Поиск уязвимостей
Количество 32
Количество 32
ALT-PU-2025-16459
ALT-PU-2025-16459: package `mongo6.0` update to version 6.0.24-alt1
ALT-PU-2025-16562
ALT-PU-2025-16562: package `mongo6.0` update to version 6.0.24-alt0.p10.1
CVE-2025-10059
An improper setting of the lsid field on any sharded query can cause a crash in MongoDB routers. This issue occurs when a generic argument (lsid) is provided in a case when it is not applicable. This affects MongoDB Server v6.0 versions prior to 6.0.x, MongoDB Server v7.0 versions prior to 7.0.18 and MongoDB Server v8.0 versions prior to 8.0.6.
CVE-2025-10059
An improper setting of the lsid field on any sharded query can cause a crash in MongoDB routers. This issue occurs when a generic argument (lsid) is provided in a case when it is not applicable. This affects MongoDB Server v6.0 versions prior to 6.0.x, MongoDB Server v7.0 versions prior to 7.0.18 and MongoDB Server v8.0 versions prior to 8.0.6.
CVE-2025-10059
An improper setting of the lsid field on any sharded query can cause a ...
ALT-PU-2025-16530
ALT-PU-2025-16530: package `mongo7.0` update to version 7.0.21-alt1
ALT-PU-2025-5464
ALT-PU-2025-5464: package `mongo8.0` update to version 8.0.6-alt1
GHSA-5c77-c99v-84gc
An improper setting of the lsid field on any sharded query can cause a crash in MongoDB routers. This issue occurs when a generic argument (lsid) is provided in a case when it is not applicable. This affects MongoDB Server v6.0 versions prior to 6.0.x, MongoDB Server v7.0 versions prior to 7.0.18 and MongoDB Server v8.0 versions prior to 8.0.6.
BDU:2025-13816
Уязвимость системы управления базами данных MongoDB, связанная с неверным назначением разрешений для критического ресурса, позволяющая нарушителю получить доступ к вызвать отказ в обслуживании
ROS-20251030-04
Уязвимость mongodb-org-7
ROS-20251030-03
Уязвимость mongodb-org-6
ROS-20250806-09
Множественные уязвимости mongodb-org
ROS-20250806-08
Множественные уязвимости mongodb-org
CVE-2025-6714
MongoDB Server's mongos component can become unresponsive to new connections due to incorrect handling of incomplete data. This affects MongoDB when configured with load balancer support. This issue affects MongoDB Server v6.0 prior to 6.0.23, MongoDB Server v7.0 prior to 7.0.20 and MongoDB Server v8.0 prior to 8.0.9 Required Configuration: This affects MongoDB sharded clusters when configured with load balancer support for mongos using HAProxy on specified ports.
CVE-2025-6714
MongoDB Server's mongos component can become unresponsive to new connections due to incorrect handling of incomplete data. This affects MongoDB when configured with load balancer support. This issue affects MongoDB Server v6.0 prior to 6.0.23, MongoDB Server v7.0 prior to 7.0.20 and MongoDB Server v8.0 prior to 8.0.9 Required Configuration: This affects MongoDB sharded clusters when configured with load balancer support for mongos using HAProxy on specified ports.
CVE-2025-6714
MongoDB Server's mongos component can become unresponsive to new conne ...
CVE-2025-6707
Under certain conditions, an authenticated user request may execute with stale privileges following an intentional change by an authorized administrator. This issue affects MongoDB Server v5.0 version prior to 5.0.31, MongoDB Server v6.0 version prior to 6.0.24, MongoDB Server v7.0 version prior to 7.0.21 and MongoDB Server v8.0 version prior to 8.0.5.
CVE-2025-6707
Under certain conditions, an authenticated user request may execute with stale privileges following an intentional change by an authorized administrator. This issue affects MongoDB Server v5.0 version prior to 5.0.31, MongoDB Server v6.0 version prior to 6.0.24, MongoDB Server v7.0 version prior to 7.0.21 and MongoDB Server v8.0 version prior to 8.0.5.
CVE-2025-6707
Under certain conditions, an authenticated user request may execute wi ...
