an untrusted hostname argument, because a shell is used...
UBUNTU-CVE-2025-47203
dbclient in Dropbear SSH before 2025.88 allows command injection via an untrusted hostname argument, because a shell is used...
CVE-2025-47203
dbclient in Dropbear SSH before 2025.88 allows command injection via an untrusted hostname argument, because a shell is used...
CVE-2025-47203: Improper Neutralization of Special Elements used in an OS Command
dbclient in Dropbear SSH before 2025.88 allows command injection via an untrusted hostname argument, because a shell is used...
dropbear security vulnerability
dropbear is an application by Matt Johnston Personal Developer. A security vulnerability exists in dropbear versions prior to 2025.88 that stems from an untrusted hostname parameter in the dbclient leading to command injection...
CVE-2025-47203
CVE-2025-47203 affects the Dropbear SSH package’s dbclient before version 2025.88. The vulnerability arises because a shell is used when processing the hostname argument, allowing an attacker to craft an untrusted hostname that can trigger command execution. Impact is described as arbitrary comma...
