Apache Couchdb vulnerabilities

• apache couchdb, apache software foundation ibm cloudant +1 more Apache CouchDB, IBM Cloudant: Privilege Escalation Using _design Documents CVE-2023-45725 Fix available 5.7 MediumDecember 13, 2023
• apache couchdb, apache software foundation ibm cloudant, ibm cloudant +2 more Apache CouchDB, IBM Cloudant: Information sharing via couchjs processes CVE-2023-26268 Fix available 4.4 MediumMay 2, 2023
• apache couchdb Remote Code Execution Vulnerability in Packaging CVE-2022-24706 In KEVPublic exploitFix available EPSS 92.5% 9.8 CriticalApril 26, 2022
• apache couchdb, apache software foundation ibm cloudant +1 more Privilege escalation vulnerability when using HTML attachments CVE-2021-38295 Public exploitFix available 7.3 HighOctober 14, 2021
• apache couchdb CouchDB version 3.0.0 shipped with a new configuration setting that governs access control to the... CVE-2020-1955 Fix available 9.8 CriticalMay 20, 2020
• apache couchdb Prior to CouchDB version 2.3.0, CouchDB allowed for runtime-configuration of key components of... CVE-2018-17188 7.2 HighJanuary 2, 2019
• apache couchdb CouchDB in Vectra Networks Cognito Brain and Sensor before 4.3 contains a local code execution... CVE-2018-14889 7.8 HighSeptember 21, 2018
• apache couchdb CouchDB administrative users before 2.2.0 can configure the database server via HTTP(S). Due to... CVE-2018-11769 Fix available 7.2 HighAugust 8, 2018
• apache couchdb Apache CouchDB administrative users can configure the database server via HTTP(S). Due to... CVE-2018-8007 Fix available EPSS 12.2% 7.2 HighJuly 11, 2018
• apache couchdb The Windows installer that the Apache CouchDB team provides was vulnerable to local privilege... CVE-2016-8742 Public exploit 7.8 HighFebruary 12, 2018
• apache couchdb CouchDB administrative users can configure the database server via HTTP(S). Some of the... CVE-2017-12636 Public exploitFix available EPSS 90.6% 7.2 HighNovember 14, 2017
• apache couchdb Due to differences in the Erlang-based JSON parser and JavaScript-based JSON parser, it is... CVE-2017-12635 Public exploitFix available EPSS 99.8% 9.8 CriticalNovember 14, 2017
• apache couchdb Apache CouchDB before 1.0.4, 1.1.x before 1.1.2, and 1.2.x before 1.2.1 allows remote attackers... CVE-2012-5649 6.8 MediumMay 23, 2014
• apache couchdb Apache CouchDB 1.5.0 and earlier allows remote attackers to cause a denial of service (CPU and... CVE-2014-2668 Public exploitFix available EPSS 22.7% 5.0 MediumMarch 28, 2014
• apache couchdb Cross-site scripting (XSS) vulnerability in the Futon UI in Apache CouchDB before 1.0.4, 1.1.x... CVE-2012-5650 4.3 MediumMarch 18, 2014
• apache couchdb, mochiweb project mochiweb +1 more Directory traversal vulnerability in the partition2 function in mochiweb_util.erl in MochiWeb... CVE-2012-5641 5.0 MediumMarch 18, 2014
• apache couchdb Multiple cross-site scripting (XSS) vulnerabilities in the web administration interface (aka... CVE-2010-3854 4.3 MediumFebruary 2, 2011
• apache couchdb Untrusted search path vulnerability in a certain Debian GNU/Linux patch for the couