Lucene search
K

37 matches found

OSV
OSV
added 2026/05/19 8:53 a.m.3 views

BIT-MONGODB-2026-8053 FlatBSON Duplicate Field Index Drift

An issue in MongoDB Server's time-series collection implementation allows an authenticated user with database write privileges to trigger an out-of-bounds memory write in the mongod process. The issue results from an inconsistency in the internal field-name-to-index mapping within the time-series...

8.8CVSS6.1AI score0.00108EPSS
Exploits1References2
GithubExploit
GithubExploit
added 2026/05/18 9:29 a.m.69 views

Exploit for CVE-2026-8053

CVE-2026-8053 — MongoDB Server Out-of-Bounds Write Tổng qu...

8.8CVSS5.9AI score0.00108EPSS
Exploits1
RedhatCVE
RedhatCVE
added 2026/05/14 8:21 a.m.6 views

CVE-2026-8053

An issue in MongoDB Server's time-series collection implementation allows an authenticated user with database write privileges to trigger an out-of-bounds memory write in the mongod process. The issue results from an inconsistency in the internal field-name-to-index mapping within the time-series...

8.8CVSS6.1AI score0.00108EPSS
Exploits1References1
EUVD
EUVD
added 2026/05/13 6:30 p.m.8 views

EUVD-2026-29888

An issue in MongoDB Server's time-series collection implementation allows an authenticated user with database write privileges to trigger an out-of-bounds memory write in the mongod process. The issue results from an inconsistency in the internal field-name-to-index mapping within the time-series...

8.8CVSS6.1AI score0.00108EPSS
Exploits1References2
NVD
NVD
added 2026/05/13 4:17 a.m.5 views

CVE-2026-8053

An issue in MongoDB Server's time-series collection implementation allows an authenticated user with database write privileges to trigger an out-of-bounds memory write in the mongod process. The issue results from an inconsistency in the internal field-name-to-index mapping within the time-series...

8.8CVSS0.00108EPSS
Exploits1References1
UbuntuCve
UbuntuCve
added 2026/05/13 4:17 a.m.7 views

CVE-2026-8053

An issue in MongoDB Server's time-series collection implementation allows an authenticated user with database write privileges to trigger an out-of-bounds memory write in the mongod process. The issue results from an inconsistency in the internal field-name-to-index mapping within the time-series...

8.8CVSS5.9AI score0.00108EPSS
Exploits1References1
CVE
CVE
added 2026/05/12 11:59 p.m.19 views

CVE-2026-8053

MongoDB Server’s time-series collection implementation is affected by an issue in the time-series bucket catalog where an inconsistency in the internal field-name-to-index mapping can cause an out-of-bounds memory write in mongod. The vulnerability requires an authenticated user with database wri...

8.8CVSS6.1AI score0.00108EPSS
Exploits1References1Affected Software1
Vulnrichment
Vulnrichment
added 2026/05/12 11:59 p.m.6 views

CVE-2026-8053 FlatBSON Duplicate Field Index Drift

An issue in MongoDB Server's time-series collection implementation allows an authenticated user with database write privileges to trigger an out-of-bounds memory write in the mongod process. The issue results from an inconsistency in the internal field-name-to-index mapping within the time-series...

8.8CVSS6.1AI score0.00108EPSS
Exploits1References1
MongoDB
MongoDB
added 2026/05/12 11:59 p.m.6 views

FlatBSON Duplicate Field Index Drift

An issue in MongoDB Server's time-series collection implementation allows an authenticated user with database write privileges to trigger an out-of-bounds memory write in the mongod process. The issue results from an inconsistency in the internal field-name-to-index mapping within the time-series...

8.8CVSS6.1AI score0.00108EPSS
Exploits1References1Affected Software1
UbuntuCve
UbuntuCve
added 2026/05/04 7:16 p.m.3 views

CVE-2026-42154

Prometheus is an open-source monitoring system and time series database. Prior to versions 3.5.3 and 3.11.3, the remote read endpoint /api/v1/read does not validate the declared decoded length in a snappy-compressed request body before allocating memory. An unauthenticated attacker can send a sma...

7.5CVSS5.8AI score0.00022EPSS
Exploits0References1
Packet Storm News
Packet Storm News
added 2026/01/16 12:0 a.m.2 views

Predicting Tail-Risk Escalation in IDS Alert Time Series

Network defenders face a steady stream of attacks, observed as raw Intrusion Detection System IDS alerts. The sheer volume of alerts demands prioritization, typically based on high-level risk classifications. This work expands the scope of risk measurement by examining alerts not only through the...

