Lucene search
+L

4076 matches found

CNNVD
CNNVD
added 2026/02/10 12:00 a.m.14 views

MongoDB Server 安全漏洞

MongoDB Server is an open-source NoSQL database developed by MongoDB, a US-based company. This database offers features such as collection-oriented storage, dynamic querying, data replication, and automatic failover. There is a security vulnerability in MongoDB Server, which stems from authorized...

7.1CVSS5.8AI score0.0024EPSS
SaveExploits0References3
GithubExploit
GithubExploit
added 2026/02/07 1:35 a.m.263 views

Exploit for Improper Handling of Length Parameter Inconsistency in Mongodb

MongoBleed CVE-2025-14847 Scanner and Exploitation Toolkit...

8.7CVSS5.9AI score0.83218EPSS
SaveExploits39
Chainguard
Chainguard
added 2026/02/04 7:17 p.m.19 views

CVE-2026-25518 vulnerabilities

Vulnerabilities for packages: cert-manager-cmctl-fips, cert-manager-csi-driver, percona-xtradb-cluster-operator-fips, cert-manager-istio-csr-fips, cert-manager-cmctl, percona-server-mongodb-operator-fips, mariadb-operator, cert-manager-csi-driver-fips, step-issuer-fips,...

5.9CVSS8.4AI score0.00349EPSS
SaveExploits0
Wolfi
Wolfi
added 2026/02/04 1:48 p.m.14 views

CVE-2026-25518 vulnerabilities

Vulnerabilities for packages: cert-manager-csi-driver, mariadb-operator, step-issuer, cert-manager-cmctl, percona-server-mongodb-operator, aws-privateca-issuer, cert-manager-webhook-pdns, cert-manager-istio-csr, opentelemetry-operator...

5.9CVSS8.4AI score0.00349EPSS
SaveExploits0
Wolfi
Wolfi
added 2026/02/03 7:48 p.m.10 views

GHSA-GX3X-VQ4P-MHHV vulnerabilities

Vulnerabilities for packages: cert-manager-csi-driver, mariadb-operator, step-issuer, cert-manager-cmctl, percona-server-mongodb-operator, aws-privateca-issuer, cert-manager-webhook-pdns, cert-manager-istio-csr, opentelemetry-operator...

5.2AI score
SaveExploits0
Chainguard
Chainguard
added 2026/02/03 7:17 p.m.42 views

GHSA-GX3X-VQ4P-MHHV vulnerabilities

Vulnerabilities for packages: cert-manager-cmctl-fips, cert-manager-csi-driver, percona-xtradb-cluster-operator-fips, cert-manager-istio-csr-fips, cert-manager-cmctl, percona-server-mongodb-operator-fips, mariadb-operator, cert-manager-csi-driver-fips, step-issuer-fips,...

5.2AI score
SaveExploits0
The Hacker News
The Hacker News
added 2026/02/02 11:59 a.m.44 views

⚡ Weekly Recap: Proxy Botnet, Office Zero-Day, MongoDB Ransoms, AI Hijacks & New Threats

Every week brings new discoveries, attacks, and defenses that shape the state of cybersecurity. Some threats are stopped quickly, while others go unseen until they cause real damage. Sometimes a single update, exploit, or mistake changes how we think about risk and protection. Every incident show...

9.9CVSS9.5AI score0.94532EPSS
SaveExploits65
Tenable Nessus
Tenable Nessus
added 2026/01/31 12:00 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2025-14911

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - User-controlled chunkSize metadata from MongoDB lacks appropriate validation allowing malformed GridFS metadata to overflow the bounding container. CVE-2025-149...

7.1CVSS6.4AI score0.00286EPSS
SaveExploits0References3
OSV
OSV
added 2026/01/30 4:27 p.m.11 views

CLEANSTART-2026-RG55910 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the mongodb package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

9.8CVSS5.8AI score0.83218EPSS
SaveExploits39References7
OSV
OSV
added 2026/01/30 4:26 p.m.12 views

CLEANSTART-2026-ON55906 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the mongodb package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

9.8CVSS5.6AI score0.83218EPSS
SaveExploits39References7
OSV
OSV
added 2026/01/30 4:25 p.m.8 views

CLEANSTART-2026-RN77098 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the mongodb package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

9.8CVSS5.8AI score0.83218EPSS
SaveExploits39References7
SUSE CVE
SUSE CVE
added 2026/01/30 12:43 a.m.17 views

SUSE CVE-2025-14911

User-controlled chunkSize metadata from MongoDB lacks appropriate validation allowing malformed GridFS metadata to overflow the bounding container...

7.1CVSS5.9AI score0.00286EPSS
SaveExploits0References3
Redos
Redos
added 2026/01/29 12:00 a.m.12 views

ROS-20260129-73-0078

Vulnerability in mongodb-org related to insufficient checking for unusual or exceptional states. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service...

5.9CVSS5.9AI score0.00365EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2026/01/29 12:00 a.m.11 views

Splunk Enterprise 9.2.0 < 9.2.12, 9.3.0 < 9.3.9, 9.4.0 < 9.4.8, 10.0.0 < 10.0.3 (SVD-2026-0101)

The version of Splunk installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the SVD-2026-0101 advisory. - Mismatched length fields in Zlib compressed protocol headers may allow a read of uninitialized heap memory by an...

8.7CVSS8.2AI score0.83218EPSS
SaveExploits39References2
NVD
NVD
added 2026/01/27 6:15 p.m.18 views

CVE-2025-14911

User-controlled chunkSize metadata from MongoDB lacks appropriate validation allowing malformed GridFS metadata to overflow the bounding container...

7.1CVSS0.00286EPSS
SaveExploits0References1
OSV
OSV
added 2026/01/27 6:15 p.m.7 views

DEBIAN-CVE-2025-14911

User-controlled chunkSize metadata from MongoDB lacks appropriate validation allowing malformed GridFS metadata to overflow the bounding container...

7.1CVSS5.3AI score0.00286EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2026/01/27 6:15 p.m.7 views

CVE-2025-14911

User-controlled chunkSize metadata from MongoDB lacks appropriate validation allowing malformed GridFS metadata to overflow the bounding container...

7.1CVSS5.9AI score0.00286EPSS
SaveExploits0References2
OSV
OSV
added 2026/01/27 6:15 p.m.10 views

UBUNTU-CVE-2025-14911

User-controlled chunkSize metadata from MongoDB lacks appropriate validation allowing malformed GridFS metadata to overflow the bounding container...

7.1CVSS5.8AI score0.00286EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/01/27 5:29 p.m.10 views

EUVD-2025-206387

User-controlled chunkSize metadata from MongoDB lacks appropriate validation allowing malformed GridFS metadata to overflow the bounding container...

7.1CVSS5.9AI score0.00286EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/01/27 5:29 p.m.8 views

CVE-2025-14911

User-controlled chunkSize metadata from MongoDB lacks appropriate validation allowing malformed GridFS metadata to overflow the bounding container...

7.1CVSS5.9AI score0.00286EPSS
SaveExploits0References2
Rows per page
Query Builder