Skip to contentMongodb vulnerabilities
Newest
- mongodb c driverMongoDB client C Driver may infinitely loop when validating certain BSON input dataCVE-2023-0437Fix available5.3 Medium
- mongodb atlas kubernetes operatorSecret logging may occur in debug mode of Atlas OperatorCVE-2023-04364.5 Medium
- mongodb c driver, node.js, php driver +4 more +6 moreSome MongoDB Drivers may publish events containing authentication-related data to a command listener configured by an applicationCVE-2021-32050Fix available4.2 Medium
- mongodb, mongodb inc server, mongodb, inc. mongodb server +2 moreCertificate validation issue in MongoDB Server running on Windows or macOSCVE-2023-1409Fix available5.3 Medium
- mongodb inc. ops manager, mongodb ops manager server +1 morePrivilege Escalation for Project Owner and Project User Admin Roles in Ops ManagerCVE-2023-40097.2 High
- mongodb inc. ops manager, mongodb ops manager server +1 moreMongoDB Ops Manager may disclose sensitive information in Diagnostic ArchiveCVE-2023-03423.1 Low
- mongodb inc .net/c# driver, mongodb c\# driver +1 moreDeserializing compromised object with MongoDB .NET/C# Driver may cause remote code executionCVE-2022-48282Fix available6.6 Medium
- mongodb, mongodb inc. server, mongodb, inc. mongodb server +2 moreMongoDB Server (mongod) may crash in response to unexpected requestsCVE-2022-24272Fix available6.5 Medium
- mongodb, mongodb inc. server, mongodb, inc. mongodb server +2 moreLarge aggregation pipelines with a specific stage can crash mongod under default configurationCVE-2021-32040Fix available6.5 Medium
- mongodb, mongodb inc. server, mongodb, inc. mongodb server +2 moreDenial of Service and Data Integrity vulnerability in features commandCVE-2021-32036Fix available5.4 Medium
- mongodb, mongodb inc. for vs code +1 moreMongoDB Extension for VS Code may unexpectedly store credentials locally in clear textCVE-2021-32039Fix available5.5 Medium
- mongodb, mongodb inc. server, mongodb, inc. mongodb server +2 moreSpecific replication command with malformed oplog entries can crash secondariesCVE-2021-20330Fix available6.5 Medium
- mongodb, mongodb inc. server, mongodb, inc. mongodb server +2 moreUser may trigger invariant when allowed to send commands directly to shardsCVE-2021-32037Fix available6.5 Medium
- mongodb rust driverMongoDB Rust Driver may publish events containing authentication-related data to a connection pool event listener configured by an applicationCVE-2021-20332Fix available4.2 Medium
- mongodb, mongodb inc. server, mongodb, inc. mongodb server +2 moreServer log entry spoofing via newline injectionCVE-2021-20333Fix available5.3 Medium
- mongodb go driverSpecific cstrings input may not be properly validated in the Go DriverCVE-2021-20329Fix available6.8 Medium
- mongodb inc. c# driver, mongodb c\# driver +1 moreMongoDB C# Driver may publish events containing authentication-related data to a command listener configured by an applicationCVE-2021-20331Fix available4.2 Medium
- mongodb, mongodb inc. server, mongodb, inc. mongodb server +2 moreSpecially crafted query may result in a denial of service of mongodCVE-2021-20326Fix available6.5 Medium
- mongodb database tools, mongomirror +1 moreSpecific command line parameter might result in accepting invalid certificateCVE-2020-7924Fix available4.2 Medium
- mongodb compassLocal privilege escalation in MongoDB Compass for WindowsCVE-2021-203344.8 Medium
- mongodb, mongodb inc. server, mongodb, inc. mongodb server +2 moreInvariant failure when explaining a find with a UUIDCVE-2018-250044.9 Medium
- mongodb, mongodb inc. server, mongodb, inc. mongodb server +2 moreSpecially crafted regex query can cause DoSCVE-2020-7929Fix available6.5 Medium
- mongodb java driver, mongodb inc. mongo-java-driver, mongodb-driver +3 more +5 moreMongoDB Java driver client-side field level encryption not verifying KMS host nameCVE-2021-20328Fix available6.4 Medium
