Lucene search
+L

4 matches found

Github Security Blog
Github Security Blog
added 2025/11/19 12:31 a.m.13 views

MongoDB driver extension affected by mongoc_bulk_operation_t's read of invalid memory

A mongocbulkoperationt may read invalid memory if large options are passed...

6.9CVSS6.9AI score0.00201EPSS
SaveExploits0References9Affected Software1
OSV
OSV
added 2025/11/19 12:31 a.m.8 views

GHSA-MWCC-7VPP-XMV9 MongoDB driver extension affected by mongoc_bulk_operation_t's read of invalid memory

A mongocbulkoperationt may read invalid memory if large options are passed...

6.9CVSS6.8AI score0.00201EPSS
SaveExploits0References9
Vulnrichment
Vulnrichment
added 2025/09/24 12:0 a.m.2 views

CVE-2025-56816

Datart 1.0.0-rc.3 is vulnerable to Directory Traversal. The configuration file handling of the application allows attackers to upload arbitrary YAML files to the config/jdbc-driver-ext.yml path. The application parses this file using SnakeYAML's unsafe load or loadAs method without input...

8.1AI score0.01261EPSS
SaveExploits2References2
CVE
CVE
added 2025/09/24 12:0 a.m.28 views

CVE-2025-56816

Datart 1.0.0-rc.3 is vulnerable to Directory Traversal via uploading YAML to config/jdbc-driver-ext.yml, parsed with SnakeYAML unsafe load/loadAs. This allows attacker-controlled YAML deserialization, potentially enabling remote code execution (RCE) under certain conditions. Exploitation details ...

8.8CVSS8.1AI score0.01261EPSS
SaveExploits2References2Affected Software1
Rows per page
Query Builder