Поиск уязвимостей
Количество 33
Количество 33
ROS-20250505-09
Множественные уязвимости mongodb-org
ROS-20250505-08
Множественные уязвимости mongodb-org
ROS-20250505-07
Множественные уязвимости mongodb-org
ALT-PU-2025-16561
ALT-PU-2025-16561: package `mongo6.0` update to version 6.0.20-alt0.p10.1
ALT-PU-2024-17927
ALT-PU-2024-17927: package `mongo6.0` update to version 6.0.20-alt1
ALT-PU-2025-16581
ALT-PU-2025-16581: package `mongo5.0` update to version 5.0.31-alt0.p10.1
ALT-PU-2025-16534
ALT-PU-2025-16534: package `mongo5.0` update to version 5.0.31-alt1
ALT-PU-2025-5545
ALT-PU-2025-5545: package `mongo6.0` update to version 6.0.21-alt0.p10.1
ALT-PU-2025-5420
ALT-PU-2025-5420: package `mongo6.0` update to version 6.0.21-alt1
ALT-PU-2025-5457
ALT-PU-2025-5457: package `mongo7.0` update to version 7.0.18-alt1
CVE-2025-3082
A user authorized to access a view may be able to alter the intended collation, allowing them to access to a different or unintended view of underlying data. This issue affects MongoDB Server v5.0 version prior to 5.0.31, MongoDB Server v6.0 version prior to 6.0.20, MongoDB Server v7.0 version prior to 7.0.14 and MongoDB Server v7.3 versions prior to 7.3.4.
CVE-2025-3082
A user authorized to access a view may be able to alter the intended collation, allowing them to access to a different or unintended view of underlying data. This issue affects MongoDB Server v5.0 version prior to 5.0.31, MongoDB Server v6.0 version prior to 6.0.20, MongoDB Server v7.0 version prior to 7.0.14 and MongoDB Server v7.3 versions prior to 7.3.4.
CVE-2025-3082
A user authorized to access a view may be able to alter the intended c ...
ALT-PU-2024-17978
ALT-PU-2024-17978: package `mongo7.0` update to version 7.0.16-alt1
GHSA-77w4-3h74-q5hf
A user authorized to access a view may be able to alter the intended collation, allowing them to access to a different or unintended view of underlying data. This issue affects MongoDB Server v5.0 version prior to 5.0.31, MongoDB Server v6.0 version prior to 6.0.20, MongoDB Server v7.0 version prior to 7.0.14 and MongoDB Server v7.3 versions prior to 7.3.4.
BDU:2025-06143
Уязвимость системы управления базами данных MongoDB, связанная с ошибками разграничения доступа, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации
CVE-2025-3083
Specifically crafted MongoDB wire protocol messages can cause mongos to crash during command validation. This can occur without using an authenticated connection. This issue affects MongoDB v5.0 versions prior to 5.0.31, MongoDB v6.0 versions prior to 6.0.20 and MongoDB v7.0 versions prior to 7.0.16
CVE-2025-3083
Specifically crafted MongoDB wire protocol messages can cause mongos to crash during command validation. This can occur without using an authenticated connection. This issue affects MongoDB v5.0 versions prior to 5.0.31, MongoDB v6.0 versions prior to 6.0.20 and MongoDB v7.0 versions prior to 7.0.16
CVE-2025-3083
Specifically crafted MongoDB wire protocol messages can cause mongos t ...
