13 matches found
MiracleLinux 8 : python36:3.6 (AXSA:2025-9998:01)
The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2025-9998:01 advisory. python-pymongo: Out-of-bounds read in bson module CVE-2024-5629 Tenable has extracted the preceding description block directly from the MiracleLinux security...
Low: python36:3.6 security update
Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...
USN-6904-1 pymongo vulnerability
It was discovered that PyMongo incorrectly handled certain BSON. An attacker could possibly use this issue to read sensitive information or cause a crash...
Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS : PyMongo vulnerability (USN-6904-1)
The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-6904-1 advisory. It was discovered that PyMongo incorrectly handled certain BSON. An attacker could possibly use this issue to read...
2023-assignement-devops (=2.0.0), 2023-assignment-devops (>=1.0.0 <=1.0.1) +4888 more potentially affected by CVE-2024-5629 via pymongo (>=2.4.1 <=4.6.2)
pymongo PYPI version =2.4.1, =1.0.0, =1.0.0, =0.1.0, =0.1.0, =0.2.0, =0.0.1, =1.0.0, =2.0.0, =2.0.1 - abics =2.1.0 and more Source cves: CVE-2024-5629 Source advisory: OSV:GHSA-M87M-MMVP-V9QM...
AZL-42726 CVE-2024-5629 affecting package python-pymongo 4.2.0-9
An out-of-bounds read in the 'bson' module of PyMongo 4.6.2 or earlier allows deserialization of malformed BSON provided by a Server to raise an exception which may contain arbitrary application memory...
PT-2024-4425 · Pypi +7 · Pymongo +7
Name of the Vulnerable Software and Affected Versions: PyMongo versions 4.6.2 and earlier Description: The issue is related to an out-of-bounds read in the 'bson' module, allowing deserialization of malformed BSON provided by a server. This can lead to an exception that may contain arbitrary...
Medium: python-pymongo
Issue Overview: Versions of the package pymongo before 4.6.3 are vulnerable to Out-of-bounds Read in the bson module. Using the crafted payload the attacker could force the parser to deserialize unmanaged memory. The parser tries to interpret bytes next to buffer and throws an exception with...
CVE-2024-21506
Removed by vendor...
2023-assignement-devops (=2.0.0), 2023-assignment-devops (>=1.0.0 <=1.0.1) +4416 more potentially affected by CVE-2024-5629 via pymongo (>=4.0.0 <=4.6.2)
pymongo PYPI version =4.0.0, =1.0.0, =1.0.0, =0.1.0, =0.1.0, =0.2.0, =0.0.1, =0.4.0, =0.3.13, =0.1.0, =0.1.0, =0.1.0, =0.5.0 and more Source cves: CVE-2024-5629 Source advisory: SNYK:PYTHON-PYMONGO-7172112...
quokka (>=0.0.1.dev84 <=0.4.1.dev22) potentially affected by CVE-2013-2132 via pymongo (=2.4.1)
pymongo PYPI version =2.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - quokka =0.0.1.dev84, =0.4.1.dev22 Source cves: CVE-2013-2132 Source advisory: OSV:GHSA-X33V-F3GP-GW2C...
quokka (>=0.0.1.dev84 <=0.4.1.dev22) potentially affected by CVE-2013-2132 via pymongo (=2.4.1)
pymongo PYPI version =2.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - quokka =0.0.1.dev84, =0.4.1.dev22 Source cves: CVE-2013-2132 Source advisory: OSV:PYSEC-2013-30...
MGASA-2013-0201 Updated python-pymongo packages fix CVE-2013-2132
PyMongo before 2.5.2 is prone to a denial-of-service vulnerability. An attacker can remotely trigger a NULL pointer dereference causing MongoDB to crash CVE-2013-2132...