Linux 13140
Google 12525
Microsoft 12378
Apple 6692
Oracle 6649
Adobe 6383
Ibm 6266
Cisco 5746
Debian 3919
Apache 2864
Mozilla 2857
Redhat 2581
MongoDB
HIGH 7.5
A vulnerability in MongoDB Server's BSON validation logic allows an unauthenticated user to crash the mongod process by sending a specially crafted m…
MongoDB
MEDIUM 6.5
A bug in query analysis processing of the $vectorSearch aggregation stage for Queryable Encryption (QE) or Client-Side Field Level Encryption (CSFLE)…
MongoDB
MEDIUM 6.5
In MongoDB Server 8.0, an aggregation stage can leave its _subPipeline field null during processing of certain pipelines. If a getMore is subsequentl…
MongoDB
MEDIUM 6.5
When using $changestreams and $_requestReshardingResumeToken with the exchange option the server hits an invariant which causes the server to crash. …
MongoDB
MEDIUM 5.9
When OIDC authentication is enabled in configuration, clients may set specific values in the "mechanism" parameter of the "authenticate" command that…
MongoDB
MEDIUM 5.5
MongoDB server may log authentication parameters, including credentials, to the server log during SASL authentication. When connection health metric …
MongoDB
MEDIUM 6.5
Using a densely populated chars mask and a large input string in the MongoDB aggregation operators $trim, $ltrim, and $rtrim, an authenticated user w…
MongoDB
MEDIUM 6.5
After invoking $_internalJsEmit, which is not intended to be directly accessible, or mapreduce command’s map function in a certain way, an authentica…
MongoDB
HIGH 8.8
An issue in MongoDB Server's time-series collection implementation allows an authenticated user with database write privileges to trigger an out-of-b…
MongoDB
HIGH 8.8
A use-after-free vulnerability exists in MongoDB's Field-Level Encryption (FLE) query analysis component, affecting client-side uses of mongocryptd a…
MongoDB
MEDIUM 6.5
An authenticated user can cause excess memory usage via bitwise match expression AST processing of $bitsAllSet, $bitsAnySet, $bitsAllClear, and $bits…
MongoDB
MEDIUM 5.3
When schema validation is enabled on a collection and an update or insert would violate the collection's schema, the local server log message generat…
MongoDB
MEDIUM 6.5
An authenticated user can crash mongod when running $rankFusion or $scoreFusion with an empty pipeline on a view. When resolving a view, the server …
C Driver
HIGH 7.8
The MongoDB C Driver's Cyrus SASL integration performs unsafe string copying during username canonicalization, enabling a heap buffer overflow before…
MongoDB
HIGH 7.5
Computing the MD5 checksum of a malformed BSON object under specific conditions may cause loss of availability in MongoDB server. This issue affects …
C Driver
HIGH 7.5
The bson_validate function may return early on specific inputs and incorrectly report success. This behavior could result in skipping validation for …
MongoDB
MEDIUM 5.3
A user with access to the cluster with a limited set of privilege actions can trigger a crash of a mongod process during the limited and unpredictabl…
MongoDB
HIGH 7.5
A specially crafted aggregation query with $lookup by an authenticated user with write privileges can cause a double-free or use-after-free memory is…
MongoDB
HIGH 8.8
A use-after-free vulnerability can be triggered in sharded clusters by an authenticated user with the read role who issues a specially crafted $looku…
MongoDB
MEDIUM 6.5
An authorized user may trigger a server crash by running a $geoNear pipeline with certain invalid index hints.
MongoDB
MEDIUM 6.5
An authorized user may disable the MongoDB server by issuing a query against a collection that contains an invalid compound wildcard index.
MongoDB
HIGH 7.5
Inserting certain large documents into a replica set could lead to replica set secondaries not being able to fetch the oplog from the primary. This c…
MongoDB
HIGH 7.5
Connections received from the proxy port may not count towards total accepted connections, resulting in server crashes if the total number of connect…
MongoDB
HIGH 7.5
MongoDB Server may experience an out-of-memory failure while evaluating expressions that produce deeply nested documents. The issue arises in recursi…
MongoDB
HIGH 7.5
Complex queries can cause excessive memory usage in MongoDB Query Planner resulting in an Out-Of-Memory Crash.
MongoDB
HIGH 7.5
Mismatched length fields in Zlib compressed protocol headers may allow a read of uninitialized heap memory by an unauthenticated client. This issue a…
MongoDB
MEDIUM 5.4
A post-authentication flaw in the network two-phase commit protocol used for cross-shard transactions in MongoDB Server may lead to logical data inco…
MongoDB
HIGH 7.5
MongoDB Server may experience an invariant failure during batched delete operations when handling documents. The issue arises when the server mistake…
MongoDB
MEDIUM 6.5
A user with access to the cluster with a limited set of privilege actions may be able to terminate queries that are being executed by other users. Th…
MongoDB
MEDIUM 6.5
Inconsistent object size validation in time series processing logic may result in later processing of oversized BSON documents leading to an assert f…