Lucene search
K

10 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2024-47483

Malicious code in bioql PyPI...

9.8CVSS6.4AI score0.0066EPSS
Exploits0References3
OSV
OSV
added 2024/07/01 3:32 p.m.13 views

GHSA-JXR4-4PRV-MH83 ejson shell parser in MongoDB Compass maybe bypassed

MongoDB Compass may be susceptible to code injection due to insufficient sandbox protection settings with the usage of ejson shell parser in Compass' connection handling. This issue affects MongoDB Compass versions prior to version 1.42.2...

7CVSS7.2AI score0.0066EPSS
Exploits0References4
Github Security Blog
Github Security Blog
added 2024/07/01 3:32 p.m.6 views

ejson shell parser in MongoDB Compass maybe bypassed

MongoDB Compass may be susceptible to code injection due to insufficient sandbox protection settings with the usage of ejson shell parser in Compass' connection handling. This issue affects MongoDB Compass versions prior to version 1.42.2...

9.8CVSS7.3AI score0.0066EPSS
Exploits0References4Affected Software1
NVD
NVD
added 2024/07/01 3:15 p.m.33 views

CVE-2024-6376

MongoDB Compass may be susceptible to code injection due to insufficient sandbox protection settings with the usage of ejson shell parser in Compass' connection handling. This issue affects MongoDB Compass versions prior to version 1.42.2...

9.8CVSS0.0066EPSS
Exploits0References1
CVE
CVE
added 2024/07/01 2:57 p.m.110 views

CVE-2024-6376

CVE-2024-6376 affects MongoDB Compass prior to 1.42.2. The issue arises from insufficient sandbox protection when using the ejson shell parser in Compass’ connection handling, potentially enabling code injection. Evidence across sources confirms the vulnerability is associated with Compass’ GUI a...

9.8CVSS7.4AI score0.0066EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/07/01 2:57 p.m.68 views

CVE-2024-6376 ejson shell parser in MongoDB Compass maybe bypassed

MongoDB Compass may be susceptible to code injection due to insufficient sandbox protection settings with the usage of ejson shell parser in Compass' connection handling. This issue affects MongoDB Compass versions prior to version 1.42.2...

7CVSS7.3AI score0.0066EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/07/01 2:57 p.m.31 views

CVE-2024-6376 ejson shell parser in MongoDB Compass maybe bypassed

MongoDB Compass may be susceptible to code injection due to insufficient sandbox protection settings with the usage of ejson shell parser in Compass' connection handling. This issue affects MongoDB Compass versions prior to version 1.42.2...

7CVSS0.0066EPSS
Exploits0References1
MongoDB
MongoDB
added 2024/07/01 2:56 p.m.29 views

ejson shell parser in MongoDB Compass maybe bypassed

MongoDB Compass may be susceptible to code injection due to insufficient sandbox protection settings with the usage of ejson shell parser in Compass' connection handling. This issue affects MongoDB Compass versions prior to version 1.42.2...

9.8CVSS7.3AI score0.0066EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2024/07/01 12:0 a.m.2 views

MongoDB Compass Security Vulnerability

MongoDB Compass is a free interactive tool from the US-based MongoDB Inc. for querying, optimizing and analyzing MongoDB data. A security vulnerability previously existed in MongoDB Compass version 1.42.2, which stemmed from a possible bypass of the ejson shell parser...

9.8CVSS6.8AI score0.0066EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2023/11/30 12:0 a.m.3 views

PT-2023-9237 · Mongodb · Mongodb Compass

Name of the Vulnerable Software and Affected Versions: MongoDB Compass versions prior to 1.42.2 Description: The issue is related to insufficient sandbox protection settings with the usage of ejson shell parser in Compass' connection handling, which may allow attackers to execute malicious code o...

9.8CVSS7.9AI score0.0066EPSS
Exploits0References22
Rows per page
Query Builder