Skip to contentMongodb, Inc. vulnerabilities
Newest
- mongodb, mongodb and mongodb server, mongodb inc. server +1 more +3 moreZlib compressed protocol header length confusion may allow memory readCVE-2025-14847In KEVPublic exploitFix availableEPSS 83.2%8.7 High
- mongodb, mongodb inc. server, mongodb, inc. mongodb server +2 moreCross-Shard Failovers May Lead to Partial Transaction Commit in MongoDB ServerCVE-2025-14345Fix available2.3 Low
- mongodb, mongodb inc. server, mongodb, inc. mongodb server +2 moreMongoDB may be susceptible to Invariant Failure due to batched deleteCVE-2025-13644Fix available7.1 High
- mongodb, mongodb inc. server, mongodb, inc. mongodb server +2 moreMongoDB Server may allow queries to be terminated by unauthorized usersCVE-2025-13643Fix available2.3 Low
- mongodb, mongodb inc. server, mongodb, inc. mongodb server +2 moreImproper Certificate Validation May Allow Successful TLS Handshaking Despite Invalid Extended Key Usage Fields in MongoDB ServerCVE-2025-12893Fix available2.3 Low
- mongodb, mongodb inc. server, mongodb, inc. mongodb server +2 moreTime-series operations may cause internal BSON size limit to be exceedCVE-2025-13507Fix available7.1 High
- mongodb, mongodb inc. server, mongodb, inc. mongodb server +2 moreMalformed KMIP response may result in access violationCVE-2025-12657Fix available5.9 Medium
- mongodb inc server, mongodb, inc. mongodb server +1 moreMongoDB Windows installation MSI may leave ACLs unset on custom installation directoriesCVE-2025-104917.8 High
- mongodb, mongodb inc server, mongodb, inc. mongodb server +2 moreMalformed $group Query May Cause MongoDB Server to CrashCVE-2025-10061Fix available6.5 Medium
- mongodb, mongodb inc server, mongodb, inc. mongodb server +2 moreMongoDB may be susceptible to Invariant Failure in Transactions due Upsert OperationCVE-2025-10060Fix available6.5 Medium
- mongodb, mongodb inc server, mongodb, inc. mongodb server +2 moreMongoDB Server router will crash when incorrect lsid is set on a sharded queryCVE-2025-10059Fix available6.5 Medium
- mongodb, mongodb inc server, mongodb, inc. mongodb server +2 moreCertain Queries with Duplicate _id Fields May Cause MongoDB Server to CrashCVE-2025-7259Fix available6.5 Medium
- mongodb, mongodb inc server, mongodb, inc. mongodb server +2 moreIncorrect Handling of incomplete data may prevent mongoS from Accepting New ConnectionsCVE-2025-6714Fix available7.5 High
- mongodb, mongodb inc server, mongodb, inc. mongodb server +2 moreMongoDB Server may be susceptible to privilege escalation due to $mergeCursors stageCVE-2025-6713Public exploitFix available7.7 High
- mongodb, mongodb inc server, mongodb, inc. mongodb server +2 moreMongoDB Server may be susceptible to DoS due to Accumulated Memory AllocationCVE-2025-6712Fix available6.5 Medium
- mongodb, mongodb inc server, mongodb, inc. mongodb server +2 moreIncomplete Redaction of Sensitive Information in MongoDB Server LogsCVE-2025-6711Fix available4.4 Medium
- mongodb, mongodb inc server, mongodb, inc. mongodb server +2 morePre-authentication Denial of Service Stack Overflow Vulnerability in JSON Parsing via Excessive Recursion in MongoDBCVE-2025-6710Fix available7.5 High
- mongodb, mongodb inc server, mongodb, inc. mongodb server +2 morePre-Authentication Denial of Service Vulnerability in MongoDB Server's OIDC AuthenticationCVE-2025-6709Fix available7.5 High
- mongodb, mongodb inc server, mongodb, inc. mongodb server +2 moreRace condition in privilege cache invalidation cycleCVE-2025-6707Fix available4.2 Medium
- mongodb, mongodb inc server, mongodb, inc. mongodb server +2 moreRunning certain aggregation operations with the SBE engine may lead to unexpected behavior on MongoDB ServerCVE-2025-6706Fix available5.0 Medium
- mongodb, mongodb inc server, mongodb, inc. mongodb server +2 moreMongoDB Server running on Linux may allow unexpected connections where intermediate certificates are revokedCVE-2025-3085Fix available8.1 High
- mongodb, mongodb inc server, mongodb, inc. mongodb server +2 moreMongoDB Server may crash due to improper validation of explain commandCVE-2025-3084Fix available6.5 Medium
- mongodb, mongodb inc server, mongodb, inc. mongodb server +2 moreMalformed MongoDB wire protocol messages may cause mongos to crashCVE-2025-3083Fix available7.5 High
- mongodb, mongodb inc server, mongodb, inc. mongodb server +2 moreUser may override a view's collation and gain unauthorized access to underlying dataCVE-2025-3082Fix available3.1 Low
