Search CVE reports
21 – 30 of 1921 results
An authenticated user with limited read privileges may be able to access documents from collections they are not authorized to read, due to an inconsistency in how the $graphLookup aggregation stage is evaluated...
1 affected package
mongodb
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| mongodb | Not in release | Not in release | Not in release | Needs evaluation | Needs evaluation |
An authenticated user with low privileges may be able to perform unauthorized reads and writes on data protected by role-based query-level access controls, due to insufficient validation of certain client-supplied command...
1 affected package
mongodb
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| mongodb | Not in release | Not in release | Not in release | Needs evaluation | Needs evaluation |
An authenticated user with basic write privileges can cause the mongod process to terminate abnormally by sending a crafted transaction command with an incomplete set of required fields. The issue stems from inconsistent...
1 affected package
mongodb
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| mongodb | Not in release | Not in release | Not in release | Needs evaluation | Needs evaluation |
An issue in the server’s Atlas Search integration allows an authenticated user to bypass per-user access controls. In sharded topologies, the $search and $searchMeta aggregation stages use internal routing that is normally...
1 affected package
mongodb
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| mongodb | Not in release | Not in release | Not in release | Needs evaluation | Needs evaluation |
Using expressions that generate large arrays it is possible to craft a query that creates very large intermediate objects in memory, causing the server to crash with OOM error.
1 affected package
mongodb
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| mongodb | Not in release | Not in release | Not in release | Needs evaluation | Needs evaluation |
The `$_internalIndexKey` aggregation expression can be used by any authenticated user to crash a MongoDB server (mongod). The expression fails to handle compound wildcard index specifications, triggering an internal consistency...
1 affected package
mongodb
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| mongodb | Not in release | Not in release | Not in release | Needs evaluation | Needs evaluation |
Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: JSON). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and ...
11 affected packages
mysql-5.5, mysql-5.7, mysql-8.0, mysql-8.4, mariadb...
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| mysql-5.5 | Not in release | Not in release | Not in release | — | — |
| mysql-5.7 | Not in release | Not in release | Not in release | — | Ignored |
| mysql-8.0 | Not in release | Needs evaluation | Needs evaluation | Needs evaluation | — |
| mysql-8.4 | Needs evaluation | Not in release | Not in release | — | — |
| mariadb | Needs evaluation | Needs evaluation | Not in release | — | — |
| mariadb-10.0 | Not in release | Not in release | Not in release | — | — |
| mariadb-10.1 | Not in release | Not in release | Not in release | — | Needs evaluation |
| mariadb-10.3 | Not in release | Not in release | Not in release | Ignored | — |
| mariadb-10.6 | Not in release | Not in release | Needs evaluation | — | — |
| percona-xtradb-cluster-5.6 | Not in release | Not in release | Not in release | — | — |
| percona-server-5.6 | Not in release | Not in release | Not in release | — | — |
Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Pluggable Auth). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster:...
11 affected packages
mysql-5.5, mysql-5.7, mysql-8.0, mysql-8.4, mariadb...
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| mysql-5.5 | Not in release | Not in release | Not in release | — | — |
| mysql-5.7 | Not in release | Not in release | Not in release | — | Ignored |
| mysql-8.0 | Not in release | Needs evaluation | Needs evaluation | Needs evaluation | — |
| mysql-8.4 | Needs evaluation | Not in release | Not in release | — | — |
| mariadb | Needs evaluation | Needs evaluation | Not in release | — | — |
| mariadb-10.0 | Not in release | Not in release | Not in release | — | — |
| mariadb-10.1 | Not in release | Not in release | Not in release | — | Needs evaluation |
| mariadb-10.3 | Not in release | Not in release | Not in release | Ignored | — |
| mariadb-10.6 | Not in release | Not in release | Needs evaluation | — | — |
| percona-xtradb-cluster-5.6 | Not in release | Not in release | Not in release | — | — |
| percona-server-5.6 | Not in release | Not in release | Not in release | — | — |
Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster:...
11 affected packages
mysql-5.5, mysql-5.7, mysql-8.0, mysql-8.4, mariadb...
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| mysql-5.5 | Not in release | Not in release | Not in release | — | — |
| mysql-5.7 | Not in release | Not in release | Not in release | — | Ignored |
| mysql-8.0 | Not in release | Needs evaluation | Needs evaluation | Needs evaluation | — |
| mysql-8.4 | Needs evaluation | Not in release | Not in release | — | — |
| mariadb | Needs evaluation | Needs evaluation | Not in release | — | — |
| mariadb-10.0 | Not in release | Not in release | Not in release | — | — |
| mariadb-10.1 | Not in release | Not in release | Not in release | — | Needs evaluation |
| mariadb-10.3 | Not in release | Not in release | Not in release | Ignored | — |
| mariadb-10.6 | Not in release | Not in release | Needs evaluation | — | — |
| percona-xtradb-cluster-5.6 | Not in release | Not in release | Not in release | — | — |
| percona-server-5.6 | Not in release | Not in release | Not in release | — | — |
Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Performance Schema). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47,...
11 affected packages
mysql-5.5, mysql-5.7, mysql-8.0, mysql-8.4, mariadb...
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| mysql-5.5 | Not in release | Not in release | Not in release | — | — |
| mysql-5.7 | Not in release | Not in release | Not in release | — | Ignored |
| mysql-8.0 | Not in release | Needs evaluation | Needs evaluation | Needs evaluation | — |
| mysql-8.4 | Needs evaluation | Not in release | Not in release | — | — |
| mariadb | Needs evaluation | Needs evaluation | Not in release | — | — |
| mariadb-10.0 | Not in release | Not in release | Not in release | — | — |
| mariadb-10.1 | Not in release | Not in release | Not in release | — | Needs evaluation |
| mariadb-10.3 | Not in release | Not in release | Not in release | Ignored | — |
| mariadb-10.6 | Not in release | Not in release | Needs evaluation | — | — |
| percona-xtradb-cluster-5.6 | Not in release | Not in release | Not in release | — | — |
| percona-server-5.6 | Not in release | Not in release | Not in release | — | — |