Lucene search
K

25 matches found

Tenable Nessus
Tenable Nessus
added 2026/02/13 12:0 a.m.2 views

FreeBSD : MongoDB Server -- CWE-617 Reachable Assertion (7b5671f9-0800-11f1-8a6f-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 7b5671f9-0800-11f1-8a6f-b42e991fc52e advisory. https://jira.mongodb.org/browse/SERVER-99119 reports: An authorized user may trigger a server crash by...

7.1CVSS5.5AI score0.00077EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2026/02/12 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2026-25610

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An authorized user may trigger a server crash by running a $geoNear pipeline with certain invalid index hints. CVE-2026-25610 Note that Nessus relies on the...

7.1CVSS5.5AI score0.00077EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2026/02/11 7:44 p.m.1 views

CVE-2026-25610

An authorized user may trigger a server crash by running a $geoNear pipeline with certain invalid index hints...

7.1CVSS5.4AI score0.00077EPSS
Exploits0References1
NVD
NVD
added 2026/02/10 7:16 p.m.3 views

CVE-2026-25610

An authorized user may trigger a server crash by running a $geoNear pipeline with certain invalid index hints...

7.1CVSS0.00077EPSS
Exploits0References1
UbuntuCve
UbuntuCve
added 2026/02/10 7:16 p.m.2 views

CVE-2026-25610

An authorized user may trigger a server crash by running a $geoNear pipeline with certain invalid index hints...

7.1CVSS5.8AI score0.00077EPSS
Exploits0References2
OSV
OSV
added 2026/02/10 7:16 p.m.2 views

UBUNTU-CVE-2026-25610

An authorized user may trigger a server crash by running a $geoNear pipeline with certain invalid index hints...

7.1CVSS5.8AI score0.00077EPSS
Exploits0References3
CVE
CVE
added 2026/02/10 6:30 p.m.10 views

CVE-2026-25610

CVE-2026-25610 : An authorized user may trigger a server crash by running a $geoNear pipeline with certain invalid index hints. The issue is documented with CVSS v3.1 metrics (AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H; base score 6.5) and CVSS v4.0 metrics (AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/SC:N/VI:N/SI:N/...

7.1CVSS5.4AI score0.00077EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2026/02/10 6:30 p.m.2 views

CVE-2026-25610 Invalid $geoNear index hint may cause server crash

An authorized user may trigger a server crash by running a $geoNear pipeline with certain invalid index hints...

7.1CVSS5.4AI score0.00077EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/02/10 6:30 p.m.20 views

CVE-2026-25610 Invalid $geoNear index hint may cause server crash

An authorized user may trigger a server crash by running a $geoNear pipeline with certain invalid index hints...

7.1CVSS0.00077EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/02/10 6:30 p.m.4 views

CVE-2026-25610

An authorized user may trigger a server crash by running a $geoNear pipeline with certain invalid index hints...

7.1CVSS5.4AI score0.00077EPSS
Exploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2026/02/10 12:0 a.m.3 views

PT-2026-7432

Name of the Vulnerable Software and Affected Versions MongoDB affected versions not specified Description An authorized user can cause a server crash by executing a $geoNear pipeline with specific invalid index hints. The issue involves the use of incorrect index hints within the $geoNear...

7.1CVSS5.2AI score0.00077EPSS
Exploits0References7
CNNVD
CNNVD
added 2026/02/10 12:0 a.m.4 views

MongoDB Server 安全漏洞

MongoDB Server is an open-source NoSQL database developed by MongoDB, a company based in the United States. This database offers features such as collection-oriented storage, dynamic querying, data replication, and automatic failover. There is a security vulnerability in MongoDB Server, which ste...

7.1CVSS5.8AI score0.00077EPSS
Exploits0References2
FreeBSD
FreeBSD
added 2026/02/10 12:0 a.m.3 views

MongoDB Server -- CWE-617 Reachable Assertion

https://jira.mongodb.org/browse/SERVER-99119 reports: An authorized user may trigger a server crash by running a $geoNear pipeline with certain invalid index hints...

7.1CVSS5.5AI score0.00077EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2020-28854

Malware in sbrugna...

6.5CVSS6.3AI score0.00441EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2025/09/02 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2020-7923

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A user authorized to perform database queries may cause denial of service by issuing specially crafted queries, which violate an invariant in the query...

6.5CVSS6.2AI score0.00441EPSS
Exploits0References2
OSV
OSV
added 2024/03/06 10:59 a.m.15 views

BIT-MONGODB-2020-7923 Specific GeoQuery can cause DoS against MongoDB Server

A user authorized to perform database queries may cause denial of service by issuing specially crafted queries, which violate an invariant in the query subsystem's support for geoNear. This issue affects MongoDB Server v4.4 versions prior to 4.4.0; MongoDB Server v4.2 versions prior to 4.2.8 and...

6.5CVSS6.6AI score0.00441EPSS
Exploits0References2
OSV
OSV
added 2021/04/12 7:59 p.m.5 views

MGASA-2021-0177 Updated mongodb packages fix security vulnerability

A denial of service vulnerability was discovered in mongodb whereby a user authorized to perform database queries may issue specially crafted queries, which violate an invariant in the query subsystem's support for geoNear CVE-2020-7923...

6.5CVSS6.3AI score0.00441EPSS
Exploits0References3
Mageia
Mageia
added 2021/04/12 7:59 p.m.30 views

Updated mongodb packages fix security vulnerability

A denial of service vulnerability was discovered in mongodb whereby a user authorized to perform database queries may issue specially crafted queries, which violate an invariant in the query subsystem's support for geoNear CVE-2020-7923...

6.5CVSS2.7AI score0.00441EPSS
Exploits0References2
IBM Security Bulletins
IBM Security Bulletins
added 2021/02/26 2:56 p.m.17 views

Security Bulletin: IBM Cloud Private is vulnerable to a MongoDB vulnerability (CVE-2020-7923)

Summary IBM Cloud Private is vulnerable to a MongoDB vulnerability Vulnerability Details CVEID: CVE-2020-7923 DESCRIPTION: MongoDB is vulnerable to a denial of service, caused by a flaw in geoNear invariant. By sending specially crafted queries, a remote authenticated attacker could exploit this...

6.5CVSS1.2AI score0.00441EPSS
Exploits0Affected Software1
RedhatCVE
RedhatCVE
added 2020/08/21 7:45 p.m.19 views

CVE-2020-7923

A flaw was found in mongodb. A user authorized to perform database queries may cause denial of service by issuing specially crafted queries, which violate an invariant in the query subsystem's support for geoNear. The highest threat from this vulnerability is to system availability...

4CVSS2.1AI score0.00441EPSS
Exploits0References3
Rows per page
Query Builder