Lucene search
K

98 matches found

OSV
OSV
added 2026/05/21 8:14 a.m.8 views

CLEANSTART-2026-QL45485 Security fixes for CVE-2025-14847, CVE-2025-58181, CVE-2025-61727, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289, CVE-2026-33810, CVE-2026-33811, CVE-2026-33814, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499 applied in versions: 7.0.30-r0, 7.0.30-r1, 7.0.31-r0, 7.0.32-r0, 8.2.1-r1

Multiple security vulnerabilities affect the mongodb package. These issues are resolved in later releases. See references for individual vulnerability details...

8.7CVSS7.3AI score0.62808EPSS
Exploits38References41
IBM Security Bulletins
IBM Security Bulletins
added 2026/03/16 5:42 p.m.3 views

Security Bulletin: Optional Mongo DB images in IBM Automation Decision Services 24.0.x are affected by CVE-2025-14847

Summary CVE-2025-14847 has been reported for the Mongo DB images shipped with IBM Automation Decision Services 24.0.0 and 24.0.1.. An updated version of the image is available. Vulnerability Details CVEID:CVE-2025-14847 DESCRIPTION: Mismatched length fields in Zlib compressed protocol headers may...

8.7CVSS7.2AI score0.62808EPSS
Exploits38Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2026/03/16 10:33 a.m.3 views

Security Bulletin: Optional Mongo DB images in IBM Cloud Pak for Business Automation 24.0.x are affected by CVE-2025-14847

Summary CVE-2025-14847 has been reported for the Mongo DB images shipped with IBM Cloud Pak for Business Automation 24.0.x. An updated version of the image is available. Vulnerability Details CVEID:CVE-2025-14847 DESCRIPTION: Mismatched length fields in Zlib compressed protocol headers may allow ...

8.7CVSS5.7AI score0.62808EPSS
Exploits38Affected Software2
IBM Security Bulletins
IBM Security Bulletins
added 2026/03/06 8:29 p.m.8 views

Security Bulletin: MongoDB Enterprised Advanced affected by: Improper Handling of Length Parameter Inconsistency (CVE-2025-14847)

Summary There is a vulnerability in MongoDB Server used in MongoDB Enterprised Advanced for IBM, involving CVE-2025-14847. The vulnerability has been addressed. Vulnerability Details CVEID:CVE-2025-14847 DESCRIPTION: Mismatched length fields in Zlib compressed protocol headers may allow a read of...

8.7CVSS5.7AI score0.62808EPSS
Exploits38Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2026/03/04 6:2 a.m.8 views

Security Bulletin: Vulnerabilities in MongoDB Server might affect IBM Storage Defender Copy Data Management

Summary IBM Storage Defender Copy Data Management can be affected by vulnerabilities in Zlib which use by MongoDB server. Vulnerability include mismatched length fields in Zlib compressed protocol headers may allow a read of uninitialized heap memory by an unauthenticated client as described by t...

8.7CVSS5.9AI score0.62808EPSS
Exploits38Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2026/02/25 5:4 p.m.9 views

Security Bulletin: IBM Sterling Transformation Extender is affected by MongoBleed security vulnerability

Summary IBM Sterling Transformation Extender uses MongoDB and is affected by MongoBleed security vulnerability CVE-2025-14847. Vulnerability Details CVEID:CVE-2025-14847 DESCRIPTION: Mismatched length fields in Zlib compressed protocol headers may allow a read of uninitialized heap memory by an...

8.7CVSS5.7AI score0.62808EPSS
Exploits38Affected Software1
GithubExploit
GithubExploit
added 2026/02/07 1:35 a.m.201 views

Exploit for Improper Handling of Length Parameter Inconsistency in Mongodb

MongoBleed CVE-2025-14847 Scanner and Exploitation Toolkit...

8.7CVSS5.9AI score0.62808EPSS
Exploits38
Tenable Nessus
Tenable Nessus
added 2026/01/29 12:0 a.m.8 views

Splunk Enterprise 9.2.0 < 9.2.12, 9.3.0 < 9.3.9, 9.4.0 < 9.4.8, 10.0.0 < 10.0.3 (SVD-2026-0101)

The version of Splunk installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the SVD-2026-0101 advisory. - Mismatched length fields in Zlib compressed protocol headers may allow a read of uninitialized heap memory by an...

