Lucene search
+L

607909 matches found

Cvelist
Cvelist
added yesterday7 views

CVE-2026-19004 MongoDB BI Connector ODBC Driver Memory-Safety Issue When Handling Stored Procedure Output Parameters

An application using the MongoDB BI Connector ODBC Driver may experience a memory-safety issue when processing output parameters from a stored procedure. Triggering this issue requires connecting to an untrusted or impersonated database server that returns crafted metadata. This may result in...

8.8CVSS
SaveExploits0References1
EUVD
EUVD
added yesterday4 views

EUVD-2026-57607

An application using the MongoDB BI Connector ODBC Driver may experience a memory-safety issue when processing output parameters from a stored procedure. Triggering this issue requires connecting to an untrusted or impersonated database server that returns crafted metadata. This may result in...

8.8CVSS5.7AI score
SaveExploits0References1
CVE
CVE
added yesterday12 views

CVE-2026-19001

The CVE-2026-19001 issue affects the MongoDB BI Connector ODBC Driver. Affected component: ODBC driver; vulnerability: writes outside a fixed-size buffer when an application supplies an unusually long catalog, schema, or object name to a metadata retrieval function, causing memory corruption in t...

9.8CVSS6AI score
SaveExploits0References1
EUVD
EUVD
added yesterday5 views

EUVD-2026-57603

The MongoDB BI Connector ODBC Driver may write outside the bounds of a fixed-size buffer when an application supplies an unusually long catalog, schema, or object name to a metadata retrieval function. This may result in memory corruption within the calling application's process, leading to...

9.8CVSS6AI score
SaveExploits0References1
Cvelist
Cvelist
added yesterday5 views

CVE-2026-19001 MongoDB BI Connector ODBC driver may write outside an allocated buffer when handling oversized catalog object names

The MongoDB BI Connector ODBC Driver may write outside the bounds of a fixed-size buffer when an application supplies an unusually long catalog, schema, or object name to a metadata retrieval function. This may result in memory corruption within the calling application's process, leading to...

9.8CVSS
SaveExploits0References1
EUVD
EUVD
added yesterday6 views

EUVD-2026-57602

A missing bounds check when parsing stored procedure parameter metadata in the MongoDB BI Connector ODBC Driver can result in an out-of-bounds write in the client application process. Triggering this issue requires control over the server the driver connects to, or the ability to respond in its...

8.8CVSS5.5AI score
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added yesterday2 views

CVE-2026-19503

MongoDB Schema Manager and MongoDB Atlas SQL ODBC Driver do not validate the scheme of the authorization and token endpoints returned by an OIDC issuer's discovery document. A user induced to connect to an uncontrolled MongoDB deployment using MONGODB-OIDC authentication may have an uncontrolled...

6.3CVSS6.2AI score
SaveExploits0References2Affected Software2
EUVD
EUVD
added yesterday4 views

EUVD-2026-57551

MongoDB Schema Manager and MongoDB Atlas SQL ODBC Driver do not validate the scheme of the authorization and token endpoints returned by an OIDC issuer's discovery document. A user induced to connect to an uncontrolled MongoDB deployment using MONGODB-OIDC authentication may have an uncontrolled...

6.3CVSS6.2AI score
SaveExploits0References1
CVE
CVE
added yesterday15 views

CVE-2026-19503

CVE-2026-19503 affects MongoDB Schema Manager and MongoDB Atlas SQL ODBC Driver. The issue arises from insufficient validation of the scheme for authorization and token endpoints returned in an OIDC issuer’s discovery document, allowing a user connected to an uncontrolled MongoDB deployment using...

6.3CVSS6.2AI score
SaveExploits0References1
NVD
NVD
added yesterday3 views

CVE-2026-73268

A flaw was found in the cluster-curator-controller component of multicluster engine MCE. A tenant with create or update permissions on ClusterCurator resources can inject an arbitrary Job specification. This is possible because the CreateJob function does not validate user-controlled input when...

9.9CVSS
SaveExploits0References2
NVD
NVD
added yesterday4 views

CVE-2026-72508

A flaw was found in the multicloud-operators-subscription component of Red Hat Advanced Cluster Management RHACM. This vulnerability allows a namespace-admin tenant to perform a confused-deputy attack by creating Subscription Custom Resources CRs that leverage a highly privileged ServiceAccount S...

9.9CVSS
SaveExploits0References2
NVD
NVD
added yesterday3 views

CVE-2026-67579

Deserialization of Untrusted Data vulnerability in ash-project ash allows an unauthenticated attacker to inject a filter expression through a forged keyset pagination cursor, resulting in SQL injection or code execution depending on the data layer. Read actions with keyset pagination decode the...

7.5CVSS
SaveExploits0References4
NVD
NVD
added yesterday3 views

CVE-2026-59914

Dell Display and Peripheral Manager DDPM Windows, versions prior to 2.3.0.17, contain an Authentication Bypass by Spoofing vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges and arbitrary code execution...

7.8CVSS
SaveExploits0References1
NVD
NVD
added yesterday3 views

CVE-2026-59917

Dell Display and Peripheral Manager DDPM Windows, versions prior to 2.3.0.17, contain Improper Access Control vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges and arbitrary code execution...

7.8CVSS
SaveExploits0References1
NVD
NVD
added yesterday4 views

CVE-2026-59916

Dell Display and Peripheral Manager DDPM Windows, versions prior to 2.3.0.17, contain Improper Access Control vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges and arbitrary code execution...

7.8CVSS
SaveExploits0References1
NVD
NVD
added yesterday3 views

CVE-2026-46731

Dell Display and Peripheral Manager DDPM Windows, versions prior to 2.3.0.17, contain an Authentication Bypass by Spoofing vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges and arbitrary code execution...

7.8CVSS
SaveExploits0References1
NVD
NVD
added yesterday4 views

CVE-2026-19656

ScadaLTS 2.7.8.1 exposes a server-side method that lacks authorization checks, allowing any authenticated user including one holding only low-privilege, read-only permissions to execute arbitrary operating system commands on the host. Successful exploitation results in code execution in the conte...

9.9CVSS
SaveExploits0References1
NVD
NVD
added yesterday4 views

CVE-2026-17417

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of shell metacharacters...

8.8CVSS
SaveExploits0References1
NVD
NVD
added yesterday4 views

CVE-2026-17642

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command...

8.8CVSS
SaveExploits0References1
NVD
NVD
added yesterday3 views

CVE-2026-17083

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to execute arbitrary code due to a stack-based buffer overflow...

9.8CVSS
SaveExploits0References1
Rows per page
Query Builder