ALT-PU-2025-9809
ALT-PU-2025-9809: package `mongo6.0` update to version 6.0.25-alt0.p10.1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
ALT-PU-2025-16459 ALT-PU-2025-16459: package `mongo6.0` update to version 6.0.24-alt1 | CVSS3: 7.5 | больше 1 года назад | ||
ALT-PU-2025-16562 ALT-PU-2025-16562: package `mongo6.0` update to version 6.0.24-alt0.p10.1 | CVSS3: 7.7 | больше 1 года назад | ||
CVE-2025-10059 An improper setting of the lsid field on any sharded query can cause a crash in MongoDB routers. This issue occurs when a generic argument (lsid) is provided in a case when it is not applicable. This affects MongoDB Server v6.0 versions prior to 6.0.x, MongoDB Server v7.0 versions prior to 7.0.18 and MongoDB Server v8.0 versions prior to 8.0.6. | CVSS3: 6.5 | 0% Низкий | около 1 года назад | |
CVE-2025-10059 An improper setting of the lsid field on any sharded query can cause a crash in MongoDB routers. This issue occurs when a generic argument (lsid) is provided in a case when it is not applicable. This affects MongoDB Server v6.0 versions prior to 6.0.x, MongoDB Server v7.0 versions prior to 7.0.18 and MongoDB Server v8.0 versions prior to 8.0.6. | CVSS3: 6.5 | 0% Низкий | около 1 года назад | |
CVE-2025-10059 An improper setting of the lsid field on any sharded query can cause a ... | CVSS3: 6.5 | 0% Низкий | около 1 года назад | |
ALT-PU-2025-16530 ALT-PU-2025-16530: package `mongo7.0` update to version 7.0.21-alt1 | CVSS3: 7.5 | больше 1 года назад | ||
ALT-PU-2025-5464 ALT-PU-2025-5464: package `mongo8.0` update to version 8.0.6-alt1 | CVSS3: 9.8 | больше 1 года назад | ||
GHSA-5c77-c99v-84gc An improper setting of the lsid field on any sharded query can cause a crash in MongoDB routers. This issue occurs when a generic argument (lsid) is provided in a case when it is not applicable. This affects MongoDB Server v6.0 versions prior to 6.0.x, MongoDB Server v7.0 versions prior to 7.0.18 and MongoDB Server v8.0 versions prior to 8.0.6. | CVSS3: 6.5 | 0% Низкий | около 1 года назад | |
BDU:2025-13816 Уязвимость системы управления базами данных MongoDB, связанная с неверным назначением разрешений для критического ресурса, позволяющая нарушителю получить доступ к вызвать отказ в обслуживании | CVSS3: 6.5 | 0% Низкий | около 1 года назад | |
ROS-20251030-04 Уязвимость mongodb-org-7 | CVSS3: 6.5 | 0% Низкий | около 1 года назад | |
ROS-20251030-03 Уязвимость mongodb-org-6 | CVSS3: 6.5 | 0% Низкий | около 1 года назад | |
ROS-20250806-09 Множественные уязвимости mongodb-org | CVSS3: 7.7 | больше 1 года назад | ||
ROS-20250806-08 Множественные уязвимости mongodb-org | CVSS3: 7.7 | больше 1 года назад | ||
CVE-2025-6714 MongoDB Server's mongos component can become unresponsive to new connections due to incorrect handling of incomplete data. This affects MongoDB when configured with load balancer support. This issue affects MongoDB Server v6.0 prior to 6.0.23, MongoDB Server v7.0 prior to 7.0.20 and MongoDB Server v8.0 prior to 8.0.9 Required Configuration: This affects MongoDB sharded clusters when configured with load balancer support for mongos using HAProxy on specified ports. | CVSS3: 7.5 | 0% Низкий | больше 1 года назад | |
CVE-2025-6714 MongoDB Server's mongos component can become unresponsive to new connections due to incorrect handling of incomplete data. This affects MongoDB when configured with load balancer support. This issue affects MongoDB Server v6.0 prior to 6.0.23, MongoDB Server v7.0 prior to 7.0.20 and MongoDB Server v8.0 prior to 8.0.9 Required Configuration: This affects MongoDB sharded clusters when configured with load balancer support for mongos using HAProxy on specified ports. | CVSS3: 7.5 | 0% Низкий | больше 1 года назад | |
CVE-2025-6714 MongoDB Server's mongos component can become unresponsive to new conne ... | CVSS3: 7.5 | 0% Низкий | больше 1 года назад | |
CVE-2025-6707 Under certain conditions, an authenticated user request may execute with stale privileges following an intentional change by an authorized administrator. This issue affects MongoDB Server v5.0 version prior to 5.0.31, MongoDB Server v6.0 version prior to 6.0.24, MongoDB Server v7.0 version prior to 7.0.21 and MongoDB Server v8.0 version prior to 8.0.5. | CVSS3: 5.4 | 0% Низкий | больше 1 года назад | |
CVE-2025-6707 Under certain conditions, an authenticated user request may execute with stale privileges following an intentional change by an authorized administrator. This issue affects MongoDB Server v5.0 version prior to 5.0.31, MongoDB Server v6.0 version prior to 6.0.24, MongoDB Server v7.0 version prior to 7.0.21 and MongoDB Server v8.0 version prior to 8.0.5. | CVSS3: 5.4 | 0% Низкий | больше 1 года назад | |
CVE-2025-6707 Under certain conditions, an authenticated user request may execute wi ... | CVSS3: 5.4 | 0% Низкий | больше 1 года назад | |
ALT-PU-2025-9809 ALT-PU-2025-9809: package `mongo6.0` update to version 6.0.25-alt0.p10.1 | CVSS3: 8.8 | больше 1 года назад |
Уязвимостей на страницу