Expired Pointer Dereference

Overview mongodb/mongodb-extension is a MongoDB driver extension Affected versions of this package are vulnerable to Expired Pointer Dereference via mongocbulkoperationt when large options are passed. An attacker can cause the application to read invalid memory. Remediation Upgrade...

Expired Pointer Dereference

Overview Affected versions of this package are vulnerable to Expired Pointer Dereference via mongocbulkoperationt when large options are passed. An attacker can cause the application to read invalid memory. Remediation Upgrade mongo-c-driver to version 1.30.6 or higher. References - GitHub Commit...

DEBIAN-CVE-2025-12119

A mongocbulkoperationt may read invalid memory if large options are passed...

CVE-2025-12119

A mongocbulkoperationt may read invalid memory if large options are passed...

UBUNTU-CVE-2025-12119

A mongocbulkoperationt may read invalid memory if large options are passed...

EUVD-2025-198076

pnetlab 5.3.11 is vulnerable to Command Injection via the qemuoptions parameter...

CVE-2025-12119 Bulk write with options may read invalid memory

A mongocbulkoperationt may read invalid memory if large options are passed...

CVE-2025-12119 Bulk write with options may read invalid memory

A mongocbulkoperationt may read invalid memory if large options are passed...

CVE-2025-12119

CVE-2025-12119 affects the MongoDB C driver: when using a bulk operation, mongoc_bulk_operation_t may read invalid memory if large options are passed. Connected advisories confirm the issue in the mongo-c-driver and reference Debian’s fix in version 1.17.6-1+deb11u2 for bullseye. Other listings (...

Bulk write with options may read invalid memory

A mongocbulkoperationt may read invalid memory if large options are passed...

CVE-2025-63749

pnetlab 5.3.11 is vulnerable to Command Injection via the qemuoptions parameter...

CVE-2025-63749

pnetlab 5.3.11 is vulnerable to Command Injection via the qemuoptions parameter...

PT-2025-47407

Name of the Vulnerable Software and Affected Versions mongoc affected versions not specified Description A mongoc bulk operation t may encounter an issue where it reads invalid memory when handling large options. Recommendations At the moment, there is no information about a newer version that...

mongo-c-driver security vulnerability

mongo-c-driver is an official MongoDB driver in C for the MongoDB open source. A security vulnerability exists in mongo-c-driver, which stems from the possibility of reading invalid memory when passing large options...

CVE-2025-63749

pnetlab 5.3.11 is vulnerable to Command Injection via the qemuoptions parameter...

PT-2025-47384

Name of the Vulnerable Software and Affected Versions pnetlab version 5.3.11 Description The software contains a flaw due to which an attacker could inject commands. This occurs through manipulation of the qemu options parameter. Recommendations At the moment, there is no information about a newe...

CVE-2025-63749

pnetlab 5.3.11 is vulnerable to Command Injection via the qemuoptions parameter...

CVE-2025-63749

Pnetlab version 5.3.11 is vulnerable to a Command Injection vulnerability (CWE-77) caused by the improper neutralization of special elements in the qemu_options parameter. An attacker can exploit this flaw by manipulating the parameter to execute arbitrary commands. No patch or newer version cont...

PNETLab security vulnerabilities

PNETLab is a platform from PNETLab Inc. that allows labs to be downloaded and shared with the community. A security vulnerability exists in PNETLab version 5.3.11 that stems from the qemuoptions parameter being vulnerable to command injection attacks...

WordPress Make Email Customizer for WooCommerce plugin <= 1.0.6 - Authenticated (Subscriber+) Arbitrary Options Update vulnerability

Authenticated Subscriber+ Arbitrary Options Update vulnerability discovered by Khaled Alenazi Nxploited in WordPress Plugin Make Email Customizer for WooCommerce versions = 1.0.6...