mongodb/mongo

Releases1.49K

Frequency4 days 9 hours

Last Release 2 days ago

Stars28.4K

The MongoDB Database

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2016-6494 ↗	Oct 3, 2016Monday, 3 October 2016, 18:59	—	2.1 LOW
The client in MongoDB uses world-readable permissions on .dbshell history files, which might allow local users to obtain sensitive information by reading these files.
CVE-2014-3971 ↗	Dec 25, 2014Thursday, 25 December 2014, 11:59	—	5 MEDIUM
The CmdAuthenticate::_authenticateX509 function in db/commands/authentication_commands.cpp in mongod in MongoDB 2.6.x before 2.6.2 allows remote attackers to cause a denial of service (daemon crash) by attempting authentication with an invalid X.509 client certificate.