Lucene search
+L

12 matches found

Tenable Nessus
Tenable Nessus
added 2026/09/11 12:00 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2026-88030

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB Ruby Driver can cause a caller-supplied structured file...

8.3CVSS
SaveExploits0References2
NVD
NVD
added 2026/09/10 6:18 p.m.6 views

CVE-2026-88030

Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB Ruby Driver can cause a caller-supplied structured file identifier to be interpreted as a query condition rather than as a literal identifier. An authenticated user who can influence the...

8.3CVSS
SaveExploits0References1
OSV
OSV
added 2026/09/10 6:18 p.m.4 views

DEBIAN-CVE-2026-88030

Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB Ruby Driver can cause a caller-supplied structured file identifier to be interpreted as a query condition rather than as a literal identifier. An authenticated user who can influence the...

6.1CVSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/10 5:57 p.m.6 views

EUVD-2026-75666

Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB Ruby Driver can cause a caller-supplied structured file identifier to be interpreted as a query condition rather than as a literal identifier. An authenticated user who can influence the...

8.3CVSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/10 5:57 p.m.33 views

CVE-2026-88030 GridFS data disclosure and deletion via query-operator injection in file IDs in the MongoDB Ruby Driver

Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB Ruby Driver can cause a caller-supplied structured file identifier to be interpreted as a query condition rather than as a literal identifier. An authenticated user who can influence the...

8.3CVSS
SaveExploits0References1
MongoDB
MongoDB
added 2026/09/10 5:57 p.m.4 views

GridFS data disclosure and deletion via query-operator injection in file IDs in the MongoDB Ruby Driver

Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB Ruby Driver can cause a caller-supplied structured file identifier to be interpreted as a query condition rather than as a literal identifier. An authenticated user who can influence the...

8.3CVSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2026/09/10 5:57 p.m.11 views

CVE-2026-88030

CVE-2026-88030 affects the GridFS component of the MongoDB Ruby Driver . The root cause is improper neutralization of special elements in data query logic: a caller-supplied structured file identifier can be interpreted as a query condition rather than a literal identifier. An authenticated user ...

8.3CVSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/09/10 5:57 p.m.8 views

CVE-2026-88030 GridFS data disclosure and deletion via query-operator injection in file IDs in the MongoDB Ruby Driver

Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB Ruby Driver can cause a caller-supplied structured file identifier to be interpreted as a query condition rather than as a literal identifier. An authenticated user who can influence the...

8.3CVSS
SaveExploits0References1
Debian CVE
Debian CVE
added 2026/09/10 5:57 p.m.6 views

CVE-2026-88030

Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB Ruby Driver can cause a caller-supplied structured file identifier to be interpreted as a query condition rather than as a literal identifier. An authenticated user who can influence the...

8.3CVSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2026/09/10 12:00 a.m.5 views

PT-2026-89544

Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB Ruby Driver can cause a caller-supplied structured file identifier to be interpreted as a query condition rather than as a literal identifier. An authenticated user who can influence the...

8.3CVSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/02/10 12:00 a.m.21 views

MongoDB Ruby Driver 安全漏洞

The MongoDB Ruby Driver is an open-source Ruby library developed by MongoDB. There is a security vulnerability in the MongoDB Ruby Driver, which may allow arbitrary Ruby code to be executed when processing specially crafted Hash r types...

6.9CVSS6AI score0.00203EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
added 2023/02/15 5:18 a.m.8 views

SUSE CVE-2015-4411

The Moped::BSON::ObjecId.legal? method in mongodb/bson-ruby before 3.0.4 as used in rubygem-moped allows remote attackers to cause a denial of service worker resource consumption via a crafted string. NOTE: This issue is due to an incomplete fix to CVE-2015-4410...

7.5CVSS8.8AI score0.06372EPSS
SaveExploits1References3
Rows per page
Query Builder