Vulnerabilities (CVE)

Filtered by vendor Mongodb Subscribe
Filtered by product Mongodb
Total 42 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2013-3969 1 Mongodb 1 Mongodb 2013-10-02 6.5 MEDIUM N/A
The find prototype in scripting/engine_v8.h in MongoDB 2.4.0 through 2.4.4 allows remote authenticated users to cause a denial of service (uninitialized pointer dereference and server crash) or possibly execute arbitrary code via an invalid RefDB object.
CVE-2013-4650 1 Mongodb 1 Mongodb 2013-07-05 6.5 MEDIUM N/A
MongoDB 2.4.x before 2.4.5 and 2.5.x before 2.5.1 allows remote authenticated users to obtain internal system privileges by leveraging a username of __system in an arbitrary database.