25 matches found
FreeBSD : MongoDB Server -- CWE-617 Reachable Assertion (7b5671f9-0800-11f1-8a6f-b42e991fc52e)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 7b5671f9-0800-11f1-8a6f-b42e991fc52e advisory. https://jira.mongodb.org/browse/SERVER-99119 reports: An authorized user may trigger a server crash by...
Linux Distros Unpatched Vulnerability : CVE-2026-25610
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An authorized user may trigger a server crash by running a $geoNear pipeline with certain invalid index hints. CVE-2026-25610 Note that Nessus relies on the...
CVE-2026-25610
An authorized user may trigger a server crash by running a $geoNear pipeline with certain invalid index hints...
CVE-2026-25610
An authorized user may trigger a server crash by running a $geoNear pipeline with certain invalid index hints...
CVE-2026-25610
An authorized user may trigger a server crash by running a $geoNear pipeline with certain invalid index hints...
UBUNTU-CVE-2026-25610
An authorized user may trigger a server crash by running a $geoNear pipeline with certain invalid index hints...
CVE-2026-25610
CVE-2026-25610 : An authorized user may trigger a server crash by running a $geoNear pipeline with certain invalid index hints. The issue is documented with CVSS v3.1 metrics (AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H; base score 6.5) and CVSS v4.0 metrics (AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/SC:N/VI:N/SI:N/...
CVE-2026-25610 Invalid $geoNear index hint may cause server crash
An authorized user may trigger a server crash by running a $geoNear pipeline with certain invalid index hints...
CVE-2026-25610 Invalid $geoNear index hint may cause server crash
An authorized user may trigger a server crash by running a $geoNear pipeline with certain invalid index hints...
CVE-2026-25610
An authorized user may trigger a server crash by running a $geoNear pipeline with certain invalid index hints...
PT-2026-7432
Name of the Vulnerable Software and Affected Versions MongoDB affected versions not specified Description An authorized user can cause a server crash by executing a $geoNear pipeline with specific invalid index hints. The issue involves the use of incorrect index hints within the $geoNear...
MongoDB Server 安全漏洞
MongoDB Server is an open-source NoSQL database developed by MongoDB, a company based in the United States. This database offers features such as collection-oriented storage, dynamic querying, data replication, and automatic failover. There is a security vulnerability in MongoDB Server, which ste...
MongoDB Server -- CWE-617 Reachable Assertion
https://jira.mongodb.org/browse/SERVER-99119 reports: An authorized user may trigger a server crash by running a $geoNear pipeline with certain invalid index hints...
EUVD-2020-28854
Malware in sbrugna...
Linux Distros Unpatched Vulnerability : CVE-2020-7923
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A user authorized to perform database queries may cause denial of service by issuing specially crafted queries, which violate an invariant in the query...
BIT-MONGODB-2020-7923 Specific GeoQuery can cause DoS against MongoDB Server
A user authorized to perform database queries may cause denial of service by issuing specially crafted queries, which violate an invariant in the query subsystem's support for geoNear. This issue affects MongoDB Server v4.4 versions prior to 4.4.0; MongoDB Server v4.2 versions prior to 4.2.8 and...
MGASA-2021-0177 Updated mongodb packages fix security vulnerability
A denial of service vulnerability was discovered in mongodb whereby a user authorized to perform database queries may issue specially crafted queries, which violate an invariant in the query subsystem's support for geoNear CVE-2020-7923...
Updated mongodb packages fix security vulnerability
A denial of service vulnerability was discovered in mongodb whereby a user authorized to perform database queries may issue specially crafted queries, which violate an invariant in the query subsystem's support for geoNear CVE-2020-7923...
Security Bulletin: IBM Cloud Private is vulnerable to a MongoDB vulnerability (CVE-2020-7923)
Summary IBM Cloud Private is vulnerable to a MongoDB vulnerability Vulnerability Details CVEID: CVE-2020-7923 DESCRIPTION: MongoDB is vulnerable to a denial of service, caused by a flaw in geoNear invariant. By sending specially crafted queries, a remote authenticated attacker could exploit this...
CVE-2020-7923
A flaw was found in mongodb. A user authorized to perform database queries may cause denial of service by issuing specially crafted queries, which violate an invariant in the query subsystem's support for geoNear. The highest threat from this vulnerability is to system availability...