Lucene search
K

12 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2025-9312

Malicious code in bioql PyPI...

6.5CVSS6.3AI score0.00294EPSS
Exploits0References2
OSV
OSV
added 2025/09/25 8:47 a.m.2 views

BIT-MONGODB-2025-3084 MongoDB Server may crash due to improper validation of explain command

When run on commands with certain arguments set, explain may fail to validate these arguments before using them. This can lead to crashes in router servers. This affects MongoDB Server v5.0 prior to 5.0.31, MongoDB Server v6.0 prior to 6.0.20, MongoDB Server v7.0 prior to 7.0.16 and MongoDB Serve...

6.5CVSS7.1AI score0.00294EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/04/04 12:0 a.m.7 views

FreeBSD : MongoDB -- crash due to improper validation of explain command (350b3389-107f-11f0-8195-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 350b3389-107f-11f0-8195-b42e991fc52e advisory. [email protected] reports: When run on commands with certain arguments set, explain may fail to validate...

6.5CVSS5.6AI score0.00294EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2025/04/01 11:14 a.m.6 views

CVE-2025-3084 MongoDB Server may crash due to improper validation of explain command

When run on commands with certain arguments set, explain may fail to validate these arguments before using them. This can lead to crashes in router servers. This affects MongoDB Server v5.0 prior to 5.0.31, MongoDB Server v6.0 prior to 6.0.20, MongoDB Server v7.0 prior to 7.0.16 and MongoDB Serve...

6.5CVSS7.2AI score0.00294EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/04/01 11:14 a.m.29 views

CVE-2025-3084 MongoDB Server may crash due to improper validation of explain command

When run on commands with certain arguments set, explain may fail to validate these arguments before using them. This can lead to crashes in router servers. This affects MongoDB Server v5.0 prior to 5.0.31, MongoDB Server v6.0 prior to 6.0.20, MongoDB Server v7.0 prior to 7.0.16 and MongoDB Serve...

6.5CVSS0.00294EPSS
Exploits0References1
CVE
CVE
added 2025/04/01 11:14 a.m.69 views

CVE-2025-3084

CVE-2025-3084 affects MongoDB Server: 5.0 before 5.0.31, 6.0 before 6.0.20, 7.0 before 7.0.16, and 8.0 before 8.0.4. The root cause is improper validation of parameters for the explain command, which may be used to crash router servers. Impact is denial of service / crash (availability impact). R...

6.5CVSS7.2AI score0.00294EPSS
Exploits0References1Affected Software1
MongoDB
MongoDB
added 2025/04/01 9:8 a.m.25 views

MongoDB Server may crash due to improper validation of explain command

When run on commands with certain arguments set, explain may fail to validate these arguments before using them. This can lead to crashes in router servers. This affects MongoDB Server v5.0 prior to 5.0.31, MongoDB Server v6.0 prior to 6.0.20, MongoDB Server v7.0 prior to 7.0.16 and MongoDB Serve...

6.5CVSS7.2AI score0.00294EPSS
Exploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2025/04/01 12:0 a.m.2 views

PT-2025-14096

Name of the Vulnerable Software and Affected Versions MongoDB Server versions 5.0 prior to 5.0.31 MongoDB Server versions 6.0 prior to 6.0.20 MongoDB Server versions 7.0 prior to 7.0.16 MongoDB Server versions 8.0 prior to 8.0.4 Description The issue arises when the explain command is run with...

9.8CVSS6.7AI score0.00294EPSS
Exploits0References31
FreeBSD
FreeBSD
added 2025/04/01 12:0 a.m.21 views

MongoDB -- crash due to improper validation of explain command

[email protected] reports: When run on commands with certain arguments set, explain may fail to validate these arguments before using them. This can lead to crashes in router servers. This affects MongoDB Server v5.0 prior to 5.0.31, MongoDB Server v6.0 prior to 6.0.20, MongoDB Server v7.0 prior to...

6.5CVSS6.8AI score0.00294EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2021/03/03 7:47 p.m.14 views

CVE-2018-25004

An improper input validation flaw causing a denial-of-service found in MongoDB. An attacker can perform a specific type of query which issues a generic explain command on a find query causing denial-of-service. The highest threat from this vulnerability is to the system availability...

4.9CVSS2.6AI score0.00437EPSS
Exploits0References4
OpenVAS
OpenVAS
added 2021/03/02 12:0 a.m.6 views

MongoDB DoS Vulnerability (SERVER-38275) - Linux

MongoDB is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mongodb:mongodb"; if...

4.9CVSS5AI score0.00437EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2021/03/01 12:0 a.m.1 views

PT-2021-8843 · Mongodb · Mongodb Server +1

Name of the Vulnerable Software and Affected Versions: MongoDB Server versions prior to 4.0.6 MongoDB Server versions prior to 3.6.11 Description: A user authorized to perform a specific type of query may trigger a denial of service by issuing a generic explain command on a find query...

4.9CVSS7.4AI score0.00437EPSS
Exploits0References11
Rows per page
Query Builder