İçeriğe atla
Noroxi

MongoDB kayıtları

mongodb üreticisine ait 299 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
1 · %0,3
Silahlaştırılmış
3 · %1
Pre-auth RCE
7
Düzeltme kaydı olan
%62,2
Yayından KEV’e ortanca
10 gün

Yıllara göre kayıt

  1. 16
  2. 17
  3. 18
  4. 19
  5. 20
  6. 21
  7. 22
  8. 23
  9. 24
  10. 25
  11. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Bug bounty kapsamı

Ürünün üreticisi herkese açık bir programda görünüyor. Eşleşme ad üzerinden yapıldı; kapsam metnini programda doğrulayın.

Tüm kayıtlar

299 kayıt
  • CVE-2025-14847
    89Hemen

    Zlib compressed protocol header length confusion may allow memory read

    YüksekCVSS 8,7KEVSilahlaştırılmışEPSS %83

    mongodb · mongodb19 Ara 2025

  • CVE-2020-7610
    40Planlayın

    All versions of bson before 1.1.4 are vulnerable to Deserialization of Untrusted Data.

    KritikCVSS 9,8İstismar yokEPSS %2

    mongodb · bson30 Mar 2020

  • CVE-2024-1351
    39İzleyin

    MongoDB Server may allow successful untrusted connection

    KritikCVSS 9,8İstismar yokEPSS %1

    mongodb · mongodb7 Mar 2024

  • CVE-2024-6376
    39İzleyin

    ejson shell parser in MongoDB Compass maybe bypassed

    KritikCVSS 9,8İstismar yokEPSS %0

    mongodb · compass1 Tem 2024

  • CVE-2024-8654
    39İzleyin

    MongoDB Server may access non-initialized region of memory leading to unexpected behaviour

    KritikCVSS 9,8İstismar yokEPSS %0

    mongodb · mongodb10 Eyl 2024

  • CVE-2025-3085
    39İzleyin

    MongoDB Server running on Linux may allow unexpected connections where intermediate certificates are revoked

    KritikCVSS 9,8İstismar yokEPSS %0

    mongodb · mongodb1 Nis 2025

  • CVE-2026-19001
    38İzleyin

    MongoDB BI Connector ODBC driver may write outside an allocated buffer when handling oversized catalog object names

    KritikCVSS 9,5İstismar yokEPSS %1

    mongodb · bi connector odbc driver12 Ağu 2026

  • CVE-2013-1892
    37İzleyin

    MongoDB before 2.0.9 and 2.2.x before 2.2.4 does not properly validate requests to the nativeHelper function in SpiderMonkey, which allows r

    OrtaCVSS 6,0SilahlaştırılmışEPSS %45

    mongodb · mongodb1 Eki 2013

  • CVE-2026-8431
    37İzleyin

    Ops Manager RCE via webhook body

    KritikCVSS 9,4İstismar yokEPSS %1

    mongodb · ops manager12 May 2026

  • CVE-2017-15535
    36İzleyin

    MongoDB 3.4.x before 3.4.10, and 3.5.x-development, has a disabled-by-default configuration setting, networkMessageCompressors (aka wire pro

    KritikCVSS 9,1İstismar yokEPSS %2

    mongodb · mongodb31 Eki 2017

  • CVE-2026-93762
    36İzleyin

    Data deletion and attribute disclosure via field-name method injection in in-memory queries

    KritikCVSS 9,2İstismar yokEPSS %1

    mongodb · mongoid18 Eyl 2026

  • CVE-2026-82067
    36İzleyin

    Improper Case Sensitivity Handling in MongoDB Server Configuration Validation May Cause Authorization to Remain Disabled at Startup

    KritikCVSS 9,2İstismar yokEPSS %1

    mongodb · mongodb8 Eyl 2026

  • CVE-2026-93393
    36İzleyin

    Heap overflow via oversized decrypted TLS record sequence in Windows Secure Channel stream

    KritikCVSS 9,2İstismar yokEPSS %0

    mongodb · c driver17 Eyl 2026

  • CVE-2026-13072
    36İzleyin

    MongoDB Improper Input Validation in Compute Mode External Data Processing Leading to Memory Corruption

    KritikCVSS 9,2İstismar yokEPSS %0

    mongodb · mongodb22 Tem 2026

  • CVE-2026-18691
    36İzleyin

    Improper Authentication in MongoDB Intra-Cluster Connections Allows Credential Exposure

    KritikCVSS 9,0İstismar yokEPSS %0

    mongodb · mongodb11 Ağu 2026

  • CVE-2026-19004
    35İzleyin

    MongoDB BI Connector ODBC Driver Memory-Safety Issue When Handling Stored Procedure Output Parameters

    YüksekCVSS 8,8İstismar yokEPSS %1

    mongodb · bi connector odbc driver12 Ağu 2026

  • CVE-2026-19002
    35İzleyin

    Crafted database metadata may cause memory corruption in MongoDB BI Connector ODBC Driver

    YüksekCVSS 8,8İstismar yokEPSS %0

    mongodb · bi connector odbc driver12 Ağu 2026

  • CVE-2026-93759
    35İzleyin

    Server-side JavaScript injection via string query criteria bypassing the strict operator allowlist

    YüksekCVSS 8,8İstismar yokEPSS %0

    mongodb · mongoid18 Eyl 2026

  • CVE-2025-1692
    35İzleyin

    MongoDB Shell may be susceptible to control character injection via pasting

    YüksekCVSS 8,8İstismar yokEPSS %0

    mongodb · mongosh27 Şub 2025

  • CVE-2025-6706
    35İzleyin

    Running certain aggregation operations with the SBE engine may lead to unexpected behavior on MongoDB Server

    YüksekCVSS 8,8İstismar yokEPSS %0

    mongodb · mongodb26 Haz 2025

  • CVE-2026-8053
    34İzleyin

    FlatBSON Duplicate Field Index Drift

    YüksekCVSS 8,7Kavram kanıtıEPSS %1

    mongodb · mongodb13 May 2026

  • CVE-2026-4148
    34İzleyin

    ExpressionContext use-after-free in classic engine $lookup and $graphLookup aggregation operators

    YüksekCVSS 8,7İstismar yokEPSS %1

    mongodb · mongodb17 Mar 2026

  • CVE-2026-9740
    34İzleyin

    Unbounded recursion in BSONColumn interleaved-reference causes pre-auth stack overflow

    YüksekCVSS 8,7İstismar yokEPSS %1

    mongodb · mongodb9 Haz 2026

  • CVE-2026-82075
    34İzleyin

    Uncontrolled Resource Consumption in MongoDB Sharded Cluster Router Allows Unauthenticated Denial of Service

    YüksekCVSS 8,7İstismar yokEPSS %1

    mongodb · mongodb8 Eyl 2026

  • CVE-2026-82064
    34İzleyin

    Unauthenticated Denial of Service in MongoDB Server via Assertion Failure in Read Concern Processing on Replica Set Members

    YüksekCVSS 8,7İstismar yokEPSS %1

    mongodb · mongodb8 Eyl 2026