Lucene search
K

46 matches found

OSV
OSV
added 2026/02/26 8:47 a.m.4 views

BIT-MONGODB-2026-1850 An authorized user may disable the MongoDB server by issuing a certain type of complex query due to boolean expression simplification

Complex queries can cause excessive memory usage in MongoDB Query Planner resulting in an Out-Of-Memory Crash...

7.5CVSS5.4AI score0.00077EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2026/02/11 7:44 p.m.3 views

CVE-2026-1850

Complex queries can cause excessive memory usage in MongoDB Query Planner resulting in an Out-Of-Memory Crash...

7.5CVSS5.4AI score0.00077EPSS
Exploits0References1
NVD
NVD
added 2026/02/10 7:15 p.m.2 views

CVE-2026-1850

Complex queries can cause excessive memory usage in MongoDB Query Planner resulting in an Out-Of-Memory Crash...

7.5CVSS0.00077EPSS
Exploits0References1
OSV
OSV
added 2026/02/10 7:15 p.m.1 views

UBUNTU-CVE-2026-1850

Complex queries can cause excessive memory usage in MongoDB Query Planner resulting in an Out-Of-Memory Crash...

7.1CVSS5.8AI score0.00077EPSS
Exploits0References3
ATTACKERKB
ATTACKERKB
added 2026/02/10 6:49 p.m.3 views

CVE-2026-1850

Complex queries can cause excessive memory usage in MongoDB Query Planner resulting in an Out-Of-Memory Crash...

7.1CVSS5.4AI score0.00077EPSS
Exploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2026/02/10 6:49 p.m.3 views

CVE-2026-1850 An authorized user may disable the MongoDB server by issuing a certain type of complex query due to boolean expression simplification

Complex queries can cause excessive memory usage in MongoDB Query Planner resulting in an Out-Of-Memory Crash...

7.1CVSS5.4AI score0.00077EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/02/10 12:0 a.m.2 views

MongoDB Server 安全漏洞

MongoDB Server is an open-source NoSQL database developed by MongoDB, a company based in the United States. This database offers features such as collection-oriented storage, dynamic querying, data replication, and automatic failover. There is a security vulnerability in MongoDB Server, which ste...

7.5CVSS5.8AI score0.00077EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2026/02/06 1:26 a.m.2 views

CVE-2025-2134

IBM Jazz Reporting Service could allow an authenticated user on the network to affect the system's performance using complicated queries due to insufficient resource pooling...

3.5CVSS5.3AI score0.00013EPSS
Exploits0References1
NVD
NVD
added 2026/02/04 9:15 p.m.2 views

CVE-2025-2134

IBM Jazz Reporting Service could allow an authenticated user on the network to affect the system's performance using complicated queries due to insufficient resource pooling...

3.5CVSS0.00013EPSS
Exploits0References1
OSV
OSV
added 2026/02/04 9:15 p.m.1 views

CVE-2025-2134

IBM Jazz Reporting Service could allow an authenticated user on the network to affect the system's performance using complicated queries due to insufficient resource pooling...

3.5CVSS5.8AI score
Exploits0References1
EUVD
EUVD
added 2026/02/04 9:7 p.m.3 views

EUVD-2025-206775

IBM Jazz Reporting Service could allow an authenticated user on the network to affect the system's performance using complicated queries due to insufficient resource pooling...

3.5CVSS5.4AI score0.00013EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/02/04 9:7 p.m.2 views

CVE-2025-2134 IBM Jazz Reporting Service Denial of Service

IBM Jazz Reporting Service could allow an authenticated user on the network to affect the system's performance using complicated queries due to insufficient resource pooling...

3.5CVSS5.4AI score0.00013EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/02/04 9:7 p.m.3 views

CVE-2025-2134

IBM Jazz Reporting Service could allow an authenticated user on the network to affect the system's performance using complicated queries due to insufficient resource pooling...

3.5CVSS5.4AI score0.00013EPSS
Exploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2026/02/04 12:0 a.m.2 views

PT-2026-5893

Name of the Vulnerable Software and Affected Versions IBM Jazz Reporting Service affected versions not specified Description An authenticated user on the network may impact system performance by submitting complex queries because of inadequate resource pooling. Recommendations At the moment, ther...

3.5CVSS5.4AI score0.00013EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2019-0018

Malware in sbrugna...

5.3CVSS5.3AI score0.00666EPSS
Exploits0References7
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2021-0657

Malware in sbrugna...

3.5CVSS5.6AI score0.00077EPSS
Exploits0References10
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2022-42491

Malicious code in bioql PyPI...

8.6CVSS7.6AI score0.00325EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2025/09/02 12:0 a.m.1 views

Linux Distros Unpatched Vulnerability : CVE-2020-7020

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Elasticsearch versions before 6.8.13 and 7.9.2 contain a document disclosure flaw when Document or Field Level Security is used. Search queries do not properly...

3.5CVSS6.1AI score0.00077EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/08/27 12:0 a.m.0 views

Apollo Federation 安全漏洞

Apollo Federation is an architecture for the Apollo community to declaratively combine APIs into a unified graph. A security vulnerability exists in Apollo Federation, which stems from the fact that if @apollo/query-planner is asked to plan a sufficiently complex query, it may loop indefinitely a...

7.5CVSS6.5AI score0.00187EPSS
Exploits1References4
OSV
OSV
added 2024/06/17 7:17 a.m.21 views

BIT-ELK-2024-37279 Kibana Broken Access Control issue

A flaw was discovered in Kibana, allowing view-only users of alerting to use the runsoon API making the alerting rule run continuously, potentially affecting the system availability if the alerting rule is running complex queries...

4.3CVSS4.3AI score0.00124EPSS
Exploits0References2
Rows per page
Query Builder