Lucene search
K

13 matches found

Tenable Nessus
Tenable Nessus
added 2026/01/13 12:0 a.m.2 views

MiracleLinux 8 : python36:3.6 (AXSA:2025-9998:01)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2025-9998:01 advisory. python-pymongo: Out-of-bounds read in bson module CVE-2024-5629 Tenable has extracted the preceding description block directly from the MiracleLinux security...

8.1CVSS6.2AI score0.0017EPSS
Exploits0References2
AlmaLinux
AlmaLinux
added 2025/06/03 12:0 a.m.6 views

Low: python36:3.6 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

8.1CVSS7.1AI score0.0017EPSS
Exploits0References4
OSV
OSV
added 2024/07/22 2:30 p.m.0 views

USN-6904-1 pymongo vulnerability

It was discovered that PyMongo incorrectly handled certain BSON. An attacker could possibly use this issue to read sensitive information or cause a crash...

8.1CVSS6.9AI score0.0017EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2024/07/22 12:0 a.m.23 views

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS : PyMongo vulnerability (USN-6904-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-6904-1 advisory. It was discovered that PyMongo incorrectly handled certain BSON. An attacker could possibly use this issue to read...

8.1CVSS6.3AI score0.0017EPSS
Exploits0References2
vulnersOsv
vulnersOsv
added 2024/06/05 3:30 p.m.1 views

2023-assignement-devops (=2.0.0), 2023-assignment-devops (>=1.0.0 <=1.0.1) +4888 more potentially affected by CVE-2024-5629 via pymongo (>=2.4.1 <=4.6.2)

pymongo PYPI version =2.4.1, =1.0.0, =1.0.0, =0.1.0, =0.1.0, =0.2.0, =0.0.1, =1.0.0, =2.0.0, =2.0.1 - abics =2.1.0 and more Source cves: CVE-2024-5629 Source advisory: OSV:GHSA-M87M-MMVP-V9QM...

8.1CVSS6.4AI score0.0017EPSS
Exploits0
OSV
OSV
added 2024/06/05 3:15 p.m.2 views

AZL-42726 CVE-2024-5629 affecting package python-pymongo 4.2.0-9

An out-of-bounds read in the 'bson' module of PyMongo 4.6.2 or earlier allows deserialization of malformed BSON provided by a Server to raise an exception which may contain arbitrary application memory...

8.1CVSS6.7AI score0.0017EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2024/06/05 12:0 a.m.5 views

PT-2024-4425 · Pypi +7 · Pymongo +7

Name of the Vulnerable Software and Affected Versions: PyMongo versions 4.6.2 and earlier Description: The issue is related to an out-of-bounds read in the 'bson' module, allowing deserialization of malformed BSON provided by a server. This can lead to an exception that may contain arbitrary...

8.1CVSS5.3AI score0.00179EPSS
Exploits1References45
Amazon
Amazon
added 2024/05/13 12:0 a.m.6 views

Medium: python-pymongo

Issue Overview: Versions of the package pymongo before 4.6.3 are vulnerable to Out-of-bounds Read in the bson module. Using the crafted payload the attacker could force the parser to deserialize unmanaged memory. The parser tries to interpret bytes next to buffer and throws an exception with...

8.1CVSS7.4AI score0.0017EPSS
Exploits0
Debian CVE
Debian CVE
added 2024/04/06 5:0 a.m.24 views

CVE-2024-21506

Removed by vendor...

6.2AI score
Exploits0
vulnersOsv
vulnersOsv
added 2024/03/04 12:2 a.m.2 views

2023-assignement-devops (=2.0.0), 2023-assignment-devops (>=1.0.0 <=1.0.1) +4416 more potentially affected by CVE-2024-5629 via pymongo (>=4.0.0 <=4.6.2)

pymongo PYPI version =4.0.0, =1.0.0, =1.0.0, =0.1.0, =0.1.0, =0.2.0, =0.0.1, =0.4.0, =0.3.13, =0.1.0, =0.1.0, =0.1.0, =0.5.0 and more Source cves: CVE-2024-5629 Source advisory: SNYK:PYTHON-PYMONGO-7172112...

8.1CVSS6.4AI score0.0017EPSS
Exploits0
vulnersOsv
vulnersOsv
added 2022/05/14 2:10 a.m.1 views

quokka (>=0.0.1.dev84 <=0.4.1.dev22) potentially affected by CVE-2013-2132 via pymongo (=2.4.1)

pymongo PYPI version =2.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - quokka =0.0.1.dev84, =0.4.1.dev22 Source cves: CVE-2013-2132 Source advisory: OSV:GHSA-X33V-F3GP-GW2C...

4.3CVSS7.2AI score0.02215EPSS
Exploits2
vulnersOsv
vulnersOsv
added 2013/08/15 5:55 p.m.1 views

quokka (>=0.0.1.dev84 <=0.4.1.dev22) potentially affected by CVE-2013-2132 via pymongo (=2.4.1)

pymongo PYPI version =2.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - quokka =0.0.1.dev84, =0.4.1.dev22 Source cves: CVE-2013-2132 Source advisory: OSV:PYSEC-2013-30...

4.3CVSS7.2AI score0.02215EPSS
Exploits2
OSV
OSV
added 2013/07/06 2:14 p.m.5 views

MGASA-2013-0201 Updated python-pymongo packages fix CVE-2013-2132

PyMongo before 2.5.2 is prone to a denial-of-service vulnerability. An attacker can remotely trigger a NULL pointer dereference causing MongoDB to crash CVE-2013-2132...

4.3CVSS6.1AI score0.02215EPSS
Exploits2References3
Rows per page
Query Builder