Filters
Software
MongoDB MongoDBMongoDB Server secondaries may crash due to forced index constraints
6.5
EPSS
0.04%
First published (updated )
MongoDB MongoDBMongoDB Server binaries may load potentially insecure shared libraries from specific relative paths
6.7
EPSS
0.04%
First published (updated )
MongoDB MongoDBBackup files may be downloaded by underprivileged users in MongoDB Enterprise Server
5.3
EPSS
0.05%
First published (updated )
MongoDB MongoDBMissing authorization check may lead to shard key refinement
6.5
EPSS
0.05%
First published (updated )
Mongodb Ops Manager ServerMongoDB Ops Manager may disclose sensitive information in Diagnostic Archive
5.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
MongoDB MongoDBMongoDB Server (mongod) may crash in response to unexpected requests
6.5
First published (updated )
Mongodb MongodbMongoDB Extension for VS Code may unexpectedly store credentials locally in clear text
5.5
First published (updated )
MongoDB MongoDBSpecific replication command with malformed oplog entries can crash secondaries
6.5
First published (updated )
MongoDB MongoDBUser may trigger invariant when allowed to send commands directly to shards
6.5
First published (updated )
Mongodb Rust DriverMongoDB Rust Driver may publish events containing authentication-related data to a connection pool event listener configured by an application
4.4
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
MongoDB MongoDBServer log entry spoofing via newline injection
5.3
First published (updated )
Mongodb C\# DriverMongoDB C# Driver may publish events containing authentication-related data to a command listener configured by an application
4.9
First published (updated )
MongoDB MongoDBSpecially crafted query may result in a denial of service of mongod
6.5
First published (updated )
MongoDB Database ToolsSpecific command line parameter might result in accepting invalid certificate
6.5
First published (updated )
Mongodb Go DriverSpecific cstrings input may not be properly validated in the Go Driver
6.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
MongoDB MongoDBInvariant failure when explaining a find with a UUID
4.9
First published (updated )
MongoDB MongoDBSpecially crafted regex query can cause DoS
6.5
First published (updated )
Mongodb LibmongocryptMongoDB Node.js client side field level encryption library may not be validating KMS certificate
6.8
First published (updated )
Mongodb Java DriverMongoDB Java driver client-side field level encryption not verifying KMS host name
6.8
First published (updated )
MongoDB Ops ManagerSSL may be unexpectedly disabled during upgrade of multiple-server MongoDB Ops Manager
6.7
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
MongoDB MongoDBInfinite loop in aggregation expression
6.5
First published (updated )
MongoDB MongoDBImproper neutralization of null byte leads to read overrun
6.5
First published (updated )
MongoDB MongoDBCrash while joining collections with $lookup
6.5
First published (updated )
MongoDB MongoDBCrash while handling internal Javascript exception types
6.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
MongoDB MongoDB$mod can result in undefined behavior
6.5
First published (updated )
MongoDB MongoDBPost-auth queries on compound index may crash mongod
6.5
First published (updated )
MongoDB MongoDBSpecific query can cause a DoS against MongoDB Server
6.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
MongoDB MongoDBSpecific GeoQuery can cause DoS against MongoDB Server
6.5
First published (updated )
MongoDB Ops ManagerPotential exposure of log information in Ops Manager
5.8
First published (updated )
MongoDB MongoDBAdministrative action may disable enforcement of per-user IP whitelisting
5.3
First published (updated )
Mongodb Mongodb Enterprise Kubernetes OperatorKubernetes Operator generates potentially insecure certificates
6.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Mongodb Js-bsonJS-bson may incorrectly serialise some requests
5.5
First published (updated )
MongoDB MongoDBProcess termination via PID file manipulation
5.3
First published (updated )
MongoDB MongoDBMongoDB on Red Hat Satellite 6 allows local users to bypass authentication by logging in with an emp…
5.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
MongoDB MongoDBThe find prototype in scripting/engine_v8.h in MongoDB 2.4.0 through 2.4.4 allows remote authenticat…
6.5
First published (updated )
MongoDB MongoDBMongoDB 2.4.x before 2.4.5 and 2.5.x before 2.5.1 allows remote authenticated users to obtain intern…
6.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.