Поиск уязвимостей
Количество 40
Количество 40
ALT-PU-2025-16562
ALT-PU-2025-16562: package `mongo6.0` update to version 6.0.24-alt0.p10.1
ALT-PU-2025-16459
ALT-PU-2025-16459: package `mongo6.0` update to version 6.0.24-alt1
CVE-2025-10059
An improper setting of the lsid field on any sharded query can cause a crash in MongoDB routers. This issue occurs when a generic argument (lsid) is provided in a case when it is not applicable. This affects MongoDB Server v6.0 versions prior to 6.0.x, MongoDB Server v7.0 versions prior to 7.0.18 and MongoDB Server v8.0 versions prior to 8.0.6.
CVE-2025-10059
An improper setting of the lsid field on any sharded query can cause a crash in MongoDB routers. This issue occurs when a generic argument (lsid) is provided in a case when it is not applicable. This affects MongoDB Server v6.0 versions prior to 6.0.x, MongoDB Server v7.0 versions prior to 7.0.18 and MongoDB Server v8.0 versions prior to 8.0.6.
CVE-2025-10059
An improper setting of the lsid field on any sharded query can cause a ...
ROS-20250806-09
Множественные уязвимости mongodb-org
ROS-20250806-08
Множественные уязвимости mongodb-org
ALT-PU-2025-5464
ALT-PU-2025-5464: package `mongo8.0` update to version 8.0.6-alt1
GHSA-5c77-c99v-84gc
An improper setting of the lsid field on any sharded query can cause a crash in MongoDB routers. This issue occurs when a generic argument (lsid) is provided in a case when it is not applicable. This affects MongoDB Server v6.0 versions prior to 6.0.x, MongoDB Server v7.0 versions prior to 7.0.18 and MongoDB Server v8.0 versions prior to 8.0.6.
BDU:2025-13816
Уязвимость системы управления базами данных MongoDB, связанная с неверным назначением разрешений для критического ресурса, позволяющая нарушителю получить доступ к вызвать отказ в обслуживании
ALT-PU-2025-9809
ALT-PU-2025-9809: package `mongo6.0` update to version 6.0.25-alt0.p10.1
ALT-PU-2025-9742
ALT-PU-2025-9742: package `mongo6.0` update to version 6.0.25-alt1
ALT-PU-2025-16530
ALT-PU-2025-16530: package `mongo7.0` update to version 7.0.21-alt1
ALT-PU-2025-9750
ALT-PU-2025-9750: package `mongo7.0` update to version 7.0.22-alt1
ROS-20251030-04
Уязвимость mongodb-org-7
ROS-20251030-03
Уязвимость mongodb-org-6
CVE-2025-6707
Under certain conditions, an authenticated user request may execute with stale privileges following an intentional change by an authorized administrator. This issue affects MongoDB Server v5.0 version prior to 5.0.31, MongoDB Server v6.0 version prior to 6.0.24, MongoDB Server v7.0 version prior to 7.0.21 and MongoDB Server v8.0 version prior to 8.0.5.
CVE-2025-6707
Under certain conditions, an authenticated user request may execute with stale privileges following an intentional change by an authorized administrator. This issue affects MongoDB Server v5.0 version prior to 5.0.31, MongoDB Server v6.0 version prior to 6.0.24, MongoDB Server v7.0 version prior to 7.0.21 and MongoDB Server v8.0 version prior to 8.0.5.
CVE-2025-6707
Under certain conditions, an authenticated user request may execute wi ...
