Lucene search
K

18 matches found

EUVD
EUVD
added 2026/05/29 7:32 p.m.7 views

EUVD-2026-30803

amazon-redshift-python-driver vulnerable to Remote Code Execution via eval Injection...

9.8CVSS5.8AI score0.00076EPSS
Exploits1References4
NVD
NVD
added 2026/05/18 9:16 p.m.14 views

CVE-2026-8838

Unsafe use of Python's eval on server-received data in the vectorin function in amazon-redshift-python-driver before 2.1.14 allows a rogue server or man-in-the-middle actor to execute arbitrary code on the client. To remediate this issue, users should upgrade to version 2.1.14...

9.8CVSS0.00076EPSS
Exploits1References3
Cvelist
Cvelist
added 2026/05/18 8:15 p.m.31 views

CVE-2026-8838 Remote Code Execution via eval() Injection in amazon-redshift-python-driver

Unsafe use of Python's eval on server-received data in the vectorin function in amazon-redshift-python-driver before 2.1.14 allows a rogue server or man-in-the-middle actor to execute arbitrary code on the client. To remediate this issue, users should upgrade to version 2.1.14...

9.8CVSS0.00076EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2026/05/18 12:0 a.m.7 views

PT-2026-41734

Name of the Vulnerable Software and Affected Versions amazon-redshift-python-driver versions prior to 2.1.14 Description Unsafe use of Python's eval function on data received from a server within the vector in function allows a rogue server or man-in-the-middle actor to execute arbitrary code on...

9.8CVSS6.2AI score0.00076EPSS
Exploits1References11
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/07/31 7:15 p.m.2 views

Malicious code in moxel-python-driver (PyPI)

--- -= Per source details. Do not edit below this line.=-...

7AI score
Exploits0
OSV
OSV
added 2025/07/31 7:15 p.m.3 views

MAL-2025-6550 Malicious code in moxel-python-driver (PyPI)

--- -= Per source details. Do not edit below this line.=-...

7.1AI score
Exploits0
RedhatCVE
RedhatCVE
added 2025/05/23 1:10 a.m.13 views

CVE-2022-45786

There are issues with the AGE drivers for Golang and Python that enable SQL injections to occur. This impacts AGE for PostgreSQL 11 & AGE for PostgreSQL 12, all versions up-to-and-including 1.1.0, when using those drivers. The fix is to update to the latest Golang and Python drivers in addition t...

8.1CVSS7.7AI score0.00511EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2024/10/28 12:0 a.m.1 views

The vulnerability of the Connector/Python driver component of MySQL Connectors in the Oracle MySQL database management system allows a hacker to gain full control over the application.

The vulnerability of the Connector/Python driver component of MySQL Connectors in the Oracle MySQL database management system is related to the lack of authentication for the critical function. Exploiting this vulnerability allows a malicious actor to gain full control over the application using...

7.5CVSS7.7AI score0.00915EPSS
Exploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2024/05/02 12:0 a.m.1 views

The vulnerability of the Connector/Python driver component of MySQL Connectors in the Oracle MySQL database management system allows a hacker to cause a service failure.

The vulnerability of the Connector/Python driver for MySQL Connectors in the Oracle MySQL database management system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

7.8CVSS7AI score0.00269EPSS
Exploits0References3Affected Software1
CNNVD
CNNVD
added 2024/04/06 12:0 a.m.2 views

编号撤回

PyMongo is an official MongoDB Python driver for MongoDB Open Source. This CVE number has been withdrawn...

6.2AI score
Exploits0References6
SUSE CVE
SUSE CVE
added 2023/02/15 5:39 a.m.1 views

SUSE CVE-2013-2132

bson/cbsonmodule.c in the mongo-python-driver aka. pymongo before 2.5.2, as used in MongoDB, allows context-dependent attackers to cause a denial of service NULL pointer dereference and crash via vectors related to decoding of an "invalid DBRef."...

4.3CVSS7.9AI score0.02215EPSS
Exploits2References3
OSV
OSV
added 2023/02/04 9:30 p.m.1 views

GHSA-6P5Q-H963-PWWF Apache AGE: Python and Golang drivers allow data manipulation and exposure due to SQL injection

There are issues with the AGE drivers for Golang and Python that enable SQL injections to occur. This impacts AGE for PostgreSQL 11 & AGE for PostgreSQL 12, all versions up-to-and-including 1.1.0, when using those drivers. The fix is to update to the latest Golang and Python drivers in addition t...

8.1CVSS7.3AI score0.00511EPSS
Exploits0References3
Cvelist
Cvelist
added 2023/02/04 8:40 p.m.16 views

CVE-2022-45786 Apache AGE: Python and Golang drivers allow data manipulation and exposure due to SQL injection

There are issues with the AGE drivers for Golang and Python that enable SQL injections to occur. This impacts AGE for PostgreSQL 11 & AGE for PostgreSQL 12, all versions up-to-and-including 1.1.0, when using those drivers. The fix is to update to the latest Golang and Python drivers in addition t...

8.6AI score0.00511EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2023/02/04 8:40 p.m.5 views

CVE-2022-45786 Apache AGE: Python and Golang drivers allow data manipulation and exposure due to SQL injection

There are issues with the AGE drivers for Golang and Python that enable SQL injections to occur. This impacts AGE for PostgreSQL 11 & AGE for PostgreSQL 12, all versions up-to-and-including 1.1.0, when using those drivers. The fix is to update to the latest Golang and Python drivers in addition t...

8AI score0.00511EPSS
Exploits0References1
OSV
OSV
added 2013/08/15 5:55 p.m.26 views

PYSEC-2013-30

bson/cbsonmodule.c in the mongo-python-driver aka. pymongo before 2.5.2, as used in MongoDB, allows context-dependent attackers to cause a denial of service NULL pointer dereference and crash via vectors related to decoding of an "invalid DBRef."...

4.3CVSS5.3AI score0.02215EPSS
Exploits2References10
Cvelist
Cvelist
added 2013/08/15 5:0 p.m.21 views

CVE-2013-2132

bson/cbsonmodule.c in the mongo-python-driver aka. pymongo before 2.5.2, as used in MongoDB, allows context-dependent attackers to cause a denial of service NULL pointer dereference and crash via vectors related to decoding of an "invalid DBRef."...

7.5AI score0.02215EPSS
Exploits2References9
Positive Technologies
Positive Technologies
added 2013/07/06 12:0 a.m.4 views

PT-2013-3553 · Mongodb · Mongo-Python-Driver +1

Name of the Vulnerable Software and Affected Versions: mongo-python-driver versions prior to 2.5.2 Description: The issue allows context-dependent attackers to cause a denial of service, resulting in a NULL pointer dereference and crash. This is related to the decoding of an "invalid DBRef" in th...

6.9CVSS7.8AI score0.02215EPSS
Exploits2References26
UbuntuCve
UbuntuCve
added 2013/06/03 12:0 a.m.35 views

CVE-2013-2132

bson/cbsonmodule.c in the mongo-python-driver aka. pymongo before 2.5.2, as used in MongoDB, allows context-dependent attackers to cause a denial of service NULL pointer dereference and crash via vectors related to decoding of an "invalid DBRef."...

4.3CVSS7.1AI score0.02215EPSS
Exploits2References2
Rows per page
Query Builder