Red Hat OpenStack Platform 10 (Newton)/mongodb

Red Hat · Package

22 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
MongoDB Tools Improper Certificate Validation vulnerabilityCVE-2020-7924 · GHSA-6CWM-WM82-HGRWVersion ranges need review.	github.com/mongodb/mongo-tools Red Hat OpenStack Platform 10 (Newton)/mongodb	GoRed Hat	Medium	Fix reported	2024-07-09
mongodb: Improper invalidation of authorization sessions for deleted usersCVE-2019-2386	Red Hat OpenStack Platform 10 (Newton)/mongodb Red Hat Software Collections/rh-mongodb34-mongodb	Red Hat	Medium	No fix reported	Not recorded
mongodb: DoS via malformed network packetCVE-2019-20925	Red Hat OpenStack Platform 10 (Newton)/mongodb Red Hat Software Collections/rh-mongodb36-mongodb	Red Hat	Medium	No fix reported	Not recorded
mongodb: GeoQuery can lead to DoSCVE-2020-7923	Red Hat OpenStack Platform 10 (Newton)/mongodb Red Hat Satellite 6/mongodb	Red Hat	Medium	No fix reported	Not recorded
mongodb: Improper serialization permits bypass of IP based authentication restrictionsCVE-2020-7921	Red Hat OpenStack Platform 10 (Newton)/mongodb Red Hat Software Collections/rh-mongodb34-mongodb	Red Hat	Medium	No fix reported	Not recorded
mongodb: server log entry spoofing via newline injectionCVE-2021-20333	Red Hat OpenStack Platform 10 (Newton)/mongodb Red Hat Software Collections/rh-mongodb36-mongodb	Red Hat	Low	No fix reported	Not recorded
mongodb: Denial of service via crafted queries which use $lookup and collationsCVE-2019-2393	Red Hat OpenStack Platform 10 (Newton)/mongodb Red Hat Software Collections/rh-mongodb36-mongodb	Red Hat	Medium	No fix reported	Not recorded
mongodb: Denial of service via crafted queries which use the $mod operatorCVE-2019-2392	Red Hat OpenStack Platform 10 (Newton)/mongodb Red Hat Software Collections/rh-mongodb36-mongodb	Red Hat	Medium	No fix reported	Not recorded
mongodb: Incorrect validation of user input in the role name parserCVE-2020-7925	Red Hat OpenStack Platform 10 (Newton)/mongodb	Red Hat	Medium	No fix reported	Not recorded
mongodb: Denial of service via crafted queries which violates an invariant in the server selection subsystemCVE-2020-7926	Red Hat OpenStack Platform 10 (Newton)/mongodb	Red Hat	Medium	No fix reported	Not recorded
mongodb: Denial of service via crafted queries which perform an $elemMatchCVE-2018-20805	Red Hat OpenStack Platform 10 (Newton)/mongodb Red Hat Software Collections/rh-mongodb36-mongodb	Red Hat	Medium	No fix reported	Not recorded
mongodb: Denial of service via specially crafted applyOps invocationsCVE-2018-20804	Red Hat OpenStack Platform 10 (Newton)/mongodb Red Hat Software Collections/rh-mongodb36-mongodb	Red Hat	Medium	No fix reported	Not recorded
mongodb: Denial of service via crafted queries which trigger an invariant in the IndexBoundsBuilderCVE-2019-20924	Red Hat OpenStack Platform 10 (Newton)/mongodb	Red Hat	Medium	No fix reported	Not recorded
mongodb: Denial of service via unhandled Javascript exceptionsCVE-2019-20923	Red Hat OpenStack Platform 10 (Newton)/mongodb	Red Hat	Medium	No fix reported	Not recorded
mongodb: Denial of service via crafted queries with compound indexes affecting QueryPlannerCVE-2018-20802	Red Hat OpenStack Platform 10 (Newton)/mongodb Red Hat Software Collections/rh-mongodb36-mongodb	Red Hat	Medium	No fix reported	Not recorded
mongodb: Read overrun and access of arbitrary memory in $arrayToObjectCVE-2020-7928	Red Hat OpenStack Platform 10 (Newton)/mongodb Red Hat Software Collections/rh-mongodb36-mongodb	Red Hat	Medium	No fix reported	Not recorded
mongodb: Infinite loop in aggregation expressionCVE-2018-20803	Red Hat OpenStack Platform 10 (Newton)/mongodb Red Hat Software Collections/rh-mongodb36-mongodb	Red Hat	Medium	No fix reported	Not recorded
mongodb: Privilege escalation via crafted API callsCVE-2020-7927	Red Hat OpenStack Platform 10 (Newton)/mongodb	Red Hat	Medium	No fix reported	Not recorded
mongodb: Authorized user may trigger denial of service via find queryCVE-2021-20326	Red Hat OpenStack Platform 10 (Newton)/mongodb	Red Hat	Medium	No fix reported	Not recorded
mongodb: Denial of service through generic explain command on a find queryCVE-2018-25004	Red Hat Enterprise Linux OpenStack Platform 7 (Kilo)/mongodb Red Hat OpenStack Platform 10 (Newton)/mongodb	Red Hat	Medium	No fix reported	Not recorded