Lucene search
+L

6079 matches found

CVE
CVE
•added 2021/05/13 7:40 a.m.•80 views

CVE-2021-20331

CVE-2021-20331 affects the MongoDB C# Driver versions 2.12.x up to and including 2.12.1. Root cause: when an application enables the command listener, certain authentication-related events (saslStart, saslContinue, isMaster, createUser, updateUser) may be published and may contain sensitive data....

4.9CVSS4.8AI score0.00623EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2021/05/13 7:40 a.m.•45 views

CVE-2021-20331 MongoDB C# Driver may publish events containing authentication-related data to a command listener configured by an application

Specific versions of the MongoDB C Driver may erroneously publish events containing authentication-related data to a command listener configured by an application. The published events may contain security-sensitive data when commands such as "saslStart", "saslContinue", "isMaster", "createUser",...

4.2CVSS5.6AI score0.00623EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/05/13 12:00 a.m.•24 views

PT-2021-13890 · Mongodb · Mongodb C Driver

Name of the Vulnerable Software and Affected Versions: MongoDB C Driver versions 2.12.0 through 2.12.1 Description: The MongoDB C Driver may erroneously publish events containing authentication-related data to a command listener configured by an application. The published events may contain...

4.9CVSS7.5AI score0.00623EPSS
SaveExploits0References7
CNNVD
CNNVD
•added 2021/05/13 12:00 a.m.•16 views

Mongodb Server 信息泄露漏洞

MongoDB is a document-oriented database management system from the American company MongoDB. An information disclosure vulnerability exists in MongoDB C Driver versions 2.12 through 2.12.1. The vulnerability stems from the fact that events published by the program may contain security-sensitive...

4.9CVSS5.3AI score0.00623EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/05/13 12:00 a.m.•5 views

CVE-2021-20331: Exposure of Sensitive Information to an Unauthorized Actor

Specific versions of the MongoDB C Driver may erroneously publish events containing authentication-related data to a command listener configured by an application. The published events may contain security-sensitive data when commands such as "saslStart", "saslContinue", "isMaster", "createUser",...

4.9CVSS5.8AI score0.00623EPSS
SaveExploits0References3
Hacker One
Hacker One
•added 2021/05/04 2:01 p.m.•139 views

Sifchain: mongodb credentials leaked in github

Steps To Reproduce: add details for how we can reproduce the issue 1. Go to values.yaml file file. 2.Check from line 23: blockExplorer: args: mongoUsername: "mongodb" mongoPassword: mongoDatabase: "blockexplorer" env: rootURL: "http://localhost:3000" chainnet: "" genesisURL: "" remote: rpcURL: ""...

6.8AI score
SaveExploits0
OpenVAS
OpenVAS
•added 2021/05/04 12:00 a.m.•46 views

MongoDB DoS Vulnerability (SERVER-53929) - Linux

MongoDB is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mongodb:mongodb"; if...

6.5CVSS6.3AI score0.00948EPSS
SaveExploits0References1
OpenVAS
OpenVAS
•added 2021/05/04 12:00 a.m.•24 views

MongoDB DoS Vulnerability (SERVER-53929) - Windows

MongoDB is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mongodb:mongodb"; if...

6.5CVSS6.3AI score0.00948EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2021/04/30 9:58 p.m.•27 views

CVE-2021-20326

A flaw was found in MongoDB. A user authorized to performing a specific type of "find" query could use this flaw to trigger a denial of service. The highest threat from this vulnerability is to system availability...

6.5CVSS2AI score0.00948EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2021/04/30 4:00 p.m.•17 views

CVE-2021-20326

A user authorized to performing a specific type of find query may trigger a denial of service. This issue affects MongoDB Server v4.4 versions prior to 4.4.4...

6.5CVSS6.5AI score0.00948EPSS
SaveExploits0References2Affected Software1
NVD
NVD
•added 2021/04/30 9:15 a.m.•23 views

CVE-2021-20326

A user authorized to performing a specific type of find query may trigger a denial of service. This issue affects MongoDB Server v4.4 versions prior to 4.4.4...

6.5CVSS0.00948EPSS
SaveExploits0References1
OSV
OSV
•added 2021/04/30 9:15 a.m.•27 views

CVE-2021-20326

A user authorized to performing a specific type of find query may trigger a denial of service. This issue affects MongoDB Server v4.4 versions prior to 4.4.4...

6.5CVSS6.2AI score
SaveExploits0References1
OSV
OSV
•added 2021/04/30 9:15 a.m.•16 views

UBUNTU-CVE-2021-20326

A user authorized to performing a specific type of find query may trigger a denial of service. This issue affects MongoDB Server v4.4 versions prior to 4.4.4...

6.5CVSS5.8AI score0.00948EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
•added 2021/04/30 9:15 a.m.•30 views

CVE-2021-20326

A user authorized to performing a specific type of find query may trigger a denial of service. This issue affects MongoDB Server v4.4 versions prior to 4.4.4...

6.5CVSS6.6AI score0.00948EPSS
SaveExploits0References2
Prion
Prion
•added 2021/04/30 9:15 a.m.•21 views

Denial of service

A user authorized to performing a specific type of find query may trigger a denial of service. This issue affects MongoDB Server v4.4 versions prior to 4.4.4...

4CVSS6.2AI score0.00948EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2021/04/30 9:10 a.m.•36 views

CVE-2021-20326 Specially crafted query may result in a denial of service of mongod

A user authorized to performing a specific type of find query may trigger a denial of service. This issue affects MongoDB Server v4.4 versions prior to 4.4.4...

6.5CVSS6.5AI score0.00948EPSS
SaveExploits0References1
Mend
Mend
•added 2021/04/30 9:10 a.m.•3 views

CVE-2021-20326

A user authorized to performing a specific type of find query may trigger a denial of service. This issue affects MongoDB Server v4.4 versions prior to 4.4.4...

7.1CVSS0.00948EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2021/04/30 9:10 a.m.•13 views

CVE-2021-20326 Specially crafted query may result in a denial of service of mongod

A user authorized to performing a specific type of find query may trigger a denial of service. This issue affects MongoDB Server v4.4 versions prior to 4.4.4...

6.5CVSS6.6AI score0.00948EPSS
SaveExploits0References1
CVE
CVE
•added 2021/04/30 9:10 a.m.•338 views

CVE-2021-20326

MongoDB Server v4.4.x prior to 4.4.4 is affected: an authenticated user performing a specific find query can trigger a denial of service, impacting availability. Connected documents confirm the issue but do not provide exploitation details or patch information; monitor for updates.

6.5CVSS6.2AI score0.00948EPSS
SaveExploits0References1Affected Software1
Debian CVE
Debian CVE
•added 2021/04/30 9:10 a.m.•32 views

CVE-2021-20326

Removed by vendor...

6.5CVSS6.5AI score0.00948EPSS
SaveExploits0
Rows per page
Query Builder