Поиск уязвимостей
Количество 8
Количество 8
GHSA-fpx3-f8x9-6hqm
A vulnerability was discovered in MongoDB Server where the server-side MozJS scripting engine unconditionally registered a module loading hook that enables JavaScript calls to read arbitrary files from the host filesystem using the mongod process's privileges. An authenticated user could exploit this through crafted aggregation pipeline commands to read sensitive files accessible to the MongoDB server process.
CVE-2026-13078
A vulnerability was discovered in MongoDB Server where the server-side MozJS scripting engine unconditionally registered a module loading hook that enables JavaScript calls to read arbitrary files from the host filesystem using the mongod process's privileges. An authenticated user could exploit this through crafted aggregation pipeline commands to read sensitive files accessible to the MongoDB server process.
CVE-2026-13078
A vulnerability was discovered in MongoDB Server where the server-side MozJS scripting engine unconditionally registered a module loading hook that enables JavaScript calls to read arbitrary files from the host filesystem using the mongod process's privileges. An authenticated user could exploit this through crafted aggregation pipeline commands to read sensitive files accessible to the MongoDB server process.
CVE-2026-13078
A vulnerability was discovered in MongoDB Server where the server-side ...
BDU:2026-17911
Уязвимость компонента MozJS системы управления базами данных MongoDB, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации
ROS-20261105-80-0114
Множественные уязвимости mongodb-org
ROS-20261105-73-0115
Множественные уязвимости mongodb-org
ALT-PU-2026-12889
ALT-PU-2026-12889: package `mongo7.0` update to version 7.0.39-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-fpx3-f8x9-6hqm A vulnerability was discovered in MongoDB Server where the server-side MozJS scripting engine unconditionally registered a module loading hook that enables JavaScript calls to read arbitrary files from the host filesystem using the mongod process's privileges. An authenticated user could exploit this through crafted aggregation pipeline commands to read sensitive files accessible to the MongoDB server process. | CVSS3: 7.7 | 0% Низкий | 4 месяца назад |
 | CVE-2026-13078 A vulnerability was discovered in MongoDB Server where the server-side MozJS scripting engine unconditionally registered a module loading hook that enables JavaScript calls to read arbitrary files from the host filesystem using the mongod process's privileges. An authenticated user could exploit this through crafted aggregation pipeline commands to read sensitive files accessible to the MongoDB server process. | CVSS3: 7.7 | 0% Низкий | 4 месяца назад |
 | CVE-2026-13078 A vulnerability was discovered in MongoDB Server where the server-side MozJS scripting engine unconditionally registered a module loading hook that enables JavaScript calls to read arbitrary files from the host filesystem using the mongod process's privileges. An authenticated user could exploit this through crafted aggregation pipeline commands to read sensitive files accessible to the MongoDB server process. | CVSS3: 7.7 | 0% Низкий | 4 месяца назад |
| CVE-2026-13078 A vulnerability was discovered in MongoDB Server where the server-side ... | CVSS3: 7.7 | 0% Низкий | 4 месяца назад |
 | BDU:2026-17911 Уязвимость компонента MozJS системы управления базами данных MongoDB, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации | CVSS3: 7.7 | 0% Низкий | 5 месяцев назад |
 | ROS-20261105-80-0114 Множественные уязвимости mongodb-org | CVSS3: 7.7 | 0% Низкий | 4 дня назад |
| ROS-20261105-73-0115 Множественные уязвимости mongodb-org | CVSS3: 7.7 | 0% Низкий | 4 дня назад |
| ALT-PU-2026-12889 ALT-PU-2026-12889: package `mongo7.0` update to version 7.0.39-alt1 | CVSS3: 8.1 | 3 месяца назад |
Уязвимостей на страницу