Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.5A user authorized to performing a specific type of find query may trigger a denial of service.Check if you run itEPSS 0.95%Apr 30, 2021
- Medium4.9A user authorized to performing a specific type of query may trigger a denial of service by issuing a generic explain command on a find query.Check if you run itEPSS 1.00%Mar 1, 2021
- Medium6.5A user authorized to perform database queries may trigger denial of service by issuing specially crafted query contain a type of regex.Check if you run itEPSS 1.30%Mar 1, 2021
- High7.5An unauthenticated client can trigger denial of service by issuing specially crafted wire protocol messages, which cause the message decompressor to incorrectly allocate memory.Check if you run itEPSS 1.68%Nov 24, 2020
- Medium6.5A user authorized to perform database queries may trigger denial of service by issuing specially crafted queries, which loop indefinitely in mathematics processing whi…Check if you run itEPSS 1.44%Nov 23, 2020
- Medium6.5A user authorized to perform database queries may trigger a read overrun and access arbitrary memory by issuing specially crafted queries.Check if you run itEPSS 1.44%Nov 23, 2020
- Medium6.5A user authorized to perform database queries may trigger denial of service by issuing specially crafted queries, which use $lookup and collations.Check if you run itEPSS 1.25%Nov 23, 2020
- Medium6.5A user authorized to perform database queries may trigger denial of service by issuing specially crafted queries, which use the $mod operator to overflow negative values.Check if you run itEPSS 1.26%Nov 23, 2020
- Medium6.5A user authorized to perform database queries may trigger denial of service by issuing specially crafted queries which trigger an invariant in the IndexBoundsBuilder.Check if you run itEPSS 1.30%Nov 23, 2020
- Medium6.5A user authorized to perform database queries may trigger denial of service by issuing specially crafted queries, which throw unhandled Javascript exceptions containin…Check if you run itEPSS 1.27%Nov 23, 2020
- Medium6.5A user authorized to perform database queries may trigger denial of service by issuing specially crafted queries, which perform an $elemMatch .Check if you run itEPSS 1.25%Nov 23, 2020
- Medium6.5A user authorized to perform database queries may trigger denial of service by issuing specially crafted applyOps invocations.Check if you run itEPSS 1.25%Nov 23, 2020
- Medium6.5A user authorized to perform database queries may trigger denial of service by issuing specially crafted queries with compound indexes affecting QueryPlanner.Check if you run itEPSS 1.58%Nov 23, 2020
- Medium6.5A user authorized to perform database queries may cause denial of service by issuing a specially crafted query which violates an invariant in the server selection subsystem.Check if you run itEPSS 1.41%Nov 23, 2020
- High7.5Incorrect validation of user input in the role name parser may lead to use of uninitialized memory allowing an unauthenticated attacker to use a specially crafted requ…Check if you run itEPSS 1.69%Nov 23, 2020
- Medium6.5A user authorized to perform database queries may cause denial of service by issuing specially crafted queries, which violate an invariant in the query subsystem's sup…Check if you run itEPSS 1.30%Aug 21, 2020
- Medium5.3Improper serialization of internal state in the authorization subsystem in MongoDB Server's authorization subsystem permits a user with valid credentials to bypass IP…Check if you run itEPSS 0.66%May 6, 2020
- High7.8An unprivileged user or program on Microsoft Windows which can create OpenSSL configuration files in a fixed location may cause utility programs shipped with MongoDB s…Check if you run itEPSS 0.93%Aug 30, 2019
- Medium4.2Incorrect scoping of kill operations in MongoDB Server's packaged SysV init scripts allow users with write access to the PID file to insert arbitrary PIDs to be killed…Check if you run itEPSS 0.30%Aug 30, 2019
- High7.1After user deletion in MongoDB Server the improper invalidation of authorization sessions allows an authenticated user's session to persist and become conflated with n…Check if you run itEPSS 1.14%Aug 6, 2019
- High8.1Improper handling of LDAP authentication in MongoDB Server versions 3.0.0 to 3.0.6 allows an unauthenticated client to gain unauthorized access.Check if you run itEPSS 1.76%Jul 19, 2019
- High7.0The skyring-setup command creates random password for mongodb skyring database but it writes password in plain text to /etc/skyring/skyring.conf file which is owned by…Check if you run itEPSS 0.33%Jul 6, 2018
- Critical9.1MongoDB 3.4.x before 3.4.10, and 3.5.x-development, has a disabled-by-default configuration setting, networkMessageCompressors (aka wire protocol compression), which e…Check if you run itEPSS 1.57%Nov 1, 2017
- High7.5In MongoDB libbson 1.7.0, the bson_iter_codewscope function in bson-iter.c miscalculates a bson_utf8_validate length argument, which allows remote attackers to cause a…Check if you run itEPSS 5.46%Sep 9, 2017
- Medium5.5MongoDB on Red Hat Satellite 6 allows local users to bypass authentication by logging in with an empty password and delete information which can cause a Denial of Service.Check if you run itEPSS 0.30%Jun 6, 2017
Sort