Поиск уязвимостей
Количество 24
Количество 24
ALT-PU-2026-4911
ALT-PU-2026-4911: package `mongo7.0` update to version 7.0.31-alt1
CVE-2026-4147
An authenticated user with the read role may read limited amounts of uninitialized stack memory via specially-crafted issuances of the filemd5 command.
CVE-2026-4147
An authenticated user with the read role may read limited amounts of uninitialized stack memory via specially-crafted issuances of the filemd5 command.
CVE-2026-4147
An authenticated user with the read role may read limited amounts of u ...
GHSA-65gf-rq85-48c5
An authenticated user with the read role may read limited amounts of uninitialized stack memory via specially-crafted issuances of the filemd5 command.
CVE-2026-4148
A use-after-free vulnerability can be triggered in sharded clusters by an authenticated user with the read role who issues a specially crafted $lookup or $graphLookup aggregation pipeline.
CVE-2026-4148
A use-after-free vulnerability can be triggered in sharded clusters by an authenticated user with the read role who issues a specially crafted $lookup or $graphLookup aggregation pipeline.
CVE-2026-4148
A use-after-free vulnerability can be triggered in sharded clusters by ...
GHSA-5rch-679r-cv33
A use-after-free vulnerability can be triggered in sharded clusters by an authenticated user with the read role who issues a specially crafted $lookup or $graphLookup aggregation pipeline.
CVE-2026-4358
A specially crafted aggregation query with $lookup by an authenticated user with write privileges can cause a double-free or use-after-free memory issue in the slot-based execution (SBE) engine when an in-memory hash table is spilled to disk.
CVE-2026-4358
A specially crafted aggregation query with $lookup by an authenticated user with write privileges can cause a double-free or use-after-free memory issue in the slot-based execution (SBE) engine when an in-memory hash table is spilled to disk.
CVE-2026-4358
A specially crafted aggregation query with $lookup by an authenticated ...
CVE-2026-5170
A user with access to the cluster with a limited set of privilege actions can trigger a crash of a mongod process during the limited and unpredictable window when the cluster is being promoted from a replica set to a sharded cluster. This may cause a denial of service by taking down the primary of the replica set. This issue affects MongoDB Server v8.2 versions prior to 8.2.2, MongoDB Server v8.0 versions between 8.0.18, MongoDB Server v7.0 versions between 7.0.31.
CVE-2026-5170
A user with access to the cluster with a limited set of privilege actions can trigger a crash of a mongod process during the limited and unpredictable window when the cluster is being promoted from a replica set to a sharded cluster. This may cause a denial of service by taking down the primary of the replica set. This issue affects MongoDB Server v8.2 versions prior to 8.2.2, MongoDB Server v8.0 versions between 8.0.18, MongoDB Server v7.0 versions between 7.0.31.
CVE-2026-5170
A user with access to the cluster with a limited set of privilege acti ...
ROS-20260626-80-0005
Уязвимость mongodb-org
ROS-20260626-73-0005
Уязвимость mongodb-org
GHSA-64ph-qr47-qxh4
A specially crafted aggregation query with $lookup by an authenticated user with write privileges can cause a double-free or use-after-free memory issue in the slot-based execution (SBE) engine when an in-memory hash table is spilled to disk.
