Schwachstellen, die jetzt zählen.

mongo-c-driver: mongo-c-driver: Denial of Service via malformed query response

rust-mongodb: rust-mongodb: Information disclosure via diagnostic tracing

elo: Elo: arbitrary code execution via unvalidated programmatic AST input

Elo is a purely functional expression language for no-code tools. Prior to 1.0.1, Elo's programmatic AST API accepts arbitrary values from JSON-deserialized input, plugin output, or other untyped sources and interpolates them into generated JavaScript, Ruby, Python, or SQL without runtime syntax validation. The affected fields are int_literal / float_literal .value, variable.name, member_access.property, object_literal keys, datapath segments, lambda.params[].name, and the…

phpmyadmin/motranslator: phpMyAdmin MoTranslator: Path traversal via manipulated locale argument

phpmyadmin/sql-parser: phpMyAdmin SQL-Parser: Denial of Service via improper type conversion

elasticsearch: elasticsearch: Denial of Service via deeply nested serialized payloads

phpmyadmin/shapefile: phpMyAdmin ShapeFile: Denial of Service via infinite loop in ShapeRecord::loadFromFile

github.com/mongodb/mongo-tools: MongoDB Database Tools: Unauthorized collection overwrite via improper URL decoding

github.com/mongodb/mongo-tools: mongofiles: Arbitrary file creation via parent-directory symlinks

mongo-tools: mongo-tools: information disclosure via database-stored filename manipulation in mongofiles

github.com/mongodb/mongo-tools: mongorestore: Privilege escalation via crafted collection names in database dumps

hdf5: hdf5: Denial of Service via NULL pointer dereference

slurm: Slurm: Arbitrary code execution via SQL injection in SlurmDBD RPCs

hdf5: hdf5: Denial of Service via heap buffer over-read in external link traversal

HDF5 through 2.2.0 contains a heap buffer over-read vulnerability in H5L__extern_traverse() in src/H5Lexternal.c, the default traversal callback for external links. The callback locates the target file name and object path within the link’s user data using strlen() without validating the buffer against its stored size (udata_size, which was marked unused). A crafted HDF5 file containing an external link whose data is not NULL-terminated, or is too short to hold both strings…

slurm: slurm: Information disclosure via arbitrary memory read in slurmstepd socket API

hdf5: hdf5: Denial of Service via heap buffer over-read

Django: Mehrere Schwachstellen

django: Server-side request forgery via `SpatialReference` string input

Django: Mehrere Schwachstellen

django: Password hash disclosure to "view only" admin users with custom user models

Django: Mehrere Schwachstellen

django: Server-side request forgery via crs member of GeoJSON geometries

Django: Mehrere Schwachstellen

django: Potential log injection via unescaped geometry form values

Django: Mehrere Schwachstellen

django: Potential memory exhaustion in `MultiPartParser` via base64-encoded file upload

hdf5: hdf5: Denial of Service via out-of-bounds read in szip decompression

Rsync: Schwachstelle ermöglicht Denial of Service

rsync: rsync: Denial of Service via crafted checksums during delta transfer

hdf5: hdf5: Information disclosure via uninitialized memory read

nnn: nnn: Arbitrary file overwrite via insecure temporary file creation in plugins

kernel: AMD Linux GPU driver: Denial of Service via NULL pointer dereference

io.vertx/vertx-web-client: vertx-web-client: Information disclosure via shared web client cache

wasmtime: wasmtime: HTTP request smuggling via multiple conflicting Content-Length headers

wasmtime: Wasmtime: Header restriction bypass via forwarded HTTP trailers

wasmtime: wasmtime: Response splitting via unvalidated Content-Length headers in wasi-http