Skip to contentMongodb Inc vulnerabilities
Newest
- mongodb libbsonMongoDB C Driver bson_strfreev may be susceptible to integer overflowCVE-2024-6381Fix available4.0 Medium
- mongodb compassejson shell parser in MongoDB Compass maybe bypassedCVE-2024-6376Fix available7.0 High
- mongodb, mongodb inc server, mongodb, inc. mongodb server +2 moreMissing authorization check may lead to shard key refinementCVE-2024-6375Fix available5.4 Medium
- mongodb pymongo, debian linux +1 moreOut-of-bounds read in bson module of PyMongoCVE-2024-5629Fix available4.7 Medium
- mongodb, mongodb inc server, mongodb, inc. mongodb server +2 moreMongoDB Server (mongod) may crash when generating ftdcCVE-2024-3374Fix available5.3 Medium
- mongodb, mongodb inc server, mongodb, inc. mongodb server +2 moreMongoDB Server may have unexpected application behaviour due to invalid BSONCVE-2024-3372Fix available7.5 High
- mongodb compassInsufficient validation of external input in Compass may enable MITM attacksCVE-2024-33717.1 High
- mongodb, mongodb inc server, mongodb, inc. mongodb server +2 more +4 moreMongoDB Server may allow successful untrusted connectionCVE-2024-1351Fix available8.8 High
- mongodb c driverMongoDB client C Driver may infinitely loop when validating certain BSON input dataCVE-2023-0437Fix available5.3 Medium
- mongodb atlas kubernetes operatorSecret logging may occur in debug mode of Atlas OperatorCVE-2023-04364.5 Medium
- mongodb c driver, node.js, php driver +4 more +6 moreSome MongoDB Drivers may publish events containing authentication-related data to a command listener configured by an applicationCVE-2021-32050Fix available4.2 Medium
- mongodb, mongodb inc server, mongodb, inc. mongodb server +2 moreCertificate validation issue in MongoDB Server running on Windows or macOSCVE-2023-1409Fix available5.3 Medium
- mongodb inc .net/c# driver, mongodb c\# driver +1 moreDeserializing compromised object with MongoDB .NET/C# Driver may cause remote code executionCVE-2022-48282Fix available6.6 Medium
- mongodb rust driverMongoDB Rust Driver may publish events containing authentication-related data to a connection pool event listener configured by an applicationCVE-2021-20332Fix available4.2 Medium
- mongodb compassLocal privilege escalation in MongoDB Compass for WindowsCVE-2021-203344.8 Medium