CVE-2020-7928
- EPSS 0.48%
- Published 23.11.2020 17:15:12
- Last modified 21.11.2024 05:38:01
A user authorized to perform database queries may trigger a read overrun and access arbitrary memory by issuing specially crafted queries. This issue affects MongoDB Server v4.4 versions prior to 4.4.1; MongoDB Server v4.2 versions prior to 4.2.9; Mo...
CVE-2019-2393
- EPSS 0.43%
- Published 23.11.2020 16:15:13
- Last modified 21.11.2024 04:40:47
A user authorized to perform database queries may trigger denial of service by issuing specially crafted queries, which use $lookup and collations. This issue affects MongoDB Server v4.2 versions prior to 4.2.1; MongoDB Server v4.0 versions prior to ...
CVE-2019-2392
- EPSS 0.43%
- Published 23.11.2020 16:15:12
- Last modified 21.11.2024 04:40:46
A user authorized to perform database queries may trigger denial of service by issuing specially crafted queries, which use the $mod operator to overflow negative values. This issue affects: MongoDB Inc. MongoDB Server v4.4 versions prior to 4.4.1; v...
CVE-2018-20802
- EPSS 0.43%
- Published 23.11.2020 16:15:12
- Last modified 21.11.2024 04:02:12
A user authorized to perform database queries may trigger denial of service by issuing specially crafted queries with compound indexes affecting QueryPlanner. This issue affects MongoDB Server v3.6 versions prior to 3.6.9 and MongoDB Server v4.0 vers...
CVE-2018-20804
- EPSS 0.43%
- Published 23.11.2020 16:15:12
- Last modified 21.11.2024 04:02:12
A user authorized to perform database queries may trigger denial of service by issuing specially crafted applyOps invocations. This issue affects MongoDB Server v4.0 versions prior to 4.0.10 and MongoDB Server v3.6 versions prior to 3.6.13.
CVE-2018-20805
- EPSS 0.43%
- Published 23.11.2020 16:15:12
- Last modified 21.11.2024 04:02:13
A user authorized to perform database queries may trigger denial of service by issuing specially crafted queries, which perform an $elemMatch . This issue affects MongoDB Server v4.0 versions prior to 4.0.5 and MongoDB Server v3.6 versions prior to 3...
CVE-2019-20923
- EPSS 0.43%
- Published 23.11.2020 16:15:12
- Last modified 21.11.2024 04:39:42
A user authorized to perform database queries may trigger denial of service by issuing specially crafted queries, which throw unhandled Javascript exceptions containing types intended to be scoped to the Javascript engine's internals. This issue affe...
CVE-2019-20924
- EPSS 0.43%
- Published 23.11.2020 16:15:12
- Last modified 21.11.2024 04:39:42
A user authorized to perform database queries may trigger denial of service by issuing specially crafted queries which trigger an invariant in the IndexBoundsBuilder. This issue affects MongoDB Server v4.2 versions prior to 4.2.2.
CVE-2020-7926
- EPSS 0.44%
- Published 23.11.2020 15:15:11
- Last modified 21.11.2024 05:38:01
A user authorized to perform database queries may cause denial of service by issuing a specially crafted query which violates an invariant in the server selection subsystem. This issue affects MongoDB Server v4.4 versions prior to 4.4.1. Versions bef...
CVE-2020-7925
- EPSS 1.67%
- Published 23.11.2020 15:15:11
- Last modified 21.11.2024 05:38:01
Incorrect validation of user input in the role name parser may lead to use of uninitialized memory allowing an unauthenticated attacker to use a specially crafted request to cause a denial of service. This issue affects MongoDB Server v4.4 versions p...