BDU:2026-09654
Уязвимость реализации хеш-таблицы механизма Slot-Based Execution (SBE) системы управления базами данных MongoDB, позволяющая нарушителю вызвать отказ в обслуживании
ROS-20260526-80-0012
Уязвимость mongodb-org
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| ALT-PU-2026-4911 ALT-PU-2026-4911: package `mongo7.0` update to version 7.0.31-alt1 | CVSS3: 8.8 | 8 месяцев назад | |
 | CVE-2026-4147 An authenticated user with the read role may read limited amounts of uninitialized stack memory via specially-crafted issuances of the filemd5 command. | CVSS3: 4.3 | 0% Низкий | 8 месяцев назад |
 | CVE-2026-4147 An authenticated user with the read role may read limited amounts of uninitialized stack memory via specially-crafted issuances of the filemd5 command. | CVSS3: 4.3 | 0% Низкий | 8 месяцев назад |
| CVE-2026-4147 An authenticated user with the read role may read limited amounts of u ... | CVSS3: 4.3 | 0% Низкий | 8 месяцев назад |
| GHSA-65gf-rq85-48c5 An authenticated user with the read role may read limited amounts of uninitialized stack memory via specially-crafted issuances of the filemd5 command. | CVSS3: 6.5 | 0% Низкий | 8 месяцев назад |
| CVE-2026-4148 A use-after-free vulnerability can be triggered in sharded clusters by an authenticated user with the read role who issues a specially crafted $lookup or $graphLookup aggregation pipeline. | CVSS3: 8.8 | 0% Низкий | 8 месяцев назад |
| CVE-2026-4148 A use-after-free vulnerability can be triggered in sharded clusters by an authenticated user with the read role who issues a specially crafted $lookup or $graphLookup aggregation pipeline. | CVSS3: 8.8 | 0% Низкий | 8 месяцев назад |
| CVE-2026-4148 A use-after-free vulnerability can be triggered in sharded clusters by ... | CVSS3: 8.8 | 0% Низкий | 8 месяцев назад |
| GHSA-5rch-679r-cv33 A use-after-free vulnerability can be triggered in sharded clusters by an authenticated user with the read role who issues a specially crafted $lookup or $graphLookup aggregation pipeline. | CVSS3: 8.8 | 0% Низкий | 8 месяцев назад |
| CVE-2026-4358 A specially crafted aggregation query with $lookup by an authenticated user with write privileges can cause a double-free or use-after-free memory issue in the slot-based execution (SBE) engine when an in-memory hash table is spilled to disk. | CVSS3: 7.5 | 0% Низкий | 8 месяцев назад |
| CVE-2026-4358 A specially crafted aggregation query with $lookup by an authenticated user with write privileges can cause a double-free or use-after-free memory issue in the slot-based execution (SBE) engine when an in-memory hash table is spilled to disk. | CVSS3: 7.5 | 0% Низкий | 8 месяцев назад |
| CVE-2026-4358 A specially crafted aggregation query with $lookup by an authenticated ... | CVSS3: 7.5 | 0% Низкий | 8 месяцев назад |
| CVE-2026-5170 A user with access to the cluster with a limited set of privilege actions can trigger a crash of a mongod process during the limited and unpredictable window when the cluster is being promoted from a replica set to a sharded cluster. This may cause a denial of service by taking down the primary of the replica set. This issue affects MongoDB Server v8.2 versions prior to 8.2.2, MongoDB Server v8.0 versions between 8.0.18, MongoDB Server v7.0 versions between 7.0.31. | CVSS3: 5.3 | 0% Низкий | 7 месяцев назад |
| CVE-2026-5170 A user with access to the cluster with a limited set of privilege actions can trigger a crash of a mongod process during the limited and unpredictable window when the cluster is being promoted from a replica set to a sharded cluster. This may cause a denial of service by taking down the primary of the replica set. This issue affects MongoDB Server v8.2 versions prior to 8.2.2, MongoDB Server v8.0 versions between 8.0.18, MongoDB Server v7.0 versions between 7.0.31. | CVSS3: 5.3 | 0% Низкий | 7 месяцев назад |
| CVE-2026-5170 A user with access to the cluster with a limited set of privilege acti ... | CVSS3: 5.3 | 0% Низкий | 7 месяцев назад |
 | ROS-20260626-80-0005 Уязвимость mongodb-org | CVSS3: 6.4 | 0% Низкий | 5 месяцев назад |
| ROS-20260626-73-0005 Уязвимость mongodb-org | CVSS3: 6.4 | 0% Низкий | 5 месяцев назад |
| GHSA-64ph-qr47-qxh4 A specially crafted aggregation query with $lookup by an authenticated user with write privileges can cause a double-free or use-after-free memory issue in the slot-based execution (SBE) engine when an in-memory hash table is spilled to disk. | CVSS3: 6.4 | 0% Низкий | 8 месяцев назад |
 | BDU:2026-09654 Уязвимость реализации хеш-таблицы механизма Slot-Based Execution (SBE) системы управления базами данных MongoDB, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 6.4 | 0% Низкий | 9 месяцев назад |
| ROS-20260526-80-0012 Уязвимость mongodb-org | CVSS3: 5.3 | 0% Низкий | 6 месяцев назад |
Уязвимостей на страницу