Lucene search
K

675 matches found

Packet Storm News
Packet Storm News
added 2025/07/09 12:0 a.m.7 views

AdeptHEQ-FL: Adaptive Homomorphic Encryption for Federated Learning of Hybrid Classical-Quantum Models with Dynamic Layer Sparing

Federated Learning FL faces inherent challenges in balancing model performance, privacy preservation, and communication efficiency, especially in non-IID decentralized environments. Recent approaches either sacrifice formal privacy guarantees, incur high overheads, or overlook quantum-enhanced...

6.8AI score
Exploits0
CNVD
CNVD
added 2025/07/08 12:0 a.m.5 views

MongoDB Server Authorization Issues Vulnerability (CNVD-2025-15515)

MongoDB Server is the United States MongoDB company's set of open source NoSQL database . The database provides collection-oriented storage , dynamic query , data replication and automatic failover and other functions . A security vulnerability exists in MongoDB Server versions prior to 8.0.7,...

7.7CVSS7AI score0.0043EPSS
Exploits0References1
OSV
OSV
added 2025/07/07 3:15 p.m.1 views

CVE-2025-6713

An unauthorized user may leverage a specially crafted aggregation pipeline to access data without proper authorization due to improper handling of the $mergeCursors stage in MongoDB Server. This may lead to access to data without further authorisation. This issue affects MongoDB Server MongoDB...

6.5CVSS6.8AI score
Exploits0References1
OSV
OSV
added 2025/07/07 3:15 p.m.1 views

UBUNTU-CVE-2025-6713

An unauthorized user may leverage a specially crafted aggregation pipeline to access data without proper authorization due to improper handling of the $mergeCursors stage in MongoDB Server. This may lead to access to data without further authorisation. This issue affects MongoDB Server MongoDB...

7.7CVSS5.8AI score0.0043EPSS
Exploits0References3
CVE
CVE
added 2025/07/07 2:46 p.m.33 views

CVE-2025-6713

CVE-2025-6713 affects MongoDB Server: versions before 8.0.7 (8.0.x), 7.0 before 7.0.19, and 6.0 before 6.0.22 are vulnerable due to improper handling of the $mergeCursors stage in aggregation pipelines. An unauthorized user can potentially access data without proper authorization through crafted ...

7.7CVSS6.1AI score0.0043EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2025/07/07 2:46 p.m.7 views

CVE-2025-6713 MongoDB Server may be susceptible to privilege escalation due to $mergeCursors stage

An unauthorized user may leverage a specially crafted aggregation pipeline to access data without proper authorization due to improper handling of the $mergeCursors stage in MongoDB Server. This may lead to access to data without further authorisation. This issue affects MongoDB Server MongoDB...

7.7CVSS0.0043EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/07/07 12:0 a.m.2 views

PT-2025-28179

Name of the Vulnerable Software and Affected Versions: MongoDB Server versions prior to 8.0.7 MongoDB Server versions prior to 7.0.20 MongoDB Server versions prior to 6.0.22 Description: An unauthorized user may leverage a specially crafted aggregation pipeline to access data without proper...

8.8CVSS7.9AI score0.0043EPSS
Exploits0References30
FreeBSD
FreeBSD
added 2025/07/07 12:0 a.m.6 views

MongoDB -- may be susceptible to privilege escalation due to $mergeCursors stage

[email protected] reports: An unauthorized user may leverage a specially crafted aggregation pipeline to access data without proper authorization due to improper handling of the $mergeCursors stage in MongoDB Server. This may lead to access to data without further authorisation...

7.7CVSS6.4AI score0.0043EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/07/07 12:0 a.m.3 views

MongoDB Server 安全漏洞

MongoDB Server is the United States MongoDB company's set of open source NoSQL database . The database provides collection-oriented storage , dynamic query , data replication and automatic failover and other functions . A security vulnerability exists in MongoDB Server versions prior to 8.0.7,...

7.7CVSS6.6AI score0.0043EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/06/28 2:7 p.m.3 views

CVE-2025-6706

An authenticated user may trigger a use after free that may result in MongoDB Server crash and other unexpected behavior, even if the user does not have authorization to shut down a server. The crash is triggered on affected versions by issuing an aggregation framework operation using a specific...

