Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2020-7610

bson: Deserialization of Untrusted Data could result in Code injection or Excessive CPU load

All versions of bson before 1.1.4 are vulnerable to Deserialization of Untrusted Data. The package will ignore an unknown value for an object's _bsotype, leading to cases where an object is serialized as a document rather than the intended BSON type.

CVSS 3.1 · 9.8 Critical EPSS 2.3% KEV · Not listed
Vendors
Mongodb
Products
Bson
CVE-2015-4411

rubygem-moped: Denial of Service with crafted ObjectId string (incomplete fix for CVE-2015-4410)

The Moped::BSON::ObjecId.legal? method in mongodb/bson-ruby before 3.0.4 as used in rubygem-moped allows remote attackers to cause a denial of service (worker resource consumption) via a crafted string. NOTE: This issue is due to an incomplete fix to CVE-2015-4410.

CVSS 3.1 · 7.5 High EPSS 6.4% KEV · Not listed
Vendors
Fedoraproject Mongodb
Products
Fedora Bson