Lucene search
+L

12680 matches found

Mend
Mend
•added 2025/10/13 4:22 p.m.•4 views

CVE-2025-11695

When tlsInsecure=False appears in a connection string, certificate validation is disabled. This vulnerability affects MongoDB Rust Driver versions prior to v3.2.5...

8.8CVSS5.8AI score0.00176EPSS
SaveExploits0References7
Vulnrichment
Vulnrichment
•added 2025/10/13 4:22 p.m.•7 views

CVE-2025-11695 Configuration may unexpectedly disable certificate validation

When tlsInsecure=False appears in a connection string, certificate validation is disabled. This vulnerability affects MongoDB Rust Driver versions prior to v3.2.5...

8CVSS5.8AI score0.00176EPSS
SaveExploits0References1
MongoDB
MongoDB
•added 2025/10/13 4:22 p.m.•29 views

Configuration may unexpectedly disable certificate validation

When tlsInsecure=False appears in a connection string, certificate validation is disabled. This vulnerability affects MongoDB Rust Driver versions prior to v3.2.5...

8CVSS5.8AI score0.00176EPSS
SaveExploits0References1Affected Software1
RedhatCVE
RedhatCVE
•added 2025/10/13 6:20 a.m.•30 views

CVE-2025-62162

cel-rust is a Common Expression Language interpreter written in Rust. Starting in version 0.10.0 and prior to version 0.11.4, parsing certain malformed CEL expressions can cause the parser to panic, terminating the process. When the crate is used to evaluate untrusted expressions e.g.,...

7.5CVSS5.8AI score0.00355EPSS
SaveExploits0References1
The Hacker News
The Hacker News
•added 2025/10/13 5:12 a.m.•9 views

New Rust-Based Malware "ChaosBot" Uses Discord Channels to Control Victims' PCs

Cybersecurity researchers have disclosed details of a new Rust-based backdoor called ChaosBot that can allow operators to conduct reconnaissance and execute arbitrary commands on compromised hosts. "Threat actors leveraged compromised credentials that mapped to both Cisco VPN and an over-privileg...

6.6AI score
SaveExploits0
The Hacker News
The Hacker News
•added 2025/10/13 5:12 a.m.•32 views

New Rust-Based Malware "ChaosBot" Uses Discord Channels to Control Victims' PCs

Cybersecurity researchers have disclosed details of a new Rust-based backdoor called ChaosBot that can allow operators to conduct reconnaissance and execute arbitrary commands on compromised hosts. "Threat actors leveraged compromised credentials that mapped to both Cisco VPN and an over-privileg...

7.8AI score
SaveExploits0
CNNVD
CNNVD
•added 2025/10/13 12:00 a.m.•21 views

MongoDB Rust Driver 安全漏洞

MongoDB Rust Driver is a MongoDB open source client library that allows Rust programs to connect to MongoDB databases. A security vulnerability exists in MongoDB Rust Driver versions prior to v3.2.5 that stems from disabling certificate validation, which could lead to a man-in-the-middle attack...

8CVSS5.8AI score0.00176EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/10/13 12:00 a.m.•23 views

PT-2025-41792

Name of the Vulnerable Software and Affected Versions MongoDB Rust Driver versions prior to 3.2.5 Description The MongoDB Rust Driver is affected by an issue where setting tlsInsecure=False in a connection string disables certificate validation. Normally, this parameter should enforce strict TLS...

8CVSS5.8AI score0.00176EPSS
SaveExploits0References18
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/13 12:00 a.m.•9 views

CVE-2025-11695: Improper Certificate Validation

When tlsInsecure=False appears in a connection string, certificate validation is disabled. This vulnerability affects MongoDB Rust Driver versions prior to v3.2.5...

8CVSS5.8AI score0.00176EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/11 1:30 a.m.•18 views

EUVD-2025-33786

cel-rust May Panic During Parsing of Invalid CEL Expressions...

7.5CVSS5.8AI score0.00355EPSS
SaveExploits0References4
NVD
NVD
•added 2025/10/10 11:15 p.m.•25 views

CVE-2025-62162

cel-rust is a Common Expression Language interpreter written in Rust. Starting in version 0.10.0 and prior to version 0.11.4, parsing certain malformed CEL expressions can cause the parser to panic, terminating the process. When the crate is used to evaluate untrusted expressions e.g.,...

