Поиск уязвимостей
Количество 10
Количество 10
BDU:2024-09752
Уязвимость сервера системы управления базами данных MongoDB, связанная с неправильной нейтрализацией нулевых байтов при обработке данных BSON формата, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации или вызвать отказ в обслуживании
ALT-PU-2024-16107
ALT-PU-2024-16107: package `mongo6.0` update to version 6.0.19-alt0.p10.1
ALT-PU-2024-16066
ALT-PU-2024-16066: package `mongo7.0` update to version 7.0.15-alt1
ALT-PU-2024-16032
ALT-PU-2024-16032: package `mongo6.0` update to version 6.0.19-alt1
ALT-PU-2024-16016
ALT-PU-2024-16016: package `mongo5.0` update to version 5.0.30-alt0.p10.1
ALT-PU-2024-15966
ALT-PU-2024-15966: package `mongo5.0` update to version 5.0.30-alt1
CVE-2024-10921
An authorized user may trigger crashes or receive the contents of buffer over-reads of Server memory by issuing specially crafted requests that construct malformed BSON in the MongoDB Server. This issue affects MongoDB Server v5.0 versions prior to 5.0.30 , MongoDB Server v6.0 versions prior to 6.0.19, MongoDB Server v7.0 versions prior to 7.0.15 and MongoDB Server v8.0 versions prior to and including 8.0.2.
CVE-2024-10921
An authorized user may trigger crashes or receive the contents of buffer over-reads of Server memory by issuing specially crafted requests that construct malformed BSON in the MongoDB Server. This issue affects MongoDB Server v5.0 versions prior to 5.0.30 , MongoDB Server v6.0 versions prior to 6.0.19, MongoDB Server v7.0 versions prior to 7.0.15 and MongoDB Server v8.0 versions prior to and including 8.0.2.
CVE-2024-10921
An authorized user may trigger crashes or receive the contents of buff ...
GHSA-rvjg-858g-pwh4
An authorized user may trigger crashes or receive the contents of buffer over-reads of Server memory by issuing specially crafted requests that construct malformed BSON in the MongoDB Server. This issue affects MongoDB Server v5.0 versions prior to 5.0.30 , MongoDB Server v6.0 versions prior to 6.0.19, MongoDB Server v7.0 versions prior to 7.0.15 and MongoDB Server v8.0 versions prior to and including 8.0.2.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2024-09752 Уязвимость сервера системы управления базами данных MongoDB, связанная с неправильной нейтрализацией нулевых байтов при обработке данных BSON формата, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации или вызвать отказ в обслуживании | CVSS3: 6.8 | 1% Низкий | около 2 лет назад |
| ALT-PU-2024-16107 ALT-PU-2024-16107: package `mongo6.0` update to version 6.0.19-alt0.p10.1 | CVSS3: 8.1 | почти 2 года назад | |
| ALT-PU-2024-16066 ALT-PU-2024-16066: package `mongo7.0` update to version 7.0.15-alt1 | CVSS3: 8.1 | почти 2 года назад | |
| ALT-PU-2024-16032 ALT-PU-2024-16032: package `mongo6.0` update to version 6.0.19-alt1 | CVSS3: 8.1 | почти 2 года назад | |
| ALT-PU-2024-16016 ALT-PU-2024-16016: package `mongo5.0` update to version 5.0.30-alt0.p10.1 | CVSS3: 8.1 | почти 2 года назад | |
| ALT-PU-2024-15966 ALT-PU-2024-15966: package `mongo5.0` update to version 5.0.30-alt1 | CVSS3: 8.1 | почти 2 года назад | |
 | CVE-2024-10921 An authorized user may trigger crashes or receive the contents of buffer over-reads of Server memory by issuing specially crafted requests that construct malformed BSON in the MongoDB Server. This issue affects MongoDB Server v5.0 versions prior to 5.0.30 , MongoDB Server v6.0 versions prior to 6.0.19, MongoDB Server v7.0 versions prior to 7.0.15 and MongoDB Server v8.0 versions prior to and including 8.0.2. | CVSS3: 8.1 | 1% Низкий | почти 2 года назад |
 | CVE-2024-10921 An authorized user may trigger crashes or receive the contents of buffer over-reads of Server memory by issuing specially crafted requests that construct malformed BSON in the MongoDB Server. This issue affects MongoDB Server v5.0 versions prior to 5.0.30 , MongoDB Server v6.0 versions prior to 6.0.19, MongoDB Server v7.0 versions prior to 7.0.15 and MongoDB Server v8.0 versions prior to and including 8.0.2. | CVSS3: 8.1 | 1% Низкий | почти 2 года назад |
| CVE-2024-10921 An authorized user may trigger crashes or receive the contents of buff ... | CVSS3: 8.1 | 1% Низкий | почти 2 года назад |
| GHSA-rvjg-858g-pwh4 An authorized user may trigger crashes or receive the contents of buffer over-reads of Server memory by issuing specially crafted requests that construct malformed BSON in the MongoDB Server. This issue affects MongoDB Server v5.0 versions prior to 5.0.30 , MongoDB Server v6.0 versions prior to 6.0.19, MongoDB Server v7.0 versions prior to 7.0.15 and MongoDB Server v8.0 versions prior to and including 8.0.2. | CVSS3: 6.8 | 1% Низкий | почти 2 года назад |
Уязвимостей на страницу