Skip to contentMongodb vulnerabilities
Newest
- mongodbAuthentication bypass when using LDAP authentication in MongoDB Enterprise ServerCVE-2015-78828.1 High
- mongodb libbson_bson_iter_next_internal in bson-iter.c in libbson 1.12.0, as used in MongoDB mongo-c-driver and...CVE-2018-16790Fix available8.1 High
- mongodb js-bsonjs-bson vulnerable to REDoSCVE-2018-13863Fix available7.5 High
- mongodb, [unknown] rhscon-core, redhat storage console +2 moreThe skyring-setup command creates random password for mongodb skyring database but it writes...CVE-2017-26654.8 Medium
- mongodbMongoDB 3.4.x before 3.4.10, and 3.5.x-development, has a disabled-by-default configuration...CVE-2017-15535Fix available9.1 Critical
- mongodbIn MongoDB libbson 1.7.0, the bson_iter_codewscope function in bson-iter.c miscalculates a...CVE-2017-14227Fix available7.5 High
- mongodbMongoDB on Red Hat Satellite 6 allows local users to bypass authentication by logging in with an...CVE-2014-81805.5 Medium
- mongodbmongod in MongoDB 2.6, when using 2.4-style users, and 2.4 allow remote attackers to cause a...CVE-2016-31047.5 High
- mongodb, fedoraproject fedora +1 moreThe client in MongoDB uses world-readable permissions on .dbshell history files, which might...CVE-2016-6494Fix available5.5 Medium
- mongodb, fedoraproject fedora +1 moreMongoDB before 2.4.13 and 2.6.x before 2.6.8 allows remote attackers to cause a denial of service...CVE-2015-1609Fix available5.0 Medium
- mongodbThe CmdAuthenticate::_authenticateX509 function in db/commands/authentication_commands.cpp in...CVE-2014-39715.0 Medium
- mongodbThe default configuration for MongoDB before 2.3.2 does not validate objects, which allows remote...CVE-2012-6619Fix available6.4 Medium
- mongodbThe find prototype in scripting/engine_v8.h in MongoDB 2.4.0 through 2.4.4 allows remote...CVE-2013-3969Public exploitEPSS 10.1%6.5 Medium
- mongodb, redhat enterprise mrg +1 moreMongoDB before 2.0.9 and 2.2.x before 2.2.4 does not properly validate requests to the...CVE-2013-1892Public exploitEPSS 44.5%6.0 Medium
- mongodbMongoDB 2.4.x before 2.4.5 and 2.5.x before 2.5.1 allows remote authenticated users to obtain...CVE-2013-46506.5 Medium
- mongodb, canonical ubuntu linux, opensuse +2 moreUse of NullPointerException Catch to Detect NULL Pointer Dereference in PymongoCVE-2013-2132Fix available4.3 Medium