Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium6.1A specially crafted aggregation query with $lookup by an authenticated user with write privileges can cause a double-free or use-after-free memory issue in the slot-ba…Mar 17, 2026
- High8.7A use-after-free vulnerability can be triggered in sharded clusters by an authenticated user with the read role who issues a specially crafted $lookup or $graphLookup…Mar 17, 2026
- High7.1An authenticated user with the read role may read limited amounts of uninitialized stack memory via specially-crafted issuances of the filemd5 command.Mar 17, 2026
- Critical9.8On SimStudio version below to 0.5.74, the MongoDB tool endpoints accept arbitrary connection parameters from the caller without authentication or host restrictions.Mar 2, 2026
- High8.7MongoDB and MongoDB Server Improper Handling of Length Parameter Inconsistency VulnerabilityKEVEPSS 83.2%Dec 19, 2025
- Critical9.9MongoDB mongo-express Remote Code Execution VulnerabilityKEVEPSS 84.7%Dec 24, 2019
31 records · page 2 of 2
PreviousNext