Поиск уязвимостей
Количество 11
Количество 11
CVE-2024-8013
A bug in query analysis of certain complex self-referential $lookup subpipelines may result in literal values in expressions for encrypted fields to be sent to the server as plaintext instead of ciphertext. Should this occur, no documents would be returned or written. This issue affects mongocryptd binary (v5.0 versions prior to 5.0.29, v6.0 versions prior to 6.0.17, v7.0 versions prior to 7.0.12 and v7.3 versions prior to 7.3.4) and mongo_crypt_v1.so shared libraries (v6.0 versions prior to 6.0.17, v7.0 versions prior to 7.0.12 and v7.3 versions prior to 7.3.4) released alongside MongoDB Enterprise Server versions.
CVE-2024-8013
A bug in query analysis of certain complex self-referential $lookup subpipelines may result in literal values in expressions for encrypted fields to be sent to the server as plaintext instead of ciphertext. Should this occur, no documents would be returned or written. This issue affects mongocryptd binary (v5.0 versions prior to 5.0.29, v6.0 versions prior to 6.0.17, v7.0 versions prior to 7.0.12 and v7.3 versions prior to 7.3.4) and mongo_crypt_v1.so shared libraries (v6.0 versions prior to 6.0.17, v7.0 versions prior to 7.0.12 and v7.3 versions prior to 7.3.4) released alongside MongoDB Enterprise Server versions.
CVE-2024-8013
A bug in query analysis of certain complex self-referential $lookup su ...
GHSA-mpw3-23h3-rhrx
A bug in query analysis of certain complex self-referential $lookup subpipelines may result in literal values in expressions for encrypted fields to be sent to the server as plaintext instead of ciphertext. Should this occur, no documents would be returned or written. This issue affects mongocryptd binary (v5.0 versions prior to 5.0.29, v6.0 versions prior to 6.0.17, v7.0 versions prior to 7.0.12 and v7.3 versions prior to 7.3.4) and mongo_crypt_v1.so shared libraries (v6.0 versions prior to 6.0.17, v7.0 versions prior to 7.0.12 and v7.3 versions prior to 7.3.4) released alongside MongoDB Enterprise Server versions.
BDU:2025-03803
Уязвимость двоичного файла mongocryptd и библиотеки mongo crypt v1.so системы управления базами данных MongoDB, связанная с передачей критичной информации открытым текстом, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации
ROS-20250326-03
Уязвимость mongodb-org
ALT-PU-2024-16107
ALT-PU-2024-16107: package `mongo6.0` update to version 6.0.19-alt0.p10.1
ALT-PU-2024-16066
ALT-PU-2024-16066: package `mongo7.0` update to version 7.0.15-alt1
ALT-PU-2024-16032
ALT-PU-2024-16032: package `mongo6.0` update to version 6.0.19-alt1
ALT-PU-2024-16016
ALT-PU-2024-16016: package `mongo5.0` update to version 5.0.30-alt0.p10.1
ALT-PU-2024-15966
ALT-PU-2024-15966: package `mongo5.0` update to version 5.0.30-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2024-8013 A bug in query analysis of certain complex self-referential $lookup subpipelines may result in literal values in expressions for encrypted fields to be sent to the server as plaintext instead of ciphertext. Should this occur, no documents would be returned or written. This issue affects mongocryptd binary (v5.0 versions prior to 5.0.29, v6.0 versions prior to 6.0.17, v7.0 versions prior to 7.0.12 and v7.3 versions prior to 7.3.4) and mongo_crypt_v1.so shared libraries (v6.0 versions prior to 6.0.17, v7.0 versions prior to 7.0.12 and v7.3 versions prior to 7.3.4) released alongside MongoDB Enterprise Server versions. | CVSS3: 3.3 | 0% Низкий | около 2 лет назад |
 | CVE-2024-8013 A bug in query analysis of certain complex self-referential $lookup subpipelines may result in literal values in expressions for encrypted fields to be sent to the server as plaintext instead of ciphertext. Should this occur, no documents would be returned or written. This issue affects mongocryptd binary (v5.0 versions prior to 5.0.29, v6.0 versions prior to 6.0.17, v7.0 versions prior to 7.0.12 and v7.3 versions prior to 7.3.4) and mongo_crypt_v1.so shared libraries (v6.0 versions prior to 6.0.17, v7.0 versions prior to 7.0.12 and v7.3 versions prior to 7.3.4) released alongside MongoDB Enterprise Server versions. | CVSS3: 3.3 | 0% Низкий | около 2 лет назад |
| CVE-2024-8013 A bug in query analysis of certain complex self-referential $lookup su ... | CVSS3: 3.3 | 0% Низкий | около 2 лет назад |
| GHSA-mpw3-23h3-rhrx A bug in query analysis of certain complex self-referential $lookup subpipelines may result in literal values in expressions for encrypted fields to be sent to the server as plaintext instead of ciphertext. Should this occur, no documents would be returned or written. This issue affects mongocryptd binary (v5.0 versions prior to 5.0.29, v6.0 versions prior to 6.0.17, v7.0 versions prior to 7.0.12 and v7.3 versions prior to 7.3.4) and mongo_crypt_v1.so shared libraries (v6.0 versions prior to 6.0.17, v7.0 versions prior to 7.0.12 and v7.3 versions prior to 7.3.4) released alongside MongoDB Enterprise Server versions. | CVSS3: 2.2 | 0% Низкий | около 2 лет назад |
 | BDU:2025-03803 Уязвимость двоичного файла mongocryptd и библиотеки mongo crypt v1.so системы управления базами данных MongoDB, связанная с передачей критичной информации открытым текстом, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации | CVSS3: 3.3 | 0% Низкий | около 2 лет назад |
 | ROS-20250326-03 Уязвимость mongodb-org | CVSS3: 3.3 | 0% Низкий | больше 1 года назад |
| ALT-PU-2024-16107 ALT-PU-2024-16107: package `mongo6.0` update to version 6.0.19-alt0.p10.1 | CVSS3: 8.1 | почти 2 года назад | |
| ALT-PU-2024-16066 ALT-PU-2024-16066: package `mongo7.0` update to version 7.0.15-alt1 | CVSS3: 8.1 | почти 2 года назад | |
| ALT-PU-2024-16032 ALT-PU-2024-16032: package `mongo6.0` update to version 6.0.19-alt1 | CVSS3: 8.1 | почти 2 года назад | |
| ALT-PU-2024-16016 ALT-PU-2024-16016: package `mongo5.0` update to version 5.0.30-alt0.p10.1 | CVSS3: 8.1 | почти 2 года назад | |
| ALT-PU-2024-15966 ALT-PU-2024-15966: package `mongo5.0` update to version 5.0.30-alt1 | CVSS3: 8.1 | почти 2 года назад |
Уязвимостей на страницу