- mongodb inc. node.js driver mongodb-client-encryption module, mongodb client encryption +1 moreMongoDB Node.js client side field level encryption library may not be validating KMS certificateCVE-2021-20327Fix available6.4 Medium
- mongodb ops managerSSL may be unexpectedly disabled during upgrade of multiple-server MongoDB Ops ManagerCVE-2021-203356.7 Medium
- mongodb, mongodb inc. server, mongodb, inc. mongodb server +2 moreDenial of service via malformed network packetCVE-2019-20925Fix available7.5 High
- mongodb ops managerPotential privilege escalation in Ops Manager APICVE-2020-79278.1 High
- mongodb, mongodb inc. server, mongodb, inc. mongodb server +2 moreInfinite loop in aggregation expressionCVE-2018-208036.5 Medium
- mongodb, mongodb inc. server, mongodb, inc. mongodb server +2 moreImproper neutralization of null byte leads to read overrunCVE-2020-7928Fix available6.5 Medium
- mongodb, mongodb inc. server, mongodb, inc. mongodb server +2 moreCrash while joining collections with $lookupCVE-2019-23936.5 Medium
- mongodb, mongodb server, mongodb, inc. mongodb server +2 moreCrash while handling internal Javascript exception typesCVE-2019-209236.5 Medium
- mongodb, mongodb inc. server, mongodb, inc. mongodb server +2 moreInvariant in IndexBoundsBuilderCVE-2019-209246.5 Medium
- mongodb, mongodb inc. server, mongodb, inc. mongodb server +2 more$mod can result in undefined behaviorCVE-2019-23926.5 Medium
- mongodb, mongodb inc. server, mongodb, inc. mongodb server +2 moreInvariant with $elemMatchCVE-2018-208056.5 Medium
- mongodb, mongodb inc. server, mongodb, inc. mongodb server +2 morePost-auth queries on compound index may crash mongodCVE-2018-20802Fix available6.5 Medium
- mongodb, mongodb inc. server, mongodb, inc. mongodb server +2 moreInvariant failure in applyOpsCVE-2018-208046.5 Medium
- mongodb, mongodb inc. server, mongodb, inc. mongodb server +2 moreSpecific query can cause a DoS against MongoDB ServerCVE-2020-7926Fix available6.5 Medium
- mongodb, mongodb inc. server, mongodb, inc. mongodb server +2 moreDenial of Service when processing malformed Role namesCVE-2020-7925Fix available7.5 High
- mongodb, mongodb inc. server, mongodb, inc. mongodb server +2 moreSpecific GeoQuery can cause DoS against MongoDB ServerCVE-2020-7923Fix available6.5 Medium
- mongodb ops managerPotential exposure of log information in Ops ManagerCVE-2019-23885.8 Medium
- mongodb, mongodb inc. server, mongodb, inc. mongodb server +2 moreAdministrative action may disable enforcement of per-user IP whitelistingCVE-2020-7921Fix available4.6 Medium
- mongodb c driver, whoopsie project whoopsie +1 morebson before 0.8 incorrectly uses int rather than size_t for many variables, parameters, and...CVE-2020-12135Fix available5.5 Medium
- mongodb enterprise kubernetes operatorKubernetes Operator generates potentially insecure certificatesCVE-2020-79226.4 Medium
- mongodb js-bsonJS-bson may incorrectly serialise some requestsCVE-2019-2391Fix available4.2 Medium
- mongodb bsonDeserialization of Untrusted Data in bsonCVE-2020-7610Fix available9.8 Critical
- mongodb bson, fedoraproject fedora +1 moreBSON rubygem contains potential denial of serviceCVE-2015-4411Fix available7.5 High
- mongo-express project mongo-expressRemote Code Execution Vulnerability in NPM mongo-expressCVE-2019-10758In KEVPublic exploitFix availableEPSS 84.7%9.9 Critical
- mongodb, mongodb inc. server, mongodb, inc. mongodb server +2 moreProcess termination via PID file manipulationCVE-2019-23895.3 Medium
- mongodb, mongodb inc. server, mongodb, inc. mongodb server +2 moreCode execution on Windows via OpenSSL engine injectionCVE-2019-23908.2 High
- mongodb, mongodb inc. server, mongodb, inc. mongodb server +2 moreAuthorization session conflationCVE-2019-2386Fix available7.1 High
- Show moreLoading…