3941 matches found
PT-2026-7433
Name of the Vulnerable Software and Affected Versions MongoDB Server affected versions not specified Description The MongoDB Server may encounter an out-of-memory failure when processing expressions that result in deeply nested documents. This occurs due to a lack of periodic depth checks within...
MongoDB Server 安全漏洞
MongoDB Server is an open-source NoSQL database developed by MongoDB, a company based in the United States. This database offers features such as collection-oriented storage, dynamic querying, data replication, and automatic failover. There is a security vulnerability in MongoDB Server, which ste...
MongoDB Server -- CWE-704 Incorrect Type Conversion or Cast
https://jira.mongodb.org/browse/SERVER-113685 reports: An authorized user may disable the MongoDB server by issuing a query against a collection that contains an invalid compound wildcard index...
PT-2026-7438
Name of the Vulnerable Software and Affected Versions MongoDB affected versions not specified Description An authorized user may disable the MongoDB server by issuing a query against a collection that contains an invalid compound wildcard index. An unsafe cast in the MongoDB query planner can...
MongoDB Server 安全漏洞
MongoDB Server is an open-source NoSQL database developed by MongoDB, a company based in the United States. This database offers features such as collection-oriented storage, dynamic querying, data replication, and automatic failover. There is a security vulnerability in MongoDB Server, which ste...
MongoDB Server 安全漏洞
MongoDB Server is an open-source NoSQL database developed by MongoDB, a US-based company. This database offers features such as collection-oriented storage, dynamic querying, data replication, and automatic failover. There is a security vulnerability in MongoDB Server, which stems from authorized...
MongoDB Server 安全漏洞
MongoDB Server is an open-source NoSQL database developed by MongoDB, a US-based company. This database offers features such as collection-oriented storage, dynamic querying, data replication, and automatic failover. There is a security vulnerability in MongoDB Server, which stems from issues wit...
MongoDB Server 安全漏洞
MongoDB Server is an open-source NoSQL database developed by MongoDB, a US-based company. This database offers features such as collection-oriented storage, dynamic querying, data replication, and automatic failover. There is a security vulnerability in MongoDB Server, which stems from incorrect...
MongoDB Server 安全漏洞
MongoDB Server is an open-source NoSQL database developed by MongoDB, a company based in the United States. This database offers features such as collection-oriented storage, dynamic querying, data replication, and automatic failover. There is a security vulnerability in MongoDB Server, which ste...
MongoDB Server -- CWE-617 Reachable Assertion
https://jira.mongodb.org/browse/SERVER-99119 reports: An authorized user may trigger a server crash by running a $geoNear pipeline with certain invalid index hints...
Exploit for Improper Handling of Length Parameter Inconsistency in Mongodb
MongoBleed CVE-2025-14847 Scanner and Exploitation Toolkit...
CVE-2026-25518 vulnerabilities
Vulnerabilities for packages: cert-manager-google-cas-issuer-fips, step-issuer, cert-manager-cmctl-fips, opentelemetry-operator-fips, cert-manager-openshift-routes-fips, cert-manager-google-cas-issuer, cert-manager-webhook-pdns, percona-server-mongodb-operator, aws-privateca-issuer,...
CVE-2026-25518 vulnerabilities
Vulnerabilities for packages: cert-manager-csi-driver, cert-manager-istio-csr, percona-server-mongodb-operator, step-issuer, cert-manager-cmctl, cert-manager-webhook-pdns, opentelemetry-operator, mariadb-operator, aws-privateca-issuer...
GHSA-GX3X-VQ4P-MHHV vulnerabilities
Vulnerabilities for packages: cert-manager-csi-driver, cert-manager-istio-csr, percona-server-mongodb-operator, step-issuer, cert-manager-cmctl, cert-manager-webhook-pdns, opentelemetry-operator, mariadb-operator, aws-privateca-issuer...
GHSA-GX3X-VQ4P-MHHV vulnerabilities
Vulnerabilities for packages: cert-manager-google-cas-issuer-fips, step-issuer, cert-manager-cmctl-fips, opentelemetry-operator-fips, cert-manager-openshift-routes-fips, cert-manager-google-cas-issuer, cert-manager-webhook-pdns, percona-server-mongodb-operator, aws-privateca-issuer,...
⚡ Weekly Recap: Proxy Botnet, Office Zero-Day, MongoDB Ransoms, AI Hijacks & New Threats
Every week brings new discoveries, attacks, and defenses that shape the state of cybersecurity. Some threats are stopped quickly, while others go unseen until they cause real damage. Sometimes a single update, exploit, or mistake changes how we think about risk and protection. Every incident show...
Linux Distros Unpatched Vulnerability : CVE-2025-14911
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - User-controlled chunkSize metadata from MongoDB lacks appropriate validation allowing malformed GridFS metadata to overflow the bounding container. CVE-2025-149...
CLEANSTART-2026-RG55910 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate
Multiple security vulnerabilities affect the mongodb package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...
CLEANSTART-2026-ON55906 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate
Multiple security vulnerabilities affect the mongodb package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...
CLEANSTART-2026-RN77098 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate
Multiple security vulnerabilities affect the mongodb package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...