Search CVE reports


Toggle filters

81 – 90 of 1787 results


CVE-2025-50078

Medium priority

Some fixes available 5 of 11

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Easily exploitable vulnerability allows low privileged...

11 affected packages

mysql-5.5, mysql-5.7, mysql-8.0, mysql-8.4, mariadb...

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
mysql-5.5 Not in release Not in release
mysql-5.7 Not in release Not in release Ignored
mysql-8.0 Fixed Fixed Fixed
mysql-8.4 Not in release Not in release
mariadb Not affected Not in release
mariadb-10.0 Not in release Not in release
mariadb-10.1 Not in release Not in release Not affected
mariadb-10.3 Not in release Not in release Ignored
mariadb-10.6 Not in release Not affected
percona-xtradb-cluster-5.6 Not in release Not in release
percona-server-5.6 Not in release Not in release
Show all 11 packages Show less packages

CVE-2025-50077

Medium priority

Some fixes available 5 of 11

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Easily exploitable vulnerability allows high privileged attacker...

11 affected packages

mysql-5.5, mysql-5.7, mysql-8.0, mysql-8.4, mariadb...

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
mysql-5.5 Not in release Not in release
mysql-5.7 Not in release Not in release Ignored
mysql-8.0 Fixed Fixed Fixed
mysql-8.4 Not in release Not in release
mariadb Not affected Not in release
mariadb-10.0 Not in release Not in release
mariadb-10.1 Not in release Not in release Not affected
mariadb-10.3 Not in release Not in release Ignored
mariadb-10.6 Not in release Not affected
percona-xtradb-cluster-5.6 Not in release Not in release
percona-server-5.6 Not in release Not in release
Show all 11 packages Show less packages

CVE-2025-50076

Medium priority

Some fixes available 2 of 8

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.0-8.0.25. Easily exploitable vulnerability allows low privileged attacker with network access via...

11 affected packages

mysql-5.5, mysql-5.7, mysql-8.0, mysql-8.4, mariadb...

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
mysql-5.5 Not in release Not in release
mysql-5.7 Not in release Not in release Ignored
mysql-8.0 Fixed Fixed Not affected
mysql-8.4 Not in release Not in release
mariadb Not affected Not in release
mariadb-10.0 Not in release Not in release
mariadb-10.1 Not in release Not in release Not affected
mariadb-10.3 Not in release Not in release Ignored
mariadb-10.6 Not in release Not affected
percona-xtradb-cluster-5.6 Not in release Not in release
percona-server-5.6 Not in release Not in release
Show all 11 packages Show less packages

CVE-2025-7259

Medium priority
Vulnerable

An authorized user can issue queries with duplicate _id fields, that leads to unexpected behavior in MongoDB Server, which may result to crash. This issue can only be triggered by authorized users and cause Denial of Service. This...

1 affected package

mongodb

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
mongodb Not in release Not in release Vulnerable Vulnerable
Show less packages

CVE-2025-6714

Medium priority
Vulnerable

MongoDB Server's mongos component can become unresponsive to new connections due to incorrect handling of incomplete data. This affects MongoDB when configured with load balancer support. This issue affects MongoDB Server v6.0...

1 affected package

mongodb

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
mongodb Not in release Not in release Vulnerable Vulnerable
Show less packages

CVE-2025-6713

Medium priority
Vulnerable

An unauthorized user may leverage a specially crafted aggregation pipeline to access data without proper authorization due to improper handling of the $mergeCursors stage in MongoDB Server. This may lead to access to data without...

1 affected package

mongodb

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
mongodb Not in release Not in release Vulnerable Vulnerable
Show less packages

CVE-2025-6712

Medium priority
Vulnerable

MongoDB Server may be susceptible to disruption caused by high memory usage, potentially leading to server crash. This condition is linked to inefficiencies in memory management related to internal operations. In scenarios where...

1 affected package

mongodb

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
mongodb Not in release Not in release Vulnerable Vulnerable
Show less packages

CVE-2025-6711

Medium priority
Vulnerable

An issue has been identified in MongoDB Server where unredacted queries may inadvertently appear in server logs when certain error conditions are encountered. This issue affects MongoDB Server v8.0 versions prior to 8.0.5, MongoDB...

1 affected package

mongodb

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
mongodb Not in release Not in release Vulnerable Vulnerable
Show less packages

CVE-2025-6710

Medium priority
Vulnerable

MongoDB Server may be susceptible to stack overflow due to JSON parsing mechanism, where specifically crafted JSON inputs may induce unwarranted levels of recursion, resulting in excessive stack space consumption. Such inputs can...

1 affected package

mongodb

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
mongodb Not in release Not in release Vulnerable Vulnerable
Show less packages

CVE-2025-6709

Medium priority
Vulnerable

The MongoDB Server is susceptible to a denial of service vulnerability due to improper handling of specific date values in JSON input when using OIDC authentication. This can be reproduced using the mongo shell to send a malicious...

1 affected package

mongodb

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
mongodb Not in release Not in release Vulnerable Vulnerable
Show less packages