8408 matches found
CVE-2025-11985 Realty Portal <= 0.4.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update
The Realty Portal plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the 'rpsavepropertysettings' function in versions 0.1 to 0.4.1. This makes it possible for authenticated attackers, with...
GHSA-MWCC-7VPP-XMV9 MongoDB driver extension affected by mongoc_bulk_operation_t's read of invalid memory
A mongocbulkoperationt may read invalid memory if large options are passed...
MongoDB driver extension affected by mongoc_bulk_operation_t's read of invalid memory
A mongocbulkoperationt may read invalid memory if large options are passed...
Linux Distros Unpatched Vulnerability : CVE-2025-12119
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A mongocbulkoperationt may read invalid memory if large options are passed. CVE-2025-12119 Note that Nessus relies on the presence of the package as reported by...
Expired Pointer Dereference
Overview mongodb/mongodb-extension is a MongoDB driver extension Affected versions of this package are vulnerable to Expired Pointer Dereference via mongocbulkoperationt when large options are passed. An attacker can cause the application to read invalid memory. Remediation Upgrade...
Expired Pointer Dereference
Overview Affected versions of this package are vulnerable to Expired Pointer Dereference via mongocbulkoperationt when large options are passed. An attacker can cause the application to read invalid memory. Remediation Upgrade mongo-c-driver to version 1.30.6 or higher. References - GitHub Commit...
CVE-2025-12119
A mongocbulkoperationt may read invalid memory if large options are passed...
DEBIAN-CVE-2025-12119
A mongocbulkoperationt may read invalid memory if large options are passed...
UBUNTU-CVE-2025-12119
A mongocbulkoperationt may read invalid memory if large options are passed...
EUVD-2025-198076
pnetlab 5.3.11 is vulnerable to Command Injection via the qemuoptions parameter...
CVE-2025-12119
CVE-2025-12119 affects the MongoDB C driver: when using a bulk operation, mongoc_bulk_operation_t may read invalid memory if large options are passed. Connected advisories confirm the issue in the mongo-c-driver and reference Debian’s fix in version 1.17.6-1+deb11u2 for bullseye. Other listings (...
CVE-2025-12119 Bulk write with options may read invalid memory
A mongocbulkoperationt may read invalid memory if large options are passed...
CVE-2025-12119 Bulk write with options may read invalid memory
A mongocbulkoperationt may read invalid memory if large options are passed...
Bulk write with options may read invalid memory
A mongocbulkoperationt may read invalid memory if large options are passed...
CVE-2025-63749
pnetlab 5.3.11 is vulnerable to Command Injection via the qemuoptions parameter...
CVE-2025-63749
pnetlab 5.3.11 is vulnerable to Command Injection via the qemuoptions parameter...
CVE-2025-63749
pnetlab 5.3.11 is vulnerable to Command Injection via the qemuoptions parameter...
CVE-2025-63749
CVE-2025-63749 affects pnetlab version 5.3.11. The vulnerability is a Command Injection via the qemu_options parameter in pnetlab, due to improper handling of that parameter. Impact is described as possible command execution with low to moderate severity (CVSS 3.1 base score 6.5, network attack v...
PT-2025-47384
Name of the Vulnerable Software and Affected Versions pnetlab version 5.3.11 Description The software contains a flaw due to which an attacker could inject commands. This occurs through manipulation of the qemu options parameter. Recommendations At the moment, there is no information about a newe...