- mongodb libbson, mongodb, mongodb inc server +1 more +3 moreMongoDB C Driver bson library may be susceptible to buffer overflowCVE-2025-0755Fix available8.4 High
- mongodb, mongodb inc server, mongodb, inc. mongodb server +2 moreImproper neutralization of null bytes may lead to buffer over-reads in MongoDB ServerCVE-2024-10921Fix available6.8 Medium
- mongodb, mongodb inc server, mongodb, inc. mongodb server +2 moreMongoDB Server secondaries may crash due to forced index constraintsCVE-2024-8305Fix available6.5 Medium
- mongodb, mongodb inc server, mongodb, inc. mongodb server +2 moreMongoDB Server may access non-initialized region of memory leading to unexpected behaviourCVE-2024-8654Fix available5.0 Medium
- mongodb, mongodb inc server, mongodb, inc. mongodb server +2 moreMongoDB Server binaries may load potentially insecure shared libraries from specific relative pathsCVE-2024-8207Fix available6.4 Medium
- mongodb, mongodb inc server, mongodb, inc. mongodb server +2 moreBackup files may be downloaded by underprivileged users in MongoDB Enterprise ServerCVE-2024-6384Fix available5.3 Medium
- mongodb c driver, mongodb, mongodb php driver +2 more +4 moreAccessing Untrusted Directory May Allow Local Privilege EscalationCVE-2024-7553Fix available7.3 High
- mongodb, mongodb inc server, mongodb, inc. mongodb server +2 moreMissing authorization check may lead to shard key refinementCVE-2024-6375Fix available5.4 Medium
- mongodb, mongodb inc server, mongodb, inc. mongodb server +2 moreMongoDB Server (mongod) may crash when generating ftdcCVE-2024-3374Fix available5.3 Medium
- mongodb, mongodb inc server, mongodb, inc. mongodb server +2 moreMongoDB Server may have unexpected application behaviour due to invalid BSONCVE-2024-3372Fix available7.5 High
- mongodb, mongodb inc server, mongodb, inc. mongodb server +2 more +4 moreMongoDB Server may allow successful untrusted connectionCVE-2024-1351Fix available8.8 High
- mongodb, mongodb inc server, mongodb, inc. mongodb server +2 moreCertificate validation issue in MongoDB Server running on Windows or macOSCVE-2023-1409Fix available5.3 Medium
- mongodb, mongodb inc. server, mongodb, inc. mongodb server +2 moreMongoDB Server (mongod) may crash in response to unexpected requestsCVE-2022-24272Fix available6.5 Medium
- mongodb, mongodb inc. server, mongodb, inc. mongodb server +2 moreLarge aggregation pipelines with a specific stage can crash mongod under default configurationCVE-2021-32040Fix available6.5 Medium
- mongodb, mongodb inc. server, mongodb, inc. mongodb server +2 moreDenial of Service and Data Integrity vulnerability in features commandCVE-2021-32036Fix available5.4 Medium
- mongodb, mongodb inc. server, mongodb, inc. mongodb server +2 moreSpecific replication command with malformed oplog entries can crash secondariesCVE-2021-20330Fix available6.5 Medium
- mongodb, mongodb inc. server, mongodb, inc. mongodb server +2 moreUser may trigger invariant when allowed to send commands directly to shardsCVE-2021-32037Fix available6.5 Medium
- mongodb, mongodb inc. server, mongodb, inc. mongodb server +2 moreServer log entry spoofing via newline injectionCVE-2021-20333Fix available5.3 Medium
- mongodb, mongodb inc. server, mongodb, inc. mongodb server +2 moreSpecially crafted query may result in a denial of service of mongodCVE-2021-20326Fix available6.5 Medium
- mongodb, mongodb inc. server, mongodb, inc. mongodb server +2 moreInvariant failure when explaining a find with a UUIDCVE-2018-250044.9 Medium
- mongodb, mongodb inc. server, mongodb, inc. mongodb server +2 moreSpecially crafted regex query can cause DoSCVE-2020-7929Fix available6.5 Medium
- mongodb, mongodb inc. server, mongodb, inc. mongodb server +2 moreDenial of service via malformed network packetCVE-2019-20925Fix available7.5 High
- mongodb, mongodb inc. server, mongodb, inc. mongodb server +2 moreInfinite loop in aggregation expressionCVE-2018-208036.5 Medium
- mongodb, mongodb inc. server, mongodb, inc. mongodb server +2 moreImproper neutralization of null byte leads to read overrunCVE-2020-7928Fix available6.5 Medium
- mongodb, mongodb inc. server, mongodb, inc. mongodb server +2 moreCrash while joining collections with $lookupCVE-2019-23936.5 Medium
- mongodb, mongodb server, mongodb, inc. mongodb server +2 moreCrash while handling internal Javascript exception typesCVE-2019-209236.5 Medium
- Show moreLoading…