Linux 13140
Google 12525
Microsoft 12378
Apple 6692
Oracle 6649
Adobe 6383
Ibm 6266
Cisco 5746
Debian 3919
Apache 2864
Mozilla 2857
Redhat 2581
Java Driver
MEDIUM 6.8
Specific versions of the Java driver that support client-side field level encryption (CSFLE) fail to perform correct host name verification on the KM…
MongoDB
HIGH 7.5
An unauthenticated client can trigger denial of service by issuing specially crafted wire protocol messages, which cause the message decompressor to …
Ops Manager
MEDIUM 6.5
Specially crafted API calls may allow an authenticated user who holds Organization Owner privilege to obtain an API key with Global Role privilege. T…
MongoDB
MEDIUM 6.5
A user authorized to perform database queries may trigger denial of service by issuing specially crafted queries, which loop indefinitely in mathemat…
MongoDB
MEDIUM 6.5
A user authorized to perform database queries may trigger a read overrun and access arbitrary memory by issuing specially crafted queries. This issue…
MongoDB
MEDIUM 6.5
A user authorized to perform database queries may trigger denial of service by issuing specially crafted queries, which use $lookup and collations. T…
MongoDB
MEDIUM 6.5
A user authorized to perform database queries may trigger denial of service by issuing specially crafted queries with compound indexes affecting Quer…
MongoDB
MEDIUM 6.5
A user authorized to perform database queries may trigger denial of service by issuing specially crafted applyOps invocations. This issue affects Mon…
MongoDB
MEDIUM 6.5
A user authorized to perform database queries may trigger denial of service by issuing specially crafted queries, which perform an $elemMatch . This …
MongoDB
MEDIUM 6.5
A user authorized to perform database queries may trigger denial of service by issuing specially crafted queries, which throw unhandled Javascript ex…
MongoDB
MEDIUM 6.5
A user authorized to perform database queries may trigger denial of service by issuing specially crafted queries which trigger an invariant in the In…
MongoDB
MEDIUM 6.5
A user authorized to perform database queries may trigger denial of service by issuing specially crafted queries, which use the $mod operator to over…
MongoDB
HIGH 7.5
Incorrect validation of user input in the role name parser may lead to use of uninitialized memory allowing an unauthenticated attacker to use a spec…
MongoDB
MEDIUM 6.5
A user authorized to perform database queries may cause denial of service by issuing a specially crafted query which violates an invariant in the ser…
MongoDB
MEDIUM 6.5
A user authorized to perform database queries may cause denial of service by issuing specially crafted queries, which violate an invariant in the que…
Ops Manager
MEDIUM 5.3
In affected Ops Manager versions there is an exposed http route was that may allow attackers to view a specific access log of a publicly exposed Ops …
MongoDB
MEDIUM 5.3
Improper serialization of internal state in the authorization subsystem in MongoDB Server's authorization subsystem permits a user with valid credent…
C Driver
MEDIUM 5.5
bson before 0.8 incorrectly uses int rather than size_t for many variables, parameters, and return values. In particular, the bson_ensure_space() par…
Mongodb Enterprise Kubernetes Operator
MEDIUM 6.5
X.509 certificates generated by the MongoDB Enterprise Kubernetes Operator may allow an attacker with access to the Kubernetes cluster improper acces…
Js Bson
MEDIUM 5.4
Incorrect parsing of certain JSON input may result in js-bson not correctly serializing BSON. This may cause unexpected application behaviour includi…
Bson
CRITICAL 9.8
All versions of bson before 1.1.4 are vulnerable to Deserialization of Untrusted Data. The package will ignore an unknown value for an object's _bsot…
Bson
HIGH 7.5
The Moped::BSON::ObjecId.legal? method in mongodb/bson-ruby before 3.0.4 as used in rubygem-moped allows remote attackers to cause a denial of servic…
MongoDB
HIGH 7.8
An unprivileged user or program on Microsoft Windows which can create OpenSSL configuration files in a fixed location may cause utility programs ship…
MongoDB
HIGH 7.1
After user deletion in MongoDB Server the improper invalidation of authorization sessions allows an authenticated user's session to persist and becom…
MongoDB
HIGH 8.1
Improper handling of LDAP authentication in MongoDB Server versions 3.0.0 to 3.0.6 allows an unauthenticated client to gain unauthorized access.
Libbson
HIGH 8.1
_bson_iter_next_internal in bson-iter.c in libbson 1.12.0, as used in MongoDB mongo-c-driver and other products, has a heap-based buffer over-read vi…
Js Bson
HIGH 7.5
The MongoDB bson JavaScript module (also known as js-bson) versions 0.5.0 to 1.0.x before 1.0.5 is vulnerable to a Regular Expression Denial of Servi…
MongoDB
HIGH 7.0
The skyring-setup command creates random password for mongodb skyring database but it writes password in plain text to /etc/skyring/skyring.conf file…
MongoDB
CRITICAL 9.1
MongoDB 3.4.x before 3.4.10, and 3.5.x-development, has a disabled-by-default configuration setting, networkMessageCompressors (aka wire protocol com…
MongoDB
HIGH 7.5
In MongoDB libbson 1.7.0, the bson_iter_codewscope function in bson-iter.c miscalculates a bson_utf8_validate length argument, which allows remote at…