Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.7Redis is an in-memory data structure store.Check if you run itEPSS 2.61%May 5, 2026
- Medium5.3An authorization flaw in the user management command could allow an authenticated user to make limited changes to authentication-related data associated with another user account.Check if you run itEPSS 0.17%Apr 29, 2026
- High7.1Computing the MD5 checksum of a malformed BSON object under specific conditions may cause loss of availability in MongoDB server.Check if you run itEPSS 0.26%Apr 29, 2026
- Medium6.0A user with access to the cluster with a limited set of privilege actions can trigger a crash of a mongod process during the limited and unpredictable window when the…Check if you run itEPSS 0.21%Mar 30, 2026
- Medium6.1A specially crafted aggregation query with $lookup by an authenticated user with write privileges can cause a double-free or use-after-free memory issue in the slot-ba…Check if you run itEPSS 0.36%Mar 17, 2026
- High8.7A use-after-free vulnerability can be triggered in sharded clusters by an authenticated user with the read role who issues a specially crafted $lookup or $graphLookup…Check if you run itEPSS 0.34%Mar 17, 2026
- High7.1An authenticated user with the read role may read limited amounts of uninitialized stack memory via specially-crafted issuances of the filemd5 command.Check if you run itEPSS 0.22%Mar 17, 2026
- High7.1An authorized user may disable the MongoDB server by issuing a query against a collection that contains an invalid compound wildcard index.Check if you run itEPSS 0.28%Feb 10, 2026
- High7.1An authorized user may trigger a server crash by running a $geoNear pipeline with certain invalid index hints.Check if you run itEPSS 0.28%Feb 10, 2026
- Medium5.3Incorrect validation of the profile command may result in the determination that a request altering the 'filter' is read-only.Check if you run itEPSS 0.20%Feb 10, 2026
- High7.1Complex queries can cause excessive memory usage in MongoDB Query Planner resulting in an Out-Of-Memory Crash.Check if you run itEPSS 0.28%Feb 10, 2026
- High7.1MongoDB Server may experience an out-of-memory failure while evaluating expressions that produce deeply nested documents.Check if you run itEPSS 0.32%Feb 10, 2026
- High8.2Connections received from the proxy port may not count towards total accepted connections, resulting in server crashes if the total number of connections exceeds avail…Check if you run itEPSS 0.30%Feb 10, 2026
- High7.1Inserting certain large documents into a replica set could lead to replica set secondaries not being able to fetch the oplog from the primary.Check if you run itEPSS 0.28%Feb 10, 2026
- High8.7MongoDB and MongoDB Server Improper Handling of Length Parameter Inconsistency VulnerabilityPatch nowKEVEPSS 83.22%Dec 19, 2025
- Low2.3A post-authentication flaw in the network two-phase commit protocol used for cross-shard transactions in MongoDB Server may lead to logical data inconsistencies under specific condCheck if you run itEPSS 0.22%Dec 9, 2025
- High7.1MongoDB Server may experience an invariant failure during batched delete operations when handling documents.Check if you run itEPSS 0.35%Nov 25, 2025
- Low2.3A user with access to the cluster with a limited set of privilege actions may be able to terminate queries that are being executed by other users.Check if you run itEPSS 0.24%Nov 25, 2025
- Low2.3Clients may successfully perform a TLS handshake with a MongoDB server despite presenting a client certificate not aligning with the documented Extended Key Usage (EKU) requirementCheck if you run itEPSS 0.10%Nov 25, 2025
- High7.1Inconsistent object size validation in time series processing logic may result in later processing of oversized BSON documents leading to an assert failing and process termination.Check if you run itEPSS 0.31%Nov 25, 2025
- Medium5.9The KMIP response parser built into mongo binaries is overly tolerant of certain malformed packets, and may parse them into invalid objects.Check if you run itEPSS 0.39%Nov 3, 2025
- High7.7Redis is an open source, in-memory database that persists on disk.Check if you run itEPSS 7.47%Nov 2, 2025
- Medium6.5An authorized user may crash the MongoDB server by causing buffer over-read.Check if you run itEPSS 0.27%Oct 20, 2025
- Critical10.0Redis redis Use After FreePatch nowKEVEPSS 82.64%Oct 3, 2025
- High7.3Running Lua function as a different userCheck if you run itEPSS 0.74%Oct 3, 2025
Sort