5CVSS7AI score0.00229EPSS
Exploits0References1
OSV
OSV
added 2025/06/26 2:15 p.m.2 views

CVE-2025-6706

An authenticated user may trigger a use after free that may result in MongoDB Server crash and other unexpected behavior, even if the user does not have authorization to shut down a server. The crash is triggered on affected versions by issuing an aggregation framework operation using a specific...

8.8CVSS6.8AI score
Exploits0References1
NVD
NVD
added 2025/06/26 2:15 p.m.6 views

CVE-2025-6706

An authenticated user may trigger a use after free that may result in MongoDB Server crash and other unexpected behavior, even if the user does not have authorization to shut down a server. The crash is triggered on affected versions by issuing an aggregation framework operation using a specific...

8.8CVSS0.00229EPSS
Exploits0References1
OSV
OSV
added 2025/06/26 2:15 p.m.0 views

UBUNTU-CVE-2025-6706

An authenticated user may trigger a use after free that may result in MongoDB Server crash and other unexpected behavior, even if the user does not have authorization to shut down a server. The crash is triggered on affected versions by issuing an aggregation framework operation using a specific...

8.8CVSS5.8AI score0.00229EPSS
Exploits0References3
CVE
CVE
added 2025/06/26 2:0 p.m.33 views

CVE-2025-6706

CVE-2025-6706 affects MongoDB Server when the SBE engine is enabled. An authenticated user can trigger a use-after-free via a specific aggregation pipeline pattern, potentially crashing the server and causing other unexpected behavior without needing shutdown privileges. Affected versions are Mon...

8.8CVSS7AI score0.00229EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2025/06/26 2:0 p.m.2 views

CVE-2025-6706 Running certain aggregation operations with the SBE engine may lead to unexpected behavior on MongoDB Server

An authenticated user may trigger a use after free that may result in MongoDB Server crash and other unexpected behavior, even if the user does not have authorization to shut down a server. The crash is triggered on affected versions by issuing an aggregation framework operation using a specific...

5CVSS7AI score0.00229EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/06/26 2:0 p.m.6 views

CVE-2025-6706 Running certain aggregation operations with the SBE engine may lead to unexpected behavior on MongoDB Server

An authenticated user may trigger a use after free that may result in MongoDB Server crash and other unexpected behavior, even if the user does not have authorization to shut down a server. The crash is triggered on affected versions by issuing an aggregation framework operation using a specific...

5CVSS0.00229EPSS
Exploits0References1
MongoDB
MongoDB
added 2025/06/26 1:59 p.m.8 views

Running certain aggregation operations with the SBE engine may lead to unexpected behavior on MongoDB Server

An authenticated user may trigger a use after free that may result in MongoDB Server crash and other unexpected behavior, even if the user does not have authorization to shut down a server. The crash is triggered on affected versions by issuing an aggregation framework operation using a specific...

8.8CVSS6.9AI score0.00229EPSS
Exploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2025/06/26 12:0 a.m.2 views

PT-2025-26971

Name of the Vulnerable Software and Affected Versions: MongoDB Server versions prior to 6.0.21 MongoDB Server versions prior to 7.0.17 MongoDB Server versions prior to 8.0.4 Description: An authenticated user may trigger a use after free, resulting in a MongoDB Server crash and other unexpected...

8.8CVSS7.9AI score0.0043EPSS
Exploits0References26
FreeBSD
FreeBSD
added 2025/06/26 12:0 a.m.6 views

MongoDB -- Running certain aggregation operations with the SBE engine may lead to unexpected behavior

[email protected] reports: An authenticated user may trigger a use after free that may result in MongoDB Server crash and other unexpected behavior, even if the user does not have authorization to shut down a server. The crash is triggered on affected versions by issuing an aggregation framework...

8.8CVSS7.1AI score0.00229EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2025/06/26 12:0 a.m.4 views

FreeBSD : MongoDB -- Running certain aggregation operations with the SBE engine may lead to unexpected behavior (5e64770c-52aa-11f0-b522-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 5e64770c-52aa-11f0-b522-b42e991fc52e advisory. [email protected] reports: An authenticated user may trigger a use after free that may result in MongoDB...

8.8CVSS5.6AI score0.00229EPSS
Exploits0References3
Rows per page
Query Builder