6081 matches found
MongoDB 任意代码执行漏洞(CVE-2013-4142)
CVE ID:CVE-2013-4142 MongoDB是一个高性能，开源，无模式的文档型数据库，是当前NoSql数据库中比较热门的一种 MongoDB "mongo::mongoFind"函数src/mongo/scripting/v8db.cpp在解析规则表达式时存在一个安全漏洞，允许对MongoDB数据库进行读写访问的用户执行任意代码，拥有只读访问权限的用户可使数据库崩溃。目前还不确定是否是2.2.3版本引入使用的V8 JavaScript引擎而引起的问题 0 MongoDB 2.4.0-2.4.4 厂商解决方案 MongoDB 2.4.5或2.5.1已经修复此漏洞，建议用户下载更...
MongoDB < 2.4.5 / 2.5.1 Multiple Vulnerabilities
The version of the remote MongoDB server is a version prior to version 2.4.5 / 2.5.1. It is, therefore, potentially affected by the following vulnerabilities : - A remote attacker can gain elevated privileges when authenticating as the internal system user name for arbitrary databases...
53KF-MongoDB数据库弱口令可远程直接查询库内数据
简要描述： 不需要认证，可以直接连接，操作MongoDB 详细说明： 没有做认证，导致可以直接操纵库 漏洞证明： 未做验证的ip: 60.12.147.151 221.12.88.75 122.227.58.188...
MongoDB 2.5.x/2.4.x 权限提升漏洞
CVECAN ID: CVE-2013-4650 MongoDB是用C++编写的开源文档数据库 MongoDB 2.4.x、2.5.x可允许经过身份验证的远程用户通过任意数据库内、system的用户名获取内部系统权限 0 MongoDB 2.5.x MongoDB 2.4.x 厂商补丁： MongoDB ------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.mongodb.org/...
Moderate: Red Hat Enhancement Advisory: Red Hat OpenShift Enterprise 1.2 Infrastructure Release Advisory
Red Hat OpenShift Enterprise 1.2 is now available which fixes several bugs and introduces feature enhancements. OpenShift Enterprise is a cloud computing Platform-as-a-Service PaaS solution from Red Hat, and is designed for on-premise or private cloud deployments. The OpenShift Enterprise 1.2...
MGASA-2013-0201 Updated python-pymongo packages fix CVE-2013-2132
PyMongo before 2.5.2 is prone to a denial-of-service vulnerability. An attacker can remotely trigger a NULL pointer dereference causing MongoDB to crash CVE-2013-2132...
Updated python-pymongo packages fix CVE-2013-2132
PyMongo before 2.5.2 is prone to a denial-of-service vulnerability. An attacker can remotely trigger a NULL pointer dereference causing MongoDB to crash CVE-2013-2132...
CVE-2013-4650
MongoDB 2.4.x before 2.4.5 and 2.5.x before 2.5.1 allows remote authenticated users to obtain internal system privileges by leveraging a username of system in an arbitrary database...
CVE-2013-4650
MongoDB 2.4.x before 2.4.5 and 2.5.x before 2.5.1 allows remote authenticated users to obtain internal system privileges by leveraging a username of system in an arbitrary database...
Code injection
MongoDB 2.4.x before 2.4.5 and 2.5.x before 2.5.1 allows remote authenticated users to obtain internal system privileges by leveraging a username of system in an arbitrary database...
UBUNTU-CVE-2013-4650
MongoDB 2.4.x before 2.4.5 and 2.5.x before 2.5.1 allows remote authenticated users to obtain internal system privileges by leveraging a username of system in an arbitrary database...
CVE-2013-4650
MongoDB versions affected are 2.4.x before 2.4.5 and 2.5.x before 2.5.1. The issue allows remote authenticated users to obtain internal system privileges by using the __system username in an arbitrary database. This is a privilege-escalation vulnerability with impact as described in the sources. ...
CVE-2013-4650
MongoDB 2.4.x before 2.4.5 and 2.5.x before 2.5.1 allows remote authenticated users to obtain internal system privileges by leveraging a username of system in an arbitrary database...
CVE-2013-4650
MongoDB 2.4.x before 2.4.5 and 2.5.x before 2.5.1 allows remote authenticated users to obtain internal system privileges by leveraging a username of system in an arbitrary database...
CVE-2013-4650
Removed by vendor...
CVE-2013-4650: Undefined Security Weakness
MongoDB 2.4.x before 2.4.5 and 2.5.x before 2.5.1 allows remote authenticated users to obtain internal system privileges by leveraging a username of system in an arbitrary database...
PT-2013-5114
Name of the Vulnerable Software and Affected Versions MongoDB versions 2.4.x through 2.4.4 MongoDB versions 2.5.x through 2.5.0 Description The issue allows remote authenticated users to obtain internal system privileges by leveraging a username of system in an arbitrary database. Recommendations...
USN-1897-1: PyMongo vulnerability
Jibbers McGee discovered that PyMongo incorrectly handled certain invalid DBRefs. An attacker could use this issue to cause PyMongo to crash, resulting in a denial of service...
Debian Security Advisory DSA 2705-1 (pymongo - denial of service)
Jibbers McGee discovered that PyMongo, a high-performance schema-free document-oriented data store, is prone to a denial-of-service vulnerability. An attacker can remotely trigger a NULL pointer dereference causing MongoDB to crash. The oldstable distribution squeeze is not affected by this issue...