Vulnerabilities > Mongodb > Bson

DATE CVE VULNERABILITY TITLE RISK
2020-03-30 CVE-2020-7610 Deserialization of Untrusted Data vulnerability in Mongodb Bson
All versions of bson before 1.1.4 are vulnerable to Deserialization of Untrusted Data.
network
low complexity
mongodb CWE-502
critical
9.8
2020-02-20 CVE-2015-4411 Resource Exhaustion vulnerability in multiple products
The Moped::BSON::ObjecId.legal? method in mongodb/bson-ruby before 3.0.4 as used in rubygem-moped allows remote attackers to cause a denial of service (worker resource consumption) via a crafted string.
network
low complexity
mongodb fedoraproject CWE-400
7.5