8.7CVSS8.2AI score0.62808EPSS
Exploits38References2
Information Security Automation
Information Security Automation
added 2026/01/19 1:55 p.m.7 views

About Information Disclosure – MongoDB “MongoBleed” (CVE-2025-14847) vulnerability

About Information Disclosure - MongoDB "MongoBleed" CVE-2025-14847 vulnerability. MongoDB is a popular NoSQL database that stores data as JSON-like documents with an optional schema. The project is licensed under the SSPL. A flaw in MongoDB’s handling of the data length parameter during zlib...

8.7CVSS5.6AI score0.62808EPSS
Exploits38
GithubExploit
GithubExploit
added 2026/01/13 8:19 p.m.146 views

Exploit for Improper Handling of Length Parameter Inconsistency in Mongodb

MongoBleed-Pro ☠️ Advanced MongoDB Memory L...

8.7CVSS6.8AI score0.62808EPSS
Exploits38
GithubExploit
GithubExploit
added 2026/01/13 10:38 a.m.123 views

Exploit for Improper Handling of Length Parameter Inconsistency in Mongodb

🛠️ mongobleed - Easy Download of MongoDB Exploit Tool 📥 Do...

8.7CVSS6.9AI score0.62808EPSS
Exploits38
Tenable Nessus
Tenable Nessus
added 2026/01/08 12:0 a.m.6 views

MongoDB Unauthenicated Uninitialized Heap Memory Leak (MongoBleed) (CVE-2025-14847) (Direct Check)

Binary data mongobleeddirectcheck.nbin...

8.7CVSS7AI score0.62808EPSS
Exploits38References3
GithubExploit
GithubExploit
added 2026/01/06 7:14 p.m.122 views

Exploit for Improper Handling of Length Parameter Inconsistency in Mongodb

CVE-2025-...

8.7CVSS7.3AI score0.62808EPSS
Exploits38
GithubExploit
GithubExploit
added 2026/01/04 11:26 a.m.137 views

Exploit for Improper Handling of Length Parameter Inconsistency in Mongodb

Mongobleed-D...

8.7CVSS7.3AI score0.62808EPSS
Exploits38
Akamai Blog
Akamai Blog
added 2025/12/30 1:0 p.m.10 views

CVE-2025-14847: All You Need to Know About MongoBleed

...

8.7CVSS7AI score0.62808EPSS
Exploits38
GithubExploit
GithubExploit
added 2025/12/29 4:56 p.m.190 views

Exploit for CVE-2025-14847

MongoBleed - CV...

8.7CVSS7.4AI score0.62808EPSS
Exploits38
Rapid7 Blog
Rapid7 Blog
added 2025/12/29 2:16 p.m.9 views

MongoBleed CVE-2025-14847: Critical Memory Leak in MongoDB Allowing Attackers to Extract Sensitive Data

Overview On December 19, 2025, MongoDB Inc. disclosed a critical new vulnerability, CVE-2025-14847, which has since been dubbed MongoBleed. This vulnerability is a high-severity unauthenticated memory leak affecting MongoDB, one of the world's most popular document-oriented databases. While...

8.7CVSS7AI score0.62808EPSS
Exploits38
GithubExploit
GithubExploit
added 2025/12/29 10:36 a.m.124 views

Exploit for CVE-2025-14847

CYBERDUDEBIVASH MONGODB DETECTOR TOOL v2026.1 Detect expose...

8.7CVSS7AI score0.62808EPSS
Exploits38
Tenable Nessus
Tenable Nessus
added 2025/12/29 12:0 a.m.11 views

MongoDB 3.6.x / 4.0.x / 4.2.x / 4.4.x < 4.4.30 / 5.0.x < 5.0.32 / 6.0.x < 6.0.27 / 7.0.x < 7.0.28 / 8.0.x < 8.0.17 / 8.2.x < 8.2.3 Uninitialized Heap Memory Leak (CVE-2025-14847)

The version of MongoDB installed on the remote host is 3.6.x, 4.0.x, 4.2.x, 4.4.x prior to 4.4.30, 5.0.x prior to 5.0.32, 6.0.x prior to 6.0.27, 7.0.x prior to 7.0.28, 8.0.x prior to 8.0.17, or 8.2.x prior to 8.2.3. It is, therefore, affected by a uninitialized heap memeory leak vulnerability: -...

8.7CVSS7.5AI score0.62808EPSS
Exploits38References2
GithubExploit
GithubExploit
added 2025/12/28 11:7 p.m.283 views

Exploit for CVE-2025-14847

🩸 MongoBleed - CVE-2025-14847 Security Research Lab...

8.7CVSS7.5AI score0.62808EPSS
Exploits38
Rows per page
Query Builder