GHSA-2r62-3h6c-3fgx
Under certain conditions, an authenticated user request may execute with stale privileges following an intentional change by an authorized administrator. This issue affects MongoDB Server v5.0 version prior to 5.0.31, MongoDB Server v6.0 version prior to 6.0.24, MongoDB Server v7.0 version prior to 7.0.21 and MongoDB Server v8.0 version prior to 8.0.5.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| ALT-PU-2025-16562 ALT-PU-2025-16562: package `mongo6.0` update to version 6.0.24-alt0.p10.1 | CVSS3: 7.7 | больше 1 года назад | |
| ALT-PU-2025-16459 ALT-PU-2025-16459: package `mongo6.0` update to version 6.0.24-alt1 | CVSS3: 7.5 | больше 1 года назад | |
 | CVE-2025-10059 An improper setting of the lsid field on any sharded query can cause a crash in MongoDB routers. This issue occurs when a generic argument (lsid) is provided in a case when it is not applicable. This affects MongoDB Server v6.0 versions prior to 6.0.x, MongoDB Server v7.0 versions prior to 7.0.18 and MongoDB Server v8.0 versions prior to 8.0.6. | CVSS3: 6.5 | 0% Низкий | около 1 года назад |
 | CVE-2025-10059 An improper setting of the lsid field on any sharded query can cause a crash in MongoDB routers. This issue occurs when a generic argument (lsid) is provided in a case when it is not applicable. This affects MongoDB Server v6.0 versions prior to 6.0.x, MongoDB Server v7.0 versions prior to 7.0.18 and MongoDB Server v8.0 versions prior to 8.0.6. | CVSS3: 6.5 | 0% Низкий | около 1 года назад |
| CVE-2025-10059 An improper setting of the lsid field on any sharded query can cause a ... | CVSS3: 6.5 | 0% Низкий | около 1 года назад |
 | ROS-20250806-09 Множественные уязвимости mongodb-org | CVSS3: 7.7 | больше 1 года назад | |
| ROS-20250806-08 Множественные уязвимости mongodb-org | CVSS3: 7.7 | больше 1 года назад | |
| ALT-PU-2025-5464 ALT-PU-2025-5464: package `mongo8.0` update to version 8.0.6-alt1 | CVSS3: 9.8 | больше 1 года назад | |
| GHSA-5c77-c99v-84gc An improper setting of the lsid field on any sharded query can cause a crash in MongoDB routers. This issue occurs when a generic argument (lsid) is provided in a case when it is not applicable. This affects MongoDB Server v6.0 versions prior to 6.0.x, MongoDB Server v7.0 versions prior to 7.0.18 and MongoDB Server v8.0 versions prior to 8.0.6. | CVSS3: 6.5 | 0% Низкий | около 1 года назад |
 | BDU:2025-13816 Уязвимость системы управления базами данных MongoDB, связанная с неверным назначением разрешений для критического ресурса, позволяющая нарушителю получить доступ к вызвать отказ в обслуживании | CVSS3: 6.5 | 0% Низкий | около 1 года назад |
| ALT-PU-2025-9809 ALT-PU-2025-9809: package `mongo6.0` update to version 6.0.25-alt0.p10.1 | CVSS3: 8.8 | больше 1 года назад | |
| ALT-PU-2025-9742 ALT-PU-2025-9742: package `mongo6.0` update to version 6.0.25-alt1 | CVSS3: 8.8 | больше 1 года назад | |
| ALT-PU-2025-16530 ALT-PU-2025-16530: package `mongo7.0` update to version 7.0.21-alt1 | CVSS3: 7.5 | больше 1 года назад | |
| ALT-PU-2025-9750 ALT-PU-2025-9750: package `mongo7.0` update to version 7.0.22-alt1 | CVSS3: 8.8 | больше 1 года назад | |
| ROS-20251030-04 Уязвимость mongodb-org-7 | CVSS3: 6.5 | 0% Низкий | около 1 года назад |
| ROS-20251030-03 Уязвимость mongodb-org-6 | CVSS3: 6.5 | 0% Низкий | около 1 года назад |
| CVE-2025-6707 Under certain conditions, an authenticated user request may execute with stale privileges following an intentional change by an authorized administrator. This issue affects MongoDB Server v5.0 version prior to 5.0.31, MongoDB Server v6.0 version prior to 6.0.24, MongoDB Server v7.0 version prior to 7.0.21 and MongoDB Server v8.0 version prior to 8.0.5. | CVSS3: 5.4 | 0% Низкий | больше 1 года назад |
| CVE-2025-6707 Under certain conditions, an authenticated user request may execute with stale privileges following an intentional change by an authorized administrator. This issue affects MongoDB Server v5.0 version prior to 5.0.31, MongoDB Server v6.0 version prior to 6.0.24, MongoDB Server v7.0 version prior to 7.0.21 and MongoDB Server v8.0 version prior to 8.0.5. | CVSS3: 5.4 | 0% Низкий | больше 1 года назад |
| CVE-2025-6707 Under certain conditions, an authenticated user request may execute wi ... | CVSS3: 5.4 | 0% Низкий | больше 1 года назад |
| GHSA-2r62-3h6c-3fgx Under certain conditions, an authenticated user request may execute with stale privileges following an intentional change by an authorized administrator. This issue affects MongoDB Server v5.0 version prior to 5.0.31, MongoDB Server v6.0 version prior to 6.0.24, MongoDB Server v7.0 version prior to 7.0.21 and MongoDB Server v8.0 version prior to 8.0.5. | CVSS3: 4.2 | 0% Низкий | больше 1 года назад |
Уязвимостей на страницу