Lucene search
+L

28 matches found

NVD
NVD
•added 2026/10/12 8:17 a.m.•5 views

CVE-2026-108810

A security flaw has been discovered in tsi-coop tsi-dpdp-cms 0.5.0/0.5.1/0.5.2. Impacted is an unknown function of the component JSON Schema Validation. The manipulation of the argument func results in information disclosure. The attack can be executed remotely. The exploit has been released to t...

6.9CVSS0.00322EPSS
SaveExploits0References8
EUVD
EUVD
•added 2026/10/12 7:00 a.m.•8 views

EUVD-2026-97283

A security flaw has been discovered in tsi-coop tsi-dpdp-cms 0.5.0/0.5.1/0.5.2. Impacted is an unknown function of the component JSON Schema Validation. The manipulation of the argument func results in information disclosure. The attack can be executed remotely. The exploit has been released to t...

6.9CVSS5.3AI score0.00322EPSS
SaveExploits0References8
OSV
OSV
•added 2026/10/12 7:00 a.m.•2 views

CVE-2026-108810 tsi-coop tsi-dpdp-cms JSON Schema Validation information disclosure

A security flaw has been discovered in tsi-coop tsi-dpdp-cms 0.5.0/0.5.1/0.5.2. Impacted is an unknown function of the component JSON Schema Validation. The manipulation of the argument func results in information disclosure. The attack can be executed remotely. The exploit has been released to t...

6.9CVSS5.4AI score
SaveExploits0References10
CVE
CVE
•added 2026/10/12 7:00 a.m.•18 views

CVE-2026-108810

The tsi-coop tsi-dpdp-cms software (versions 0.5.0 , 0.5.1 , and 0.5.2 ) is vulnerable to an information disclosure flaw within the JSON Schema Validation component. The root cause is the improper handling of the _func argument, which allows an unauthenticated remote attacker to execute the attac...

6.9CVSS5.3AI score0.00322EPSS
SaveExploits0References8
OSV
OSV
•added 2026/09/17 11:50 a.m.•14 views

BIT-MONGODB-2026-82058 Unhandled Exception in MongoDB Server JSON Schema Validation Error Generation Leads to Denial of Service

A flaw in MongoDB's JSON Schema validation error generation code allows an authenticated user with readWrite privileges to crash the mongod server. When a BSON document containing an array with a malformed numeric field name fails a $jsonSchema items type constraint, the error generation path...

7.1CVSS5.8AI score0.00402EPSS
SaveExploits0References2
MongoDB
MongoDB
•added 2026/09/08 4:12 p.m.•17 views

Unhandled Exception in MongoDB Server JSON Schema Validation Error Generation Leads to Denial of Service

A flaw in MongoDB's JSON Schema validation error generation code allows an authenticated user with readWrite privileges to crash the mongod server. When a BSON document containing an array with a malformed numeric field name fails a $jsonSchema items type constraint, the error generation path...

7.1CVSS5.8AI score0.00402EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2026/09/08 4:12 p.m.•20 views

CVE-2026-82058 Unhandled Exception in MongoDB Server JSON Schema Validation Error Generation Leads to Denial of Service

A flaw in MongoDB's JSON Schema validation error generation code allows an authenticated user with readWrite privileges to crash the mongod server. When a BSON document containing an array with a malformed numeric field name fails a $jsonSchema items type constraint, the error generation path...

7.1CVSS5.8AI score0.00402EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/08 4:12 p.m.•40 views

CVE-2026-82058 Unhandled Exception in MongoDB Server JSON Schema Validation Error Generation Leads to Denial of Service

A flaw in MongoDB's JSON Schema validation error generation code allows an authenticated user with readWrite privileges to crash the mongod server. When a BSON document containing an array with a malformed numeric field name fails a $jsonSchema items type constraint, the error generation path...

7.1CVSS0.00402EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/08 4:12 p.m.•18 views

EUVD-2026-72945

A flaw in MongoDB's JSON Schema validation error generation code allows an authenticated user with readWrite privileges to crash the mongod server. When a BSON document containing an array with a malformed numeric field name fails a $jsonSchema items type constraint, the error generation path...

7.1CVSS5.8AI score0.00402EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/08 4:12 p.m.•40 views

CVE-2026-82058

MongoDB 's mongod server is vulnerable to a denial-of-service flaw in its JSON Schema validation error generation code. When a BSON document containing an array with a malformed numeric field name fails a $jsonSchema items type constraint, the error path performs an unsafe numeric conversion on t...

