mongodb vulnerabilities (Bitnami)
161 vulnerabilities.
-
mongodbBitnami Race Condition in MongoDB Server Document Value Layer Leads to Memory Corruption 7.7 High -
mongodbBitnami Integer Overflow in Query Planner Leads to Unbounded Memory Allocation and Denial of Service in MongoDB Server 7.1 High -
mongodbBitnami Uncontrolled Resource Consumption in MongoDB Sharded Cluster Router Allows Unauthenticated Denial of Service 8.7 High -
mongodbBitnami Incorrect Authorization in MongoDB Server Aggregation Framework Allows Unauthorized Read Access to Collection Data 7.1 High -
mongodbBitnami Improper Validation in MongoDB Server Aggregation Framework Allows Authorization Bypass and Unauthorized Collection Access with Atlas Search 7.1 High -
mongodbBitnami Insufficient Validation of Storage Engine Configuration Options in MongoDB Server Leads to Out-of-Bounds Write 7.2 High -
mongodbBitnami Insufficiently Protected Credentials in MongoDB Server Diagnostic Reporting Interface 7.1 High -
mongodbBitnami Improper Redaction of Query Literals in MongoDB Server Query Statistics Serialization on Sharded Cluster Router 5.1 Medium -
mongodbBitnami Persistent Fatal Assertion Crash in MongoDB Server via Crafted Retryable Write Commands Leads to Denial of Service 7.1 High -
mongodbBitnami Improper Case Sensitivity Handling in MongoDB Server Configuration Validation May Cause Authorization to Remain Disabled at Startup 9.2 Critical -
mongodbBitnami Heap Out-of-Bounds Read in MongoDB Server Query Planning Component 5.3 Medium -
mongodbBitnami Insufficient Validation of Storage Configuration Options in MongoDB Server Leads to Persistent Denial of Service via Corrupted Metadata 7.1 High -
mongodbBitnami Unauthenticated Denial of Service in MongoDB Server via Assertion Failure in Read Concern Processing on Replica Set Members 8.7 High -
mongodbBitnami Use-After-Free in MongoDB Server Cursor Management Component Leads to Denial of Service 6.0 Medium -
mongodbBitnami Improper Authorization in MongoDB Server applyOps Command Allows Writes to Arbitrary Internal Storage Tables via Feature Gate Bypass 7.0 High -
mongodbBitnami Use-After-Free in MongoDB Server Query Execution Memory Tracking Subsystem Leads to Denial of Service 7.2 High -
mongodbBitnami Insufficient Validation of Shard Key Values in MongoDB Server Leads to Query Operator Injection in Change Stream Post-Image Lookups 2.3 Low -
mongodbBitnami Improper Access Restriction of Internal Aggregation Expression in MongoDB Server Leads to Assertion Failure and Denial of Service 6.0 Medium -
mongodbBitnami Unhandled Exception in MongoDB Server JSON Schema Validation Error Generation Leads to Denial of Service 7.1 High -
mongodbBitnami Type Confusion in MongoDB Server WiredTiger Storage Engine via Custom Collection Configuration Leads to Persistent Denial of Service 7.1 High -
mongodbBitnami Race Condition in MongoDB Server Text Index Query Parsing Leads to Heap Use-After-Free and Denial of Service 6.0 Medium -
mongodbBitnami Null Pointer Dereference in MongoDB Server 2dsphere Index Key Generation Leads to Denial of Service 7.1 High -
mongodbBitnami Uncontrolled Resource Consumption in MongoDB Server JSON Pointer Parser Leads to Denial of Service 7.1 High -
mongodbBitnami Improper Session Handling in MongoDB Server LDAP Authorization Integration Leads to Incorrect Role Assignment 7.6 High -
mongodbBitnami $regexFindAll may crash mongod server when byte-matching multi-byte UTF-8 chars 7.1 High -
mongodbBitnami Arbitrary command execution via shell-expanded connection string in Launch MongoDB Shell terminal 5.1 Medium -
mongodbBitnami Improper Authorization in MongoDB Queryable Encryption Maintenance Operations Allows Unauthorized Modification of Other Collections 7.2 High -
mongodbBitnami Use-After-Free in MongoDB Query Execution Engine Leads to Denial of Service and Potential Memory Disclosure 7.1 High -
mongodbBitnami Missing Authorization in MongoDB Sharded Transaction Commit/Abort Handling Leads to Cross-Shard Data Inconsistency 5.9 Medium -
mongodbBitnami Improper Authorization in MongoDB Server Allows Unauthorized Actions on System Collections via the validate Command 5.3 Medium -
mongodbBitnami Improper Authorization in MongoDB Server Allows Unauthorized Actions on System Collections 7.2 High -
mongodbBitnami Improper Input Validation in MongoDB Query Planner Leads to Denial of Service 6.0 Medium -
mongodbBitnami Improper Authentication in MongoDB Intra-Cluster Connections Allows Credential Exposure 9.0 Critical -
mongodbBitnami Improper Authorization in MongoDB profile Command Allows Unauthorized Modification of Server-Wide Diagnostic Settings 5.3 Medium -
mongodbBitnami Out-of-Bounds Read in MongoDB Geospatial Query Processing Leads to Denial of Service and Potential Memory Disclosure 7.1 High -
mongodbBitnami Improper Neutralization of Input in MongoDB Server's JavaScript Scripting Engine Leads to Unauthorized Code Execution Within Query Scopes 5.3 Medium -
mongodbBitnami Improper Authorization in MongoDB applyOps Command Handling Allows Unauthorized DDL Operations on Collections 7.0 High -
mongodbBitnami Use-After-Free in MongoDB Geospatial Validation Leads to Denial of Service 6.0 Medium -
mongodbBitnami Type Confusion in MongoDB Query Subsystem Leads to Denial of Service 7.1 High -
mongodbBitnami Improper Input Validation in MongoDB Aggregation Framework Allows Unauthenticated Denial of Service on mongos 8.7 High -
mongodbBitnami Out-of-Bounds Read/Write in MongoDB Timeseries Bucket Handling Leads to Denial of Service and Potential Memory Disclosure 7.2 High -
mongodbBitnami Improper Authorization in MongoDB Atlas Vector Search Allows Unauthorized Access to Protected View Data 7.1 High -
mongodbBitnami Improper Authorization in MongoDB Aggregation Framework Allows Read-Only User to Perform Unauthorized Write Operations 7.1 High -
mongodbBitnami Use-After-Free in MongoDB Timeseries Bucket Handling Leads to Denial of Service and Potential Remote Code Execution 7.7 High -
mongodbBitnami Out-of-Bounds Read in MongoDB Aggregation Framework Leads to Denial of Service and Potential Memory Disclosure 7.1 High -
mongodbBitnami Improper Input Validation in MongoDB Timeseries Query Processing Leads to Denial of Service 7.1 High -
mongodbBitnami Improper Validation in MongoDB Queryable Encryption Maintenance Operation Leads to Denial of Service and Index Corruption 7.1 High -
mongodbBitnami Use-After-Free in MongoDB $graphLookup Aggregation Stage Leads to Denial of Service and Potential Remote Code Execution 7.5 High -
mongodbBitnami Improper Input Validation in MongoDB Aggregation Command Handling Leads to Denial of Service 5.3 Medium -
mongodbBitnami Improper Enforcement of Authentication Mechanism Restrictions in MongoDB Server Allows Use of Disabled Authentication Method 2.3 Low - Show olderLoading…