5.6AI score
Exploits0
OSV
OSV
added 2025/12/06 11:42 a.m.4 views

BIT-MONGODB-2025-13507 Time-series operations may cause internal BSON size limit to be exceed

Inconsistent object size validation in time series processing logic may result in later processing of oversized BSON documents leading to an assert failing and process termination. This issue impacts MongoDB Server v7.0 versions prior to 7.0.26, v8.0 versions prior to 8.0.16 and MongoDB server v8...

7.1CVSS6.8AI score0.00172EPSS
Exploits0References2
OSV
OSV
added 2025/11/25 5:16 a.m.0 views

UBUNTU-CVE-2025-13507

Inconsistent object size validation in time series processing logic may result in later processing of oversized BSON documents leading to an assert failing and process termination. This issue impacts MongoDB Server v7.0 versions prior to 7.0.26, v8.0 versions prior to 8.0.16 and MongoDB server v8...

7.1CVSS5.8AI score0.00172EPSS
Exploits0References3
Cvelist
Cvelist
added 2025/11/25 4:52 a.m.7 views

CVE-2025-13507 Time-series operations may cause internal BSON size limit to be exceed

Inconsistent object size validation in time series processing logic may result in later processing of oversized BSON documents leading to an assert failing and process termination. This issue impacts MongoDB Server v7.0 versions prior to 7.0.26, v8.0 versions prior to 8.0.16 and MongoDB server v8...

7.1CVSS0.00172EPSS
Exploits0References1
CVE
CVE
added 2025/11/25 4:52 a.m.17 views

CVE-2025-13507

The CVE-2025-13507 entry describes an issue in MongoDB Server: inconsistent object size validation in the time series processing path can cause oversized BSON documents to be processed later, triggering an assertion and process termination. Affected versions are MongoDB Server v7.0 before 7.0.26,...

7.1CVSS6.5AI score0.00172EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2025/11/25 4:52 a.m.0 views

CVE-2025-13507 Time-series operations may cause internal BSON size limit to be exceed

Inconsistent object size validation in time series processing logic may result in later processing of oversized BSON documents leading to an assert failing and process termination. This issue impacts MongoDB Server v7.0 versions prior to 7.0.26, v8.0 versions prior to 8.0.16 and MongoDB server v8...

7.1CVSS6.5AI score0.00172EPSS
Exploits0References1
MongoDB
MongoDB
added 2025/11/25 4:52 a.m.4 views

Time-series operations may cause internal BSON size limit to be exceed

Inconsistent object size validation in time series processing logic may result in later processing of oversized BSON documents leading to an assert failing and process termination. This issue impacts MongoDB Server v7.0 versions prior to 7.0.26, v8.0 versions prior to 8.0.16 and MongoDB server v8...

7.1CVSS6.9AI score0.00172EPSS
Exploits0References1Affected Software1
FreeBSD
FreeBSD
added 2025/11/25 12:0 a.m.6 views

MongoDB -- Improper Validation of Specified Quantity in Input

https://jira.mongodb.org/browse/SERVER-108565 reports: Inconsistent object size validation in time series processing logic may result in later processing of oversized BSON documents leading to an assert failing and process termination...

7.1CVSS7AI score0.00172EPSS
Exploits0References1
Packet Storm News
Packet Storm News
added 2025/08/09 12:0 a.m.5 views

Neural Network-Based Detection and Multi-Class Classification of FDI Attacks in Smart Grid Home Energy Systems

False Data Injection Attacks FDIAs pose a significant threat to smart grid infrastructures, particularly Home Area Networks HANs, where real-time monitoring and control are highly adopted. Owing to the comparatively less stringent security controls and widespread availability of HANs, attackers...

7.2AI score
Exploits0
Packet Storm News
Packet Storm News
added 2025/07/29 12:0 a.m.3 views

GUARD-CAN: Graph-Understanding and Recurrent Architecture for CAN Anomaly Detection

Modern in-vehicle networks face various cyber threats due to the lack of encryption and authentication in the Controller Area Network CAN. To address this security issue, this paper presents GUARD-CAN, an anomaly detection framework that combines graph-based representation learning with time-seri...

7AI score
Exploits0
Rows per page
Query Builder