Approved changes feed: RSS · Atom

cpe:2.3:a:mongodb:mongodb:2.5.0:*:*:*:*:*:*:*

part: a version: 2.5.0 update: *

VendorMongodb (1aa156a6-63a9-5032-baaf-10197d408a1e)
ProductMongodb (fa9f1f9b-0cc9-5830-a189-b908276ac432)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/mongodb purl2cpe 2026-06-01 10:11:17.774791
pkg:deb/ubuntu/mongodb purl2cpe 2026-06-01 10:11:17.774792
pkg:github/mongodb/mongo purl2cpe 2026-06-01 10:11:17.774794

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2013-4650 vulnerable 2026-06-03 14:33:18.801794 Details available
MongoDB 2.4.x before 2.4.5 and 2.5.x before 2.5.1 allows remote authenticated users to obtain internal system privileges by leveraging a username of __system in an arbitrary database.
Published: 2013-07-04T10:00:00.000Z
Updated: 2024-09-16T23:11:11.616Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-2132 vulnerable 2026-06-03 14:32:53.867547 Details available
bson/_cbsonmodule.c in the mongo-python-driver (aka. pymongo) before 2.5.2, as used in MongoDB, allows context-dependent attackers to cause a denial of service (NULL pointer dereference and crash) via vectors related to decoding of an "invalid DBRef."
Published: 2013-08-15T17:00:00.000Z
Updated: 2024-08-06T15:27:40.620Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.