ALT-PU-2024-17932
ALT-PU-2024-17932: package `mongo8.0` update to version 8.0.4-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | ROS-20250505-09 Множественные уязвимости mongodb-org | CVSS3: 8.1 | больше 1 года назад | |
| ROS-20250505-08 Множественные уязвимости mongodb-org | CVSS3: 8.1 | больше 1 года назад | |
| ROS-20250505-07 Множественные уязвимости mongodb-org | CVSS3: 8.1 | больше 1 года назад | |
| ALT-PU-2025-16561 ALT-PU-2025-16561: package `mongo6.0` update to version 6.0.20-alt0.p10.1 | CVSS3: 9.8 | почти 2 года назад | |
| ALT-PU-2024-17927 ALT-PU-2024-17927: package `mongo6.0` update to version 6.0.20-alt1 | CVSS3: 9.8 | почти 2 года назад | |
| ALT-PU-2025-16581 ALT-PU-2025-16581: package `mongo5.0` update to version 5.0.31-alt0.p10.1 | CVSS3: 9.8 | больше 1 года назад | |
| ALT-PU-2025-16534 ALT-PU-2025-16534: package `mongo5.0` update to version 5.0.31-alt1 | CVSS3: 9.8 | почти 2 года назад | |
| ALT-PU-2025-5545 ALT-PU-2025-5545: package `mongo6.0` update to version 6.0.21-alt0.p10.1 | CVSS3: 9.8 | больше 1 года назад | |
| ALT-PU-2025-5420 ALT-PU-2025-5420: package `mongo6.0` update to version 6.0.21-alt1 | CVSS3: 9.8 | больше 1 года назад | |
| ALT-PU-2025-5457 ALT-PU-2025-5457: package `mongo7.0` update to version 7.0.18-alt1 | CVSS3: 9.8 | больше 1 года назад | |
 | CVE-2025-3082 A user authorized to access a view may be able to alter the intended collation, allowing them to access to a different or unintended view of underlying data. This issue affects MongoDB Server v5.0 version prior to 5.0.31, MongoDB Server v6.0 version prior to 6.0.20, MongoDB Server v7.0 version prior to 7.0.14 and MongoDB Server v7.3 versions prior to 7.3.4. | CVSS3: 5.4 | 0% Низкий | больше 1 года назад |
 | CVE-2025-3082 A user authorized to access a view may be able to alter the intended collation, allowing them to access to a different or unintended view of underlying data. This issue affects MongoDB Server v5.0 version prior to 5.0.31, MongoDB Server v6.0 version prior to 6.0.20, MongoDB Server v7.0 version prior to 7.0.14 and MongoDB Server v7.3 versions prior to 7.3.4. | CVSS3: 5.4 | 0% Низкий | больше 1 года назад |
| CVE-2025-3082 A user authorized to access a view may be able to alter the intended c ... | CVSS3: 5.4 | 0% Низкий | больше 1 года назад |
| ALT-PU-2024-17978 ALT-PU-2024-17978: package `mongo7.0` update to version 7.0.16-alt1 | CVSS3: 9.8 | почти 2 года назад | |
| GHSA-77w4-3h74-q5hf A user authorized to access a view may be able to alter the intended collation, allowing them to access to a different or unintended view of underlying data. This issue affects MongoDB Server v5.0 version prior to 5.0.31, MongoDB Server v6.0 version prior to 6.0.20, MongoDB Server v7.0 version prior to 7.0.14 and MongoDB Server v7.3 versions prior to 7.3.4. | CVSS3: 3.1 | 0% Низкий | больше 1 года назад |
 | BDU:2025-06143 Уязвимость системы управления базами данных MongoDB, связанная с ошибками разграничения доступа, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации | CVSS3: 3.1 | 0% Низкий | больше 1 года назад |
| CVE-2025-3083 Specifically crafted MongoDB wire protocol messages can cause mongos to crash during command validation. This can occur without using an authenticated connection. This issue affects MongoDB v5.0 versions prior to 5.0.31, MongoDB v6.0 versions prior to 6.0.20 and MongoDB v7.0 versions prior to 7.0.16 | CVSS3: 7.5 | 0% Низкий | больше 1 года назад |
| CVE-2025-3083 Specifically crafted MongoDB wire protocol messages can cause mongos to crash during command validation. This can occur without using an authenticated connection. This issue affects MongoDB v5.0 versions prior to 5.0.31, MongoDB v6.0 versions prior to 6.0.20 and MongoDB v7.0 versions prior to 7.0.16 | CVSS3: 7.5 | 0% Низкий | больше 1 года назад |
| CVE-2025-3083 Specifically crafted MongoDB wire protocol messages can cause mongos t ... | CVSS3: 7.5 | 0% Низкий | больше 1 года назад |
| ALT-PU-2024-17932 ALT-PU-2024-17932: package `mongo8.0` update to version 8.0.4-alt1 | CVSS3: 9.8 | почти 2 года назад |
Уязвимостей на страницу