Lucene search
+L

1247 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/18 12:00 a.m.•4 views

CVE-2026-71079: Improper Access Control

Vulnerability in the MySQL Connectors product of Oracle MySQL component: Connector/ODBC. The supported version that is affected is 26.7.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Connectors. Successful attacks ...

6.5CVSS5.7AI score0.0037EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/08/18 12:00 a.m.•22 views

PT-2026-78068

Name of the Vulnerable Software and Affected Versions Oracle MySQL Connector/ODBC version 26.7.0 Description A flaw in the MySQL Connectors product allows a low privileged attacker with network access via multiple protocols to compromise the system. Successful exploitation can lead to a hang or a...

6.5CVSS5.1AI score0.0037EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/08/18 12:00 a.m.•21 views

PT-2026-78062

Name of the Vulnerable Software and Affected Versions Oracle MySQL Connector/ODBC version 26.7.0 Description An unauthenticated attacker with access to the infrastructure where the software executes can compromise the system. This issue requires human interaction from a person other than the...

5.5CVSS5.3AI score0.00162EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/08/18 12:00 a.m.•17 views

PT-2026-78073

Name of the Vulnerable Software and Affected Versions Oracle MySQL Connector/ODBC version 26.7.0 Description An unauthenticated attacker with access to the infrastructure where the software executes can compromise the system. This issue can lead to unauthorized read access to a subset of accessib...

6.8CVSS5.3AI score0.00169EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/18 12:00 a.m.•5 views

CVE-2026-71073: Improper Resource Shutdown or Release

Vulnerability in the MySQL Connectors product of Oracle MySQL component: Connector/ODBC. The supported version that is affected is 26.7.0. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where MySQL Connectors executes to compromise MySQL...

5.5CVSS5.8AI score0.00162EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/18 12:00 a.m.•4 views

CVE-2026-71084: Improper Access Control

Vulnerability in the MySQL Connectors product of Oracle MySQL component: Connector/ODBC. The supported version that is affected is 26.7.0. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where MySQL Connectors executes to compromise MySQL...

6.8CVSS5.7AI score0.00169EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/08/13 12:31 a.m.•18 views

EUVD-2026-57630

A data source definition containing an over-length file path setting may cause the MongoDB BI Connector ODBC Driver setup dialog to write outside the bounds of an allocated buffer. The issue stems from an incorrect buffer capacity calculation in the dialog's file and folder selection handling, an...

8.4CVSS5.7AI score0.00211EPSS
SaveExploits0References2
NVD
NVD
•added 2026/08/12 10:17 p.m.•15 views

CVE-2026-19003

A data source definition containing an over-length file path setting may cause the MongoDB BI Connector ODBC Driver setup dialog to write outside the bounds of an allocated buffer. The issue stems from an incorrect buffer capacity calculation in the dialog's file and folder selection handling, an...

8.4CVSS0.00211EPSS
SaveExploits0References1
NVD
NVD
•added 2026/08/12 9:17 p.m.•15 views

CVE-2026-19002

A missing bounds check when parsing stored procedure parameter metadata in the MongoDB BI Connector ODBC Driver can result in an out-of-bounds write in the client application process. Triggering this issue requires control over the server the driver connects to, or the ability to respond in its...

8.8CVSS0.00404EPSS
SaveExploits0References1
NVD
NVD
•added 2026/08/12 9:17 p.m.•13 views

CVE-2026-19001

The MongoDB BI Connector ODBC Driver may write outside the bounds of a fixed-size buffer when an application supplies an unusually long catalog, schema, or object name to a metadata retrieval function. This may result in memory corruption within the calling application's process, leading to...

9.8CVSS0.00539EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2026/08/12 9:17 p.m.•10 views

CVE-2026-19503

MongoDB Schema Manager and MongoDB Atlas SQL ODBC Driver do not validate the scheme of the authorization and token endpoints returned by an OIDC issuer's discovery document. A user induced to connect to an uncontrolled MongoDB deployment using MONGODB-OIDC authentication may have an uncontrolled...

