Lucene search
+L

72474 matches found

osv_mal
osv_mal
•added 2026/09/10 8:14 p.m.•20 views

MAL-2026-16125 Malicious code in lucy-python-script-2030 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2195ea343abdb1205451fc7c778bdd1580cf985461949081852e9e82363ac389 The package was found to contain malicious code or consuming dependency that contains malicious code Source: kam193...

5.8AI score
SaveExploits0References3
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/09/10 8:14 p.m.•53 views

Malicious code in lucy-python-script-2030 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2195ea343abdb1205451fc7c778bdd1580cf985461949081852e9e82363ac389 The package was found to contain malicious code or consuming dependency that contains malicious code Source: kam193...

5.8AI score
SaveExploits0References3
GithubExploit
GithubExploit
•added 2026/09/10 7:38 p.m.•28 views

FVO-ORACLE

FVO-ORACLE Custom Python vulnerability scanner with AI-powe...

6AI score
SaveExploits0
RedhatCVE
RedhatCVE
•added 2026/09/10 6:21 p.m.•18 views

CVE-2026-88029

A flaw was found in the GridFS component of the MongoDB Python Driver pymongo. The driver can treat a caller-supplied structured file identifier as a MongoDB query condition instead of a literal identifier. An authenticated user who can influence the identifier passed to GridFS download, delete, ...

8.3CVSS7.1AI score0.00265EPSS
SaveExploits0References4
NVD
NVD
•added 2026/09/10 6:18 p.m.•20 views

CVE-2026-88029

Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB Python Driver can cause a caller-supplied structured file identifier to be interpreted as a query condition rather than as a literal identifier. An authenticated user who can influence the...

8.3CVSS0.00265EPSS
SaveExploits0References1
osv_debian
osv_debian
•added 2026/09/10 6:18 p.m.•10 views

DEBIAN-CVE-2026-88029

Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB Python Driver can cause a caller-supplied structured file identifier to be interpreted as a query condition rather than as a literal identifier. An authenticated user who can influence the...

6.1CVSS7.3AI score0.00265EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2026/09/10 6:18 p.m.•21 views

CVE-2026-88029

Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB Python Driver can cause a caller-supplied structured file identifier to be interpreted as a query condition rather than as a literal identifier. An authenticated user who can influence the...

8.3CVSS7.2AI score0.00265EPSS
SaveExploits0References2
osv_ubuntu
osv_ubuntu
•added 2026/09/10 6:18 p.m.•19 views

UBUNTU-CVE-2026-88029

Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB Python Driver can cause a caller-supplied structured file identifier to be interpreted as a query condition rather than as a literal identifier. An authenticated user who can influence the...

8.3CVSS7.3AI score0.00265EPSS
SaveExploits0References3
osv_cve
osv_cve
•added 2026/09/10 5:56 p.m.•13 views

CVE-2026-88029 GridFS data disclosure and deletion via query-operator injection in file IDs in the MongoDB Python Driver

Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB Python Driver can cause a caller-supplied structured file identifier to be interpreted as a query condition rather than as a literal identifier. An authenticated user who can influence the...

6.1CVSS5.8AI score
SaveExploits0References3
Cvelist
Cvelist
•added 2026/09/10 5:56 p.m.•79 views

CVE-2026-88029 GridFS data disclosure and deletion via query-operator injection in file IDs in the MongoDB Python Driver

Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB Python Driver can cause a caller-supplied structured file identifier to be interpreted as a query condition rather than as a literal identifier. An authenticated user who can influence the...

8.3CVSS0.00265EPSS
SaveExploits0References1
Mend
Mend
•added 2026/09/10 5:56 p.m.•13 views

CVE-2026-88029

Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB Python Driver can cause a caller-supplied structured file identifier to be interpreted as a query condition rather than as a literal identifier. An authenticated user who can influence the...

8.3CVSS7.3AI score0.00265EPSS
SaveExploits0References10
CVE
CVE
•added 2026/09/10 5:56 p.m.•78 views

CVE-2026-88029

CVE-2026-88029 is a query-operator injection vulnerability in the GridFS component of the MongoDB Python Driver . An improper neutralization of special elements in data query logic allows a caller-supplied structured file identifier to be interpreted as a query condition rather than a literal ide...

8.3CVSS7.3AI score0.00265EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2026/09/10 5:56 p.m.•17 views

CVE-2026-88029 GridFS data disclosure and deletion via query-operator injection in file IDs in the MongoDB Python Driver

Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB Python Driver can cause a caller-supplied structured file identifier to be interpreted as a query condition rather than as a literal identifier. An authenticated user who can influence the...

8.3CVSS7.3AI score0.00265EPSS
SaveExploits0References1
Debian CVE
Debian CVE
•added 2026/09/10 5:56 p.m.•26 views

CVE-2026-88029

Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB Python Driver can cause a caller-supplied structured file identifier to be interpreted as a query condition rather than as a literal identifier. An authenticated user who can influence the...

8.3CVSS7.3AI score0.00265EPSS
SaveExploits0
MongoDB
MongoDB
•added 2026/09/10 5:56 p.m.•17 views

GridFS data disclosure and deletion via query-operator injection in file IDs in the MongoDB Python Driver

Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB Python Driver can cause a caller-supplied structured file identifier to be interpreted as a query condition rather than as a literal identifier. An authenticated user who can influence the...

8.3CVSS7.3AI score0.00265EPSS
SaveExploits0References1Affected Software1
PyPA
PyPA
•added 2026/09/10 4:42 p.m.•17 views

PYSEC-2026-3968

pytorch-lightning is vulnerable to Deserialization of Untrusted Data...

7.8CVSS7.3AI score0.01011EPSS
SaveExploits1References3Affected Software1
osv_pysec
osv_pysec
•added 2026/09/10 4:42 p.m.•22 views

PYSEC-2026-3969

Code Injection in GitHub repository pytorchlightning/pytorch-lightning prior to 1.6.0...

10CVSS7.5AI score0.00999EPSS
SaveExploits1References3
PyPA
PyPA
•added 2026/09/10 4:42 p.m.•20 views

PYSEC-2026-3969

Code Injection in GitHub repository pytorchlightning/pytorch-lightning prior to 1.6.0...

10CVSS7.6AI score0.00999EPSS
SaveExploits1References3Affected Software1
osv_pysec
osv_pysec
•added 2026/09/10 4:42 p.m.•22 views

PYSEC-2026-3968

pytorch-lightning is vulnerable to Deserialization of Untrusted Data...

7.8CVSS7.3AI score0.01011EPSS
SaveExploits1References3
osv_usn
osv_usn
•added 2026/09/10 1:53 p.m.•31 views

USN-8744-1 python2.7, python3.4, python3.5, python3.6, python3.7, python3.8, python3.9, python3.10, python3.11, python3.12, python3.14 vulnerabilities

It was discovered that Python's http.cookies module incorrectly handled control characters in certain cookie operations. An attacker could possibly use this issue to inject arbitrary content. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu...

8.7CVSS7.1AI score0.00702EPSS
SaveExploits1References6
Rows per page
Query Builder