Lucene search
+L

32937 matches found

OSV
OSV
added 2025/11/25 10:18 p.m.9 views

JLSEC-2025-305 A NULL pointer dereference in TIFFClose() is caused by a failure to open an output file...

A NULL pointer dereference in TIFFClose is caused by a failure to open an output file non-existent path or a path that requires permissions like /dev/null while specifying zones...

6.5CVSS6.8AI score0.01124EPSS
SaveExploits1References5
EUVD
EUVD
added 2025/11/25 9:32 p.m.16 views

EUVD-2025-199636

Primakon Pi Portal 1.0.18 API endpoints responsible for retrieving object-specific or filtered data e.g., user profiles, project records fail to implement sufficient server-side validation to confirm that the requesting user is authorized to access the requested object or dataset. This...

5.3CVSS6AI score0.00231EPSS
SaveExploits0References3
NVD
NVD
added 2025/11/25 7:15 p.m.30 views

CVE-2025-64065

The Primakon Pi Portal 1.0.18 API /api/V2/ppudfvadmin endpoint, fails to perform necessary server-side validation. The administrative LoginAs or user impersonation feature is vulnerable to a access control failure. This flaw allows any authenticated low-privileged user to execute a direct PATCH...

8.8CVSS0.00292EPSS
SaveExploits0References2
NVD
NVD
added 2025/11/25 7:15 p.m.13 views

CVE-2025-64067

Primakon Pi Portal 1.0.18 API endpoints responsible for retrieving object-specific or filtered data e.g., user profiles, project records fail to implement sufficient server-side validation to confirm that the requesting user is authorized to access the requested object or dataset. This...

5.3CVSS0.00231EPSS
SaveExploits0References2
OSV
OSV
added 2025/11/25 7:15 p.m.14 views

CVE-2025-64065

The Primakon Pi Portal 1.0.18 API /api/V2/ppudfvadmin endpoint, fails to perform necessary server-side validation. The administrative LoginAs or user impersonation feature is vulnerable to a access control failure. This flaw allows any authenticated low-privileged user to execute a direct PATCH...

8.8CVSS6AI score0.00292EPSS
SaveExploits0References2
Veracode
Veracode
added 2025/11/25 8:43 a.m.13 views

Insecure Direct Object Reference (IDOR)

liferay-portal is vulnerable to an Insecure Direct Object Reference IDOR vulnerability. The vulnerability is due to the workflow definition API exposing resources based on user-supplied names without enforcing authorization checks, where the API resolves workflow definitions directly by name...

5.3CVSS7.1AI score0.00323EPSS
SaveExploits1References9Affected Software1
NVD
NVD
added 2025/11/25 6:15 a.m.14 views

CVE-2025-13644

MongoDB Server may experience an invariant failure during batched delete operations when handling documents. The issue arises when the server mistakenly assumes the presence of multiple documents in a batch based solely on document size exceeding BSONObjMaxSize. This issue affects MongoDB Server...

7.5CVSS0.00326EPSS
SaveExploits0References1
OSV
OSV
added 2025/11/25 6:15 a.m.9 views

UBUNTU-CVE-2025-13644

MongoDB Server may experience an invariant failure during batched delete operations when handling documents. The issue arises when the server mistakenly assumes the presence of multiple documents in a batch based solely on document size exceeding BSONObjMaxSize. This issue affects MongoDB Server...

7.5CVSS5.8AI score0.00326EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2025/11/25 5:23 a.m.28 views

CVE-2025-13644 MongoDB may be susceptible to Invariant Failure due to batched delete

MongoDB Server may experience an invariant failure during batched delete operations when handling documents. The issue arises when the server mistakenly assumes the presence of multiple documents in a batch based solely on document size exceeding BSONObjMaxSize. This issue affects MongoDB Server...

7.1CVSS0.00326EPSS
SaveExploits0References1
MongoDB
MongoDB
added 2025/11/25 5:23 a.m.18 views

MongoDB may be susceptible to Invariant Failure due to batched delete

MongoDB Server may experience an invariant failure during batched delete operations when handling documents. The issue arises when the server mistakenly assumes the presence of multiple documents in a batch based solely on document size exceeding BSONObjMaxSize. This issue affects MongoDB Server...

7.5CVSS6.9AI score0.00326EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2025/11/25 5:23 a.m.45 views

CVE-2025-13644

The CVE-2025-13644 issue affects MongoDB Server and stems from an invariant failure during batched delete operations. The server may misinterpret a batch as containing multiple documents when the document size exceeds BSONObjMaxSize, leading to incorrect handling of the batch. Affected versions i...

7.5CVSS6.5AI score0.00326EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2025/11/25 5:23 a.m.7 views

CVE-2025-13644 MongoDB may be susceptible to Invariant Failure due to batched delete

MongoDB Server may experience an invariant failure during batched delete operations when handling documents. The issue arises when the server mistakenly assumes the presence of multiple documents in a batch based solely on document size exceeding BSONObjMaxSize. This issue affects MongoDB Server...

7.1CVSS6.5AI score0.00326EPSS
SaveExploits0References1
OSV
OSV
added 2025/11/25 5:23 a.m.8 views

CVE-2025-13644 MongoDB may be susceptible to Invariant Failure due to batched delete

MongoDB Server may experience an invariant failure during batched delete operations when handling documents. The issue arises when the server mistakenly assumes the presence of multiple documents in a batch based solely on document size exceeding BSONObjMaxSize. This issue affects MongoDB Server...

7.1CVSS6.6AI score
SaveExploits0References3
OSV
OSV
added 2025/11/25 5:16 a.m.11 views

UBUNTU-CVE-2025-13507

Inconsistent object size validation in time series processing logic may result in later processing of oversized BSON documents leading to an assert failing and process termination. This issue impacts MongoDB Server v7.0 versions prior to 7.0.26, v8.0 versions prior to 8.0.16 and MongoDB server v8...

7.1CVSS5.8AI score0.00285EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2025/11/25 4:52 a.m.5 views

CVE-2025-13507 Time-series operations may cause internal BSON size limit to be exceed

Inconsistent object size validation in time series processing logic may result in later processing of oversized BSON documents leading to an assert failing and process termination. This issue impacts MongoDB Server v7.0 versions prior to 7.0.26, v8.0 versions prior to 8.0.16 and MongoDB server v8...

7.1CVSS6.5AI score0.00285EPSS
SaveExploits0References1
CVE
CVE
added 2025/11/25 4:52 a.m.41 views

CVE-2025-13507

The CVE-2025-13507 entry describes an issue in MongoDB Server: inconsistent object size validation in the time series processing path can cause oversized BSON documents to be processed later, triggering an assertion and process termination. Affected versions are MongoDB Server v7.0 before 7.0.26,...

7.1CVSS6.5AI score0.00285EPSS
SaveExploits0References1Affected Software1
EUVD
EUVD
added 2025/11/25 4:52 a.m.13 views

EUVD-2025-199533

Inconsistent object size validation in time series processing logic may result in later processing of oversized BSON documents leading to an assert failing and process termination. This issue impacts MongoDB Server v7.0 versions prior to 7.0.26, v8.0 versions prior to 8.0.16 and MongoDB server v8...

7.1CVSS6.3AI score0.00285EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/11/25 4:52 a.m.21 views

CVE-2025-13507 Time-series operations may cause internal BSON size limit to be exceed

Inconsistent object size validation in time series processing logic may result in later processing of oversized BSON documents leading to an assert failing and process termination. This issue impacts MongoDB Server v7.0 versions prior to 7.0.26, v8.0 versions prior to 8.0.16 and MongoDB server v8...

7.1CVSS0.00285EPSS
SaveExploits0References1
OSV
OSV
added 2025/11/25 4:52 a.m.13 views

CVE-2025-13507 Time-series operations may cause internal BSON size limit to be exceed

Inconsistent object size validation in time series processing logic may result in later processing of oversized BSON documents leading to an assert failing and process termination. This issue impacts MongoDB Server v7.0 versions prior to 7.0.26, v8.0 versions prior to 8.0.16 and MongoDB server v8...

7.1CVSS6.6AI score
SaveExploits0References3
MongoDB
MongoDB
added 2025/11/25 4:52 a.m.15 views

Time-series operations may cause internal BSON size limit to be exceed

Inconsistent object size validation in time series processing logic may result in later processing of oversized BSON documents leading to an assert failing and process termination. This issue impacts MongoDB Server v7.0 versions prior to 7.0.26, v8.0 versions prior to 8.0.16 and MongoDB server v8...

7.1CVSS6.9AI score0.00285EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder