134 matches found
New MongoDB Flaw Lets Unauthenticated Attackers Read Uninitialized Memory
A high-severity security flaw has been disclosed in MongoDB that could allow unauthenticated users to read uninitialized heap memory. The vulnerability, tracked as CVE-2025-14847 CVSS score: 8.7, has been described as a case of improper handling of length parameter inconsistency, which arises whe...
MongoDB Server security vulnerabilities
MongoDB Server is a set of open source NoSQL databases from the American company MongoDB. The database provides collection-oriented storage, dynamic querying, data replication and automatic failover. A security vulnerability exists in MongoDB Server, which stems from a Zlib compression protocol...
Linux Distros Unpatched Vulnerability : CVE-2025-14345
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A post-authentication flaw in the network two-phase commit protocol used for cross-shard transactions in MongoDB Server may lead to logical data inconsistencies...
MongoDB Server security vulnerabilities
MongoDB Server is a set of open source NoSQL databases from the American company MongoDB. The database provides collection-oriented storage, dynamic querying, data replication and automatic failover. A security vulnerability exists in MongoDB Server versions prior to 8.0.16, prior to 7.0.26, and...
Linux Distros Unpatched Vulnerability : CVE-2025-13507
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inconsistent object size validation in time series processing logic may result in later processing of oversized BSON documents leading to an assert failing and...
CVE-2025-12893 Improper Certificate Validation May Allow Successful TLS Handshaking Despite Invalid Extended Key Usage Fields in MongoDB Server
Clients may successfully perform a TLS handshake with a MongoDB server despite presenting a client certificate not aligning with the documented Extended Key Usage EKU requirements. A certificate that specifies extendedKeyUsage but is missing extendedKeyUsage = clientAuth may still be successfully...
ROS-20251030-04
A vulnerability in the MongoDB database management system is related to misconfiguration of the lsid field. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service...
MongoDB security vulnerabilities
MongoDB is a document-oriented database management system from the American company MongoDB. A security vulnerability exists in MongoDB versions 2.0.0 through 2.14.24, which stems from a failure to set an ACL for a custom installation directory when installing via MSI on Windows, which could resu...
EUVD-2017-5737
Malware in sbrugna...
EUVD-2019-12033
Malware in sbrugna...
EUVD-2019-12034
Malware in sbrugna...
EUVD-2013-3901
Malware in sbrugna...
EUVD-2019-0254
Malware in sbrugna...
EUVD-2012-6465
Malware in sbrugna...
EUVD-2016-4159
Malware in sbrugna...
EUVD-2017-6987
Malware in sbrugna...
EUVD-2015-1740
Malware in sbrugna...
EUVD-2019-11453
Malware in sbrugna...