MongoDB Inc MongoDB Server

• CVE-2024-7553 High 7.3 Accessing Untrusted Directory May Allow Local Privilege Escalation 0.3%
• CVE-2024-6375 Medium 5.4 Missing authorization check may lead to shard key refinement 0.4%
• CVE-2024-3374 Medium 5.3 MongoDB Server (mongod) may crash when generating ftdc 0.5%
• CVE-2024-3372 High 7.5 MongoDB Server may have unexpected application behaviour due to invalid BSON 0.5%
• CVE-2024-1351 High 8.8 MongoDB Server may allow successful untrusted connection 0.5%
• CVE-2023-1409 Medium 5.3 Certificate validation issue in MongoDB Server running on Windows or macOS 0.4%
• CVE-2022-24272 Medium 6.5 MongoDB Server (mongod) may crash in response to unexpected requests 1.0%
• CVE-2021-32040 Medium 6.5 Large aggregation pipelines with a specific stage can crash mongod under default configuration 2.0%
• CVE-2021-32036 Medium 5.4 Denial of Service and Data Integrity vulnerability in features command 1.0%
• CVE-2021-20330 Medium 6.5 Specific replication command with malformed oplog entries can crash secondaries 1.1%
• CVE-2021-32037 Medium 6.5 User may trigger invariant when allowed to send commands directly to shards 1.2%
• CVE-2021-20333 Medium 5.3 Server log entry spoofing via newline injection 1.3%
• CVE-2021-20326 Medium 6.5 Specially crafted query may result in a denial of service of mongod 0.9%
• CVE-2020-7929 Medium 6.5 Specially crafted regex query can cause DoS 1.3%
• CVE-2020-7928 Medium 6.5 Improper neutralization of null byte leads to read overrun 1.4%
• CVE-2020-7926 Medium 6.5 Specific query can cause a DoS against MongoDB Server 1.4%
• CVE-2020-7925 High 7.5 Denial of Service when processing malformed Role names 1.7%
• CVE-2020-7923 Medium 6.5 Specific GeoQuery can cause DoS against MongoDB Server 1.3%
• CVE-2020-7921 Medium 4.6 Administrative action may disable enforcement of per-user IP whitelisting 0.7%