7.1CVSS5.8AI score0.00402EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•6 views

CVE-2026-82058: Uncaught Exception

A flaw in MongoDB's JSON Schema validation error generation code allows an authenticated user with readWrite privileges to crash the mongod server. When a BSON document containing an array with a malformed numeric field name fails a $jsonSchema items type constraint, the error generation path...

7.1CVSS5.8AI score0.00402EPSS
SaveExploits0References3
Snyk
Snyk
•added 2026/08/17 6:15 p.m.•12 views

Insufficient Verification of Data Authenticity

Overview openssl-encrypt is an A package for secure file encryption and decryption based on modern ciphers using heavy-compute-load chaining of hashing and KDF to generate strong encryption password based on users provided password to ensure secure encryption of files Affected versions of this...

9.8CVSS5.7AI score0.00274EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/17 12:00 a.m.•4 views

CVE-2026-74875: Insufficient Verification of Data Authenticity

opensslencrypt versions before 1.4.0 silently skip JSON schema validation when the jsonschema library is not installed, allowing malformed metadata to be accepted. Attackers can remove the jsonschema package or supply unknown metadata format versions to bypass all schema checks and process...

9.8CVSS5.7AI score0.00274EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2026/06/03 12:00 a.m.•32 views

RockyLinux 10 : galera and mariadb11.8 (RLSA-2026:19021)

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:19021 advisory. MariaDB: MariaDB: Remote Code Execution or Denial of Service via JSONSCHEMAVALID function vulnerability CVE-2026-32710 Tenable has extracted the preceding...

9.9CVSS7.8AI score0.00802EPSS
SaveExploits1References3
OSV
OSV
•added 2026/04/27 2:44 p.m.•12 views

OPENSUSE-SU-2026:20629-1 Security update for mariadb

This update for mariadb fixes the following issue: - Update to v11.8.6 - CVE-2026-32710: heap-based buffer overflow via JSONSCHEMAVALID can lead to crash or remote code execution bsc1260081...

9.9CVSS8.2AI score0.00802EPSS
SaveExploits1References2
SUSE Linux
SUSE Linux
•added 2026/04/15 2:34 p.m.•17 views

Security update for mariadb

This update for mariadb fixes the following issues: Update to version 11.8.6. https://mariadb.com/docs/release-notes/community-server/11.8/11.8.6 https://mariadb.com/docs/release-notes/community-server/changelogs/11.8/11.8.6 Security issues fixed: CVE-2026-32710: heap-based buffer overflow via...

8.5CVSS8.3AI score0.00802EPSS
SaveExploits1References4
SUSE CVE
SUSE CVE
•added 2026/03/24 12:24 a.m.•15 views

SUSE CVE-2026-32710

MariaDB server is a community developed fork of MySQL server. An authenticated user can crash MariaDB versions 11.4 before 11.4.10 and 11.8 before 11.8.6 via a bug in JSONSCHEMAVALID function. Under certain conditions it might be possible to turn the crash into a remote code execution. These...

8.5CVSS8AI score0.00802EPSS
SaveExploits1References7
OSV
OSV
•added 2026/03/20 7:16 p.m.•20 views

UBUNTU-CVE-2026-32710

MariaDB server is a community developed fork of MySQL server. An authenticated user can crash MariaDB versions 11.4 before 11.4.10 and 11.8 before 11.8.6 via a bug in JSONSCHEMAVALID function. Under certain conditions it might be possible to turn the crash into a remote code execution. These...

9.9CVSS8AI score0.00802EPSS
SaveExploits1References3
UbuntuCve
UbuntuCve
•added 2026/03/20 7:16 p.m.•19 views

CVE-2026-32710

MariaDB server is a community developed fork of MySQL server. An authenticated user can crash MariaDB versions 11.4 before 11.4.10 and 11.8 before 11.8.6 via a bug in JSONSCHEMAVALID function. Under certain conditions it might be possible to turn the crash into a remote code execution. These...

9.9CVSS7.6AI score0.00802EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2026/03/20 6:31 p.m.•23 views

CVE-2026-32710

MariaDB server is a community developed fork of MySQL server. An authenticated user can crash MariaDB versions 11.4 before 11.4.10 and 11.8 before 11.8.6 via a bug in JSONSCHEMAVALID function. Under certain conditions it might be possible to turn the crash into a remote code execution. These...

8.5CVSS8AI score0.00802EPSS
SaveExploits1References3Affected Software1
Rows per page
Query Builder