CVE-2024-6382

MEDIUM Year: 2024
CVSS v3 Score
6.4
Medium
Weakness Type
CWE-228
View all →

Vulnerability Description

Incorrect handling of certain string inputs may result in MongoDB Rust driver constructing unintended server commands. This may cause unexpected application behavior including data modification. This issue affects MongoDB Rust Driver 2.0 versions prior to 2.8.2

Related Vulnerabilities

CVE-2024-22809

MEDIUM
CVSS:6.5(Medium)

Incorrect access control in Tormach xsTECH CNC Router, PathPilot Controller v2.9.6 allows attackers to access the G code's shared folder and view sensitive information.

CWE-2282024

CVE-2023-42784

MEDIUM
CVSS:5.6(Medium)

An improper handling of syntactically invalid structure in Fortinet FortiWeb at least verions 7.4.0 through 7.4.6 and 7.2.0 through 7.2.10 and 7.0.0 through 7.0.10 allows attacker to execute unauthori...

CWE-2282023

CVE-2024-55594

MEDIUM
CVSS:5.6(Medium)

An improper handling of syntactically invalid structure in Fortinet FortiWeb at least vesrions 7.4.0 through 7.4.6 and 7.2.0 through 7.2.10 and 7.0.0 through 7.0.10 allows attacker to execute unauthor...

CWE-2282024

CVE-2018-5381

HIGH
CVSS:7.5(High)

The Quagga BGP daemon (bgpd) prior to version 1.2.3 has a bug in its parsing of "Capabilities" in BGP OPEN messages, in the bgp_packet.c:bgp_capability_msg_parse function. The parser can enter an infi...

CWE-2282018

CVE-2024-21612

HIGH
CVSS:7.5(High)

An Improper Handling of Syntactically Invalid Structure vulnerability in Object Flooding Protocol (OFP) service of Juniper Networks Junos OS Evolved allows an unauthenticated, network-based attacker t...

CWE-2282024

CVE-2025-0343

HIGH
CVSS:7.5(High)

Swift ASN.1 can be caused to crash when parsing certain BER/DER constructions. This crash is caused by a confusion in the ASN.1 library itself which assumes that certain objects can only be provided i...

CWE-2282025