Malicious code in sadr-pyxis-mongodb-quito (npm)

The package sadr-pyxis-mongodb-quito was found to contain malicious code...

Malicious code in socketio-mongodb-exobiology-got (npm)

The package socketio-mongodb-exobiology-got was found to contain malicious code...

MongoDB Server 安全漏洞

MongoDB Server is a set of open source NoSQL databases from the American company MongoDB. The database provides collection-oriented storage, dynamic querying, data replication and automatic failover. A security vulnerability exists in MongoDB Server versions prior to v6.0.25, prior to v7.0.22, an...

MongoDB Server 安全漏洞

MongoDB Server is a set of open source NoSQL databases from the American company MongoDB. The database provides collection-oriented storage, dynamic querying, data replication and automatic failover. A security vulnerability exists in MongoDB Server versions prior to 6.0.25, 7.0.22, 8.0.12, and...

Linux Distros Unpatched Vulnerability : CVE-2016-6494

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The client in MongoDB uses world-readable permissions on .dbshell history files, which might allow local users to obtain sensitive information by reading these...

mongodb -- Malformed $group Query May Cause MongoDB Server to Crash

[email protected] reports: An authorized user can cause a crash in the MongoDB Server through a specially crafted $group query. This vulnerability is related to the incorrect handling of certain accumulator functions when additional parameters are specified within the $group operation. This...

PT-2025-36330

Name of the Vulnerable Software and Affected Versions: MongoDB Server versions prior to 6.0.25 MongoDB Server versions prior to 7.0.22 MongoDB Server versions prior to 8.0.12 Description: MongoDB Server may allow upsert operations retried within a transaction to violate unique index constraints,...

PT-2025-36331

Name of the Vulnerable Software and Affected Versions: MongoDB Server versions prior to 6.0.25 MongoDB Server versions prior to 7.0.22 MongoDB Server versions prior to 8.0.12 MongoDB Server versions prior to 8.1.2 Description: An authorized user can cause a crash in the MongoDB Server through a...

MongoDB Server 安全漏洞

MongoDB Server is a set of open source NoSQL databases from the American company MongoDB. The database provides collection-oriented storage, dynamic querying, data replication and automatic failover. A security vulnerability exists in MongoDB Server versions prior to v6.0.x, prior to v7.0.18, and...

Linux Distros Unpatched Vulnerability : CVE-2021-20333

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Sending specially crafted commands to a MongoDB Server may result in artificial log entries being generated or for log entries to be split. This issue affects...

Linux Distros Unpatched Vulnerability : CVE-2020-7929

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A user authorized to perform database queries may trigger denial of service by issuing specially crafted query contain a type of regex. This issue affects Mongo...

Linux Distros Unpatched Vulnerability : CVE-2016-3104

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mongod in MongoDB 2.6, when using 2.4-style users, and 2.4 allow remote attackers to cause a denial of service memory consumption and process termination by...

Linux Distros Unpatched Vulnerability : CVE-2022-24272

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An authenticated user may trigger an invariant assertion during command dispatch due to incorrect validation on the $external database. This may result in mongo...

Linux Distros Unpatched Vulnerability : CVE-2020-7925

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect validation of user input in the role name parser may lead to use of uninitialized memory allowing an unauthenticated attacker to use a specially craft...

Linux Distros Unpatched Vulnerability : CVE-2019-2393

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A user authorized to perform database queries may trigger denial of service by issuing specially crafted queries, which use $lookup and collations. This issue...

Linux Distros Unpatched Vulnerability : CVE-2019-2386

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - After user deletion in MongoDB Server the improper invalidation of authorization sessions allows an authenticated user's session to persist and become conflated...

Linux Distros Unpatched Vulnerability : CVE-2021-20330

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An attacker with basic CRUD permissions on a replicated collection can run the applyOps command with specially malformed oplog entries, resulting in a potential...

Linux Distros Unpatched Vulnerability : CVE-2021-32036

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An authenticated user without any specific authorizations may be able to repeatedly invoke the features command where at a high volume may lead to resource...

Linux Distros Unpatched Vulnerability : CVE-2018-25004

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A user authorized to performing a specific type of query may trigger a denial of service by issuing a generic explain command on a find query. This issue affect...

Linux Distros Unpatched Vulnerability : CVE-2018-20802

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A user authorized to perform database queries may trigger denial of service by issuing specially crafted queries with compound indexes affecting QueryPlanner...