Поиск уязвимостей
Количество 15
Количество 15
GHSA-9pjr-27w4-fm42
An authenticated user may trigger a use after free that may result in MongoDB Server crash and other unexpected behavior, even if the user does not have authorization to shut down a server. The crash is triggered on affected versions by issuing an aggregation framework operation using a specific combination of rarely-used aggregation pipeline expressions. This issue affects MongoDB Server v6.0 version prior to 6.0.21, MongoDB Server v7.0 version prior to 7.0.17 and MongoDB Server v8.0 version prior to 8.0.4 when the SBE engine is enabled.
CVE-2025-6706
An authenticated user may trigger a use after free that may result in MongoDB Server crash and other unexpected behavior, even if the user does not have authorization to shut down a server. The crash is triggered on affected versions by issuing an aggregation framework operation using a specific combination of rarely-used aggregation pipeline expressions. This issue affects MongoDB Server v6.0 version prior to 6.0.21, MongoDB Server v7.0 version prior to 7.0.17 and MongoDB Server v8.0 version prior to 8.0.4 when the SBE engine is enabled.
CVE-2025-6706
An authenticated user may trigger a use after free that may result in MongoDB Server crash and other unexpected behavior, even if the user does not have authorization to shut down a server. The crash is triggered on affected versions by issuing an aggregation framework operation using a specific combination of rarely-used aggregation pipeline expressions. This issue affects MongoDB Server v6.0 version prior to 6.0.21, MongoDB Server v7.0 version prior to 7.0.17 and MongoDB Server v8.0 version prior to 8.0.4 when the SBE engine is enabled.
CVE-2025-6706
An authenticated user may trigger a use after free that may result in ...
BDU:2025-11758
Уязвимость системы управления базами данных MongoDB, связанная с использованием памяти после освобождения, позволяющая нарушителю вызвать отказ в обслуживании
ALT-PU-2024-17932
ALT-PU-2024-17932: package `mongo8.0` update to version 8.0.4-alt1
ALT-PU-2025-8810
ALT-PU-2025-8810: package `mongo8.0` update to version 8.0.11-alt1
ROS-20250806-09
Множественные уязвимости mongodb-org
ROS-20250806-08
Множественные уязвимости mongodb-org
ALT-PU-2025-5545
ALT-PU-2025-5545: package `mongo6.0` update to version 6.0.21-alt0.p10.1
ALT-PU-2025-5420
ALT-PU-2025-5420: package `mongo6.0` update to version 6.0.21-alt1
ALT-PU-2025-9809
ALT-PU-2025-9809: package `mongo6.0` update to version 6.0.25-alt0.p10.1
ALT-PU-2025-9742
ALT-PU-2025-9742: package `mongo6.0` update to version 6.0.25-alt1
ALT-PU-2025-9750
ALT-PU-2025-9750: package `mongo7.0` update to version 7.0.22-alt1
ALT-PU-2025-5457
ALT-PU-2025-5457: package `mongo7.0` update to version 7.0.18-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-9pjr-27w4-fm42 An authenticated user may trigger a use after free that may result in MongoDB Server crash and other unexpected behavior, even if the user does not have authorization to shut down a server. The crash is triggered on affected versions by issuing an aggregation framework operation using a specific combination of rarely-used aggregation pipeline expressions. This issue affects MongoDB Server v6.0 version prior to 6.0.21, MongoDB Server v7.0 version prior to 7.0.17 and MongoDB Server v8.0 version prior to 8.0.4 when the SBE engine is enabled. | CVSS3: 5 | 0% Низкий | больше 1 года назад |
 | CVE-2025-6706 An authenticated user may trigger a use after free that may result in MongoDB Server crash and other unexpected behavior, even if the user does not have authorization to shut down a server. The crash is triggered on affected versions by issuing an aggregation framework operation using a specific combination of rarely-used aggregation pipeline expressions. This issue affects MongoDB Server v6.0 version prior to 6.0.21, MongoDB Server v7.0 version prior to 7.0.17 and MongoDB Server v8.0 version prior to 8.0.4 when the SBE engine is enabled. | CVSS3: 8.8 | 0% Низкий | больше 1 года назад |
 | CVE-2025-6706 An authenticated user may trigger a use after free that may result in MongoDB Server crash and other unexpected behavior, even if the user does not have authorization to shut down a server. The crash is triggered on affected versions by issuing an aggregation framework operation using a specific combination of rarely-used aggregation pipeline expressions. This issue affects MongoDB Server v6.0 version prior to 6.0.21, MongoDB Server v7.0 version prior to 7.0.17 and MongoDB Server v8.0 version prior to 8.0.4 when the SBE engine is enabled. | CVSS3: 8.8 | 0% Низкий | больше 1 года назад |
| CVE-2025-6706 An authenticated user may trigger a use after free that may result in ... | CVSS3: 8.8 | 0% Низкий | больше 1 года назад |
 | BDU:2025-11758 Уязвимость системы управления базами данных MongoDB, связанная с использованием памяти после освобождения, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 5 | 0% Низкий | больше 1 года назад |
| ALT-PU-2024-17932 ALT-PU-2024-17932: package `mongo8.0` update to version 8.0.4-alt1 | CVSS3: 9.8 | почти 2 года назад | |
| ALT-PU-2025-8810 ALT-PU-2025-8810: package `mongo8.0` update to version 8.0.11-alt1 | CVSS3: 8.8 | больше 1 года назад | |
 | ROS-20250806-09 Множественные уязвимости mongodb-org | CVSS3: 7.7 | больше 1 года назад | |
| ROS-20250806-08 Множественные уязвимости mongodb-org | CVSS3: 7.7 | больше 1 года назад | |
| ALT-PU-2025-5545 ALT-PU-2025-5545: package `mongo6.0` update to version 6.0.21-alt0.p10.1 | CVSS3: 9.8 | больше 1 года назад | |
| ALT-PU-2025-5420 ALT-PU-2025-5420: package `mongo6.0` update to version 6.0.21-alt1 | CVSS3: 9.8 | больше 1 года назад | |
| ALT-PU-2025-9809 ALT-PU-2025-9809: package `mongo6.0` update to version 6.0.25-alt0.p10.1 | CVSS3: 8.8 | больше 1 года назад | |
| ALT-PU-2025-9742 ALT-PU-2025-9742: package `mongo6.0` update to version 6.0.25-alt1 | CVSS3: 8.8 | больше 1 года назад | |
| ALT-PU-2025-9750 ALT-PU-2025-9750: package `mongo7.0` update to version 7.0.22-alt1 | CVSS3: 8.8 | больше 1 года назад | |
| ALT-PU-2025-5457 ALT-PU-2025-5457: package `mongo7.0` update to version 7.0.18-alt1 | CVSS3: 9.8 | больше 1 года назад |
Уязвимостей на страницу