6.3CVSS6AI score0.00203EPSS
SaveExploits0References1
OSV
OSV
•added 2026/08/12 9:17 p.m.•8 views

UBUNTU-CVE-2026-18888

The MongoDB BI Connector ODBC Driver converts floating point column values into text without checking that the result fits within the destination buffer. When an application reads a sufficiently large floating point value as text, the driver may write beyond the end of that buffer and corrupt...

7.1CVSS6AI score0.00316EPSS
SaveExploits0References2
OSV
OSV
•added 2026/08/12 9:17 p.m.•9 views

UBUNTU-CVE-2026-19503

MongoDB Schema Manager and MongoDB Atlas SQL ODBC Driver do not validate the scheme of the authorization and token endpoints returned by an OIDC issuer's discovery document. A user induced to connect to an uncontrolled MongoDB deployment using MONGODB-OIDC authentication may have an uncontrolled...

6.5CVSS6.1AI score0.00203EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2026/08/12 9:17 p.m.•10 views

CVE-2026-18888

The MongoDB BI Connector ODBC Driver converts floating point column values into text without checking that the result fits within the destination buffer. When an application reads a sufficiently large floating point value as text, the driver may write beyond the end of that buffer and corrupt...

7.1CVSS5.8AI score0.00316EPSS
SaveExploits0References1
CVE
CVE
•added 2026/08/12 9:04 p.m.•45 views

CVE-2026-19003

MongoDB BI Connector ODBC Driver vulnerability (CVE-2026-19003) affects the driver’s setup dialog for data sources with overly long path settings. The root cause is an incorrect buffer capacity calculation in the dialog’s file/folder selection handling, which can cause the driver to write outside...

8.4CVSS6AI score0.00211EPSS
SaveExploits0References1Affected Software1
OSV
OSV
•added 2026/08/12 9:04 p.m.•47 views

CVE-2026-19003 MongoDB BI Connector ODBC driver may write outside an allocated buffer when the setup dialog opens a data source with oversized path settings

A data source definition containing an over-length file path setting may cause the MongoDB BI Connector ODBC Driver setup dialog to write outside the bounds of an allocated buffer. The issue stems from an incorrect buffer capacity calculation in the dialog's file and folder selection handling, an...

8.4CVSS5.8AI score
SaveExploits0References4
MongoDB
MongoDB
•added 2026/08/12 9:04 p.m.•14 views

MongoDB BI Connector ODBC driver may write outside an allocated buffer when the setup dialog opens a data source with oversized path settings

A data source definition containing an over-length file path setting may cause the MongoDB BI Connector ODBC Driver setup dialog to write outside the bounds of an allocated buffer. The issue stems from an incorrect buffer capacity calculation in the dialog's file and folder selection handling, an...

8.4CVSS6AI score0.00211EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2026/08/12 9:04 p.m.•11 views

CVE-2026-19003 MongoDB BI Connector ODBC driver may write outside an allocated buffer when the setup dialog opens a data source with oversized path settings

A data source definition containing an over-length file path setting may cause the MongoDB BI Connector ODBC Driver setup dialog to write outside the bounds of an allocated buffer. The issue stems from an incorrect buffer capacity calculation in the dialog's file and folder selection handling, an...

8.4CVSS6AI score0.00211EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/08/12 9:04 p.m.•14 views

CVE-2026-19003

A data source definition containing an over-length file path setting may cause the MongoDB BI Connector ODBC Driver setup dialog to write outside the bounds of an allocated buffer. The issue stems from an incorrect buffer capacity calculation in the dialog's file and folder selection handling, an...

8.4CVSS5.7AI score0.00211EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2026/08/12 9:04 p.m.•33 views

CVE-2026-19003 MongoDB BI Connector ODBC driver may write outside an allocated buffer when the setup dialog opens a data source with oversized path settings

A data source definition containing an over-length file path setting may cause the MongoDB BI Connector ODBC Driver setup dialog to write outside the bounds of an allocated buffer. The issue stems from an incorrect buffer capacity calculation in the dialog's file and folder selection handling, an...

8.4CVSS0.00211EPSS
SaveExploits0References1
Rows per page
Query Builder