7.5CVSS0.00355EPSS
SaveExploits0References2
CVE
CVE
•added 2025/10/10 10:25 p.m.•42 views

CVE-2025-62162

CVE-2025-62162 — cel-rust DoS via malformed CEL expressions . The vulnerability affects the CEL interpreter written in Rust, specifically versions 0.10.0 through before 0.11.4. Parsing certain malformed CEL expressions can cause the parser to panic and terminate the process, enabling a denial of ...

7.5CVSS5.8AI score0.00355EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/10/10 10:25 p.m.•7 views

CVE-2025-62162 cel-rust May Panic During Parsing of Invalid CEL Expressions

cel-rust is a Common Expression Language interpreter written in Rust. Starting in version 0.10.0 and prior to version 0.11.4, parsing certain malformed CEL expressions can cause the parser to panic, terminating the process. When the crate is used to evaluate untrusted expressions e.g.,...

7.5CVSS5.8AI score0.00355EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2025/10/10 10:25 p.m.•18 views

CVE-2025-62162 cel-rust May Panic During Parsing of Invalid CEL Expressions

cel-rust is a Common Expression Language interpreter written in Rust. Starting in version 0.10.0 and prior to version 0.11.4, parsing certain malformed CEL expressions can cause the parser to panic, terminating the process. When the crate is used to evaluate untrusted expressions e.g.,...

7.5CVSS6.6AI score
SaveExploits0References4
Cvelist
Cvelist
•added 2025/10/10 10:25 p.m.•30 views

CVE-2025-62162 cel-rust May Panic During Parsing of Invalid CEL Expressions

cel-rust is a Common Expression Language interpreter written in Rust. Starting in version 0.10.0 and prior to version 0.11.4, parsing certain malformed CEL expressions can cause the parser to panic, terminating the process. When the crate is used to evaluate untrusted expressions e.g.,...

7.5CVSS0.00355EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/10/10 12:00 a.m.•31 views

PT-2025-41615

Name of the Vulnerable Software and Affected Versions cel-rust versions 0.10.0 through 0.11.3 Description cel-rust is a Common Expression Language interpreter written in Rust. Parsing specific, malformed Common Expression Language CEL expressions can cause the parser to terminate unexpectedly. If...

7.5CVSS5.7AI score0.00355EPSS
SaveExploits0References19
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/10 12:00 a.m.•8 views

CVE-2025-62162: Improper Input Validation

cel-rust is a Common Expression Language interpreter written in Rust. Starting in version 0.10.0 and prior to version 0.11.4, parsing certain malformed CEL expressions can cause the parser to panic, terminating the process. When the crate is used to evaluate untrusted expressions e.g.,...

7.5CVSS5.8AI score0.00355EPSS
SaveExploits0References1
Fedora
Fedora
•added 2025/10/09 1:15 a.m.•21 views

[SECURITY] Fedora 41 Update: rust-protobuf-codegen-3.7.2-1.fc41

Code generator for rust-protobuf. Includes a library to invoke programmatically e. g. from build.rs and protoc-gen-rs binary...

5.9CVSS6.3AI score0.00473EPSS
SaveExploits0
Fedora
Fedora
•added 2025/10/09 1:15 a.m.•16 views

[SECURITY] Fedora 41 Update: rust-protobuf-parse-3.7.2-1.fc41

Parse .proto files. Files are parsed into a protobuf::descriptor::FileDescriptorSet object using either: pure rust parser no dependencies protoc binary more reliable and compatible with Google's implementation...

5.9CVSS6.3AI score0.00473EPSS
SaveExploits0
Fedora
Fedora
•added 2025/10/09 1:15 a.m.•19 views

[SECURITY] Fedora 41 Update: rust-protobuf-support-3.7.2-1.fc41

Code supporting protobuf implementation. None of code in this crate is public API...

5.9CVSS6.2AI score0.00473EPSS
SaveExploits0
Rows per page
Query Builder