Поиск уязвимостей
Количество 32
Количество 32
CVE-2026-6915
An authorization flaw in the user management command could allow an authenticated user to make limited changes to authentication-related data associated with another user account. This could affect how authentication is performed for the impacted account.
CVE-2026-6915
An authorization flaw in the user management command could allow an authenticated user to make limited changes to authentication-related data associated with another user account. This could affect how authentication is performed for the impacted account.
CVE-2026-6915
An authorization flaw in the user management command could allow an au ...
ROS-20260728-80-0005
Уязвимость mongodb-org
ROS-20260728-80-0004
Уязвимость mongodb-org
ROS-20260728-73-0005
Уязвимость mongodb-org
ROS-20260728-73-0004
Уязвимость mongodb-org
GHSA-v7q4-vccc-3jxg
Creating a "2dsphere_bucket" index on a non-timeseries bucket collection will succeed, but any subsequent attempt to insert a document which triggers updating that index will crash the server. A similar issue occurs when creating "queryable_encrypted_range" indices. This issue affects MongoDB Server v7.0 versions prior to 7.0.32, v8.0 versions prior to 8.0.21 and v8.2 versions prior to 8.2.6
GHSA-fmrc-pppf-w7vf
An authorization flaw in the user management command could allow an authenticated user to make limited changes to authentication-related data associated with another user account. This could affect how authentication is performed for the impacted account.
BDU:2026-13669
Уязвимость системы управления базами данных MongoDB, связанная с недостатком использования функции assert(), позволяющая нарушителю вызвать отказ в обслуживании
BDU:2026-13668
Уязвимость команды updateUser системы управления базами данных MongoDB, позволяющая нарушителю повысить свои привилегии
ALT-PU-2026-8191
ALT-PU-2026-8191: package `mongo7.0` update to version 7.0.34-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-6915 An authorization flaw in the user management command could allow an authenticated user to make limited changes to authentication-related data associated with another user account. This could affect how authentication is performed for the impacted account. | CVSS3: 6.3 | 0% Низкий | 6 месяцев назад |
 | CVE-2026-6915 An authorization flaw in the user management command could allow an authenticated user to make limited changes to authentication-related data associated with another user account. This could affect how authentication is performed for the impacted account. | CVSS3: 4.3 | 0% Низкий | 6 месяцев назад |
| CVE-2026-6915 An authorization flaw in the user management command could allow an au ... | CVSS3: 4.3 | 0% Низкий | 6 месяцев назад |
 | ROS-20260728-80-0005 Уязвимость mongodb-org | CVSS3: 6.3 | 0% Низкий | 3 месяца назад |
| ROS-20260728-80-0004 Уязвимость mongodb-org | CVSS3: 6.5 | 0% Низкий | 3 месяца назад |
| ROS-20260728-73-0005 Уязвимость mongodb-org | CVSS3: 6.3 | 0% Низкий | 3 месяца назад |
| ROS-20260728-73-0004 Уязвимость mongodb-org | CVSS3: 6.5 | 0% Низкий | 3 месяца назад |
| GHSA-v7q4-vccc-3jxg Creating a "2dsphere_bucket" index on a non-timeseries bucket collection will succeed, but any subsequent attempt to insert a document which triggers updating that index will crash the server. A similar issue occurs when creating "queryable_encrypted_range" indices. This issue affects MongoDB Server v7.0 versions prior to 7.0.32, v8.0 versions prior to 8.0.21 and v8.2 versions prior to 8.2.6 | CVSS3: 6.5 | 0% Низкий | 6 месяцев назад |
| GHSA-fmrc-pppf-w7vf An authorization flaw in the user management command could allow an authenticated user to make limited changes to authentication-related data associated with another user account. This could affect how authentication is performed for the impacted account. | CVSS3: 6.3 | 0% Низкий | 6 месяцев назад |
 | BDU:2026-13669 Уязвимость системы управления базами данных MongoDB, связанная с недостатком использования функции assert(), позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 6.5 | 0% Низкий | 6 месяцев назад |
| BDU:2026-13668 Уязвимость команды updateUser системы управления базами данных MongoDB, позволяющая нарушителю повысить свои привилегии | CVSS3: 6.3 | 0% Низкий | 6 месяцев назад |
| ALT-PU-2026-8191 ALT-PU-2026-8191: package `mongo7.0` update to version 7.0.34-alt1 | CVSS3: 8.8 | 6 месяцев назад |
Уязвимостей на страницу