https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 14 Oct 2026 18:12:03 +0000 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0161 certfr-2023-avi-0161 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0161 https://cve.radiocsirt.org/vuln/euvd-2026-222068 EUVD-2026-222068 https://cve.radiocsirt.org/vuln/euvd-2026-222068 https://cve.radiocsirt.org/vuln/fkie_cve-2022-48282 <p>Under very specific circumstances (see Required configuration section below), a privileged user is able to cause arbitrary code to be executed which may cause further disruption to services. This is specific to applications written in C#. This affects all MongoDB .NET/C# Driver versions prior to and including v2.18.0</p> <p>Following configuration must be true for the vulnerability to be applicable: * Application must written in C# taking arbitrary data from users and serializing data using _t without any validation AND * Application must be running on a Windows host using the full .NET Framework, not .NET Core AND * Application must have domain model class with a property/field explicitly of type System.Object or a collection of type System.Object (against MongoDB best practice) AND * Malicious attacker must have unrestricted insert access to target database to add a _t discriminator.&#34;Following configuration must be true for the vulnerability to be applicable</p> <p>Under very specific circumstances (see Required configuration section below), a privileged user is able to cause arbitrary code to be executed which may cause further disruption to services. This is specific to applications written in C#. This affects all MongoDB .NET/C# Driver versions prior to and including v2.18.0</p> <p>Following configuration must be true for the vulnerability to be applicable: * Application must written in C# taking arbitrary data from users and serializing data using _t without any validation AND * Application must be running on a Windows host using the full .NET Framework, not .NET Core AND * Application must have domain model class with a property/field explicitly of type System.Object or a collection of type System.Object (against MongoDB best practice) AND * Malicious attacker must have unrestricted insert access to target database to add a _t discriminator.&#34;Following configuration must be true for the vulnerability to be applicable</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-48282 https://cve.radiocsirt.org/vuln/ghsa-7j9m-j397-g4wx <p><strong>Affected:</strong> NuGet: MongoDB.Driver</p> <p>Under very specific circumstances, a privileged user is able to cause arbitrary code to be executed which may cause further disruption to services. This is specific to applications written in C#. This affects all MongoDB .NET/C# Driver versions prior to and including v2.18.0</p> <p><strong>Affected:</strong> NuGet: MongoDB.Driver</p> <p>Under very specific circumstances, a privileged user is able to cause arbitrary code to be executed which may cause further disruption to services. This is specific to applications written in C#. This affects all MongoDB .NET/C# Driver versions prior to and including v2.18.0</p> https://cve.radiocsirt.org/vuln/ghsa-7j9m-j397-g4wx https://cve.radiocsirt.org/vuln/gsd-2022-48282 gsd-2022-48282 https://cve.radiocsirt.org/vuln/gsd-2022-48282 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0441 <p>Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in MongoDB ausnutzen, um beliebigen Programmcode auszuführen.</p> <p>Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in MongoDB ausnutzen, um beliebigen Programmcode auszuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0441