Vulnerabilities (CVE)

Filtered by vendor Mongodb Subscribe
Filtered by product Mongodb
Total 42 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2013-1892 2 Mongodb, Redhat 2 Mongodb, Enterprise Mrg 2023-12-10 6.0 MEDIUM N/A
MongoDB before 2.0.9 and 2.2.x before 2.2.4 does not properly validate requests to the nativeHelper function in SpiderMonkey, which allows remote authenticated users to cause a denial of service (invalid memory access and server crash) or execute arbitrary code via a crafted memory address in the first argument.
CVE-2013-2132 3 Canonical, Mongodb, Opensuse 3 Ubuntu Linux, Mongodb, Opensuse 2023-12-10 4.3 MEDIUM N/A
bson/_cbsonmodule.c in the mongo-python-driver (aka. pymongo) before 2.5.2, as used in MongoDB, allows context-dependent attackers to cause a denial of service (NULL pointer dereference and crash) via vectors related to decoding of an "invalid DBRef."