Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

Filtered by vendor Mongodb Subscribe
Filtered by product Mongodb
Total 42 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2013-3969 1 Mongodb 1 Mongodb 2013-10-02 6.5 MEDIUM N/A
The find prototype in scripting/engine_v8.h in MongoDB 2.4.0 through 2.4.4 allows remote authenticated users to cause a denial of service (uninitialized pointer dereference and server crash) or possibly execute arbitrary code via an invalid RefDB object.
CVE-2013-4650 1 Mongodb 1 Mongodb 2013-07-04 6.5 MEDIUM N/A
MongoDB 2.4.x before 2.4.5 and 2.5.x before 2.5.1 allows remote authenticated users to obtain internal system privileges by leveraging a username of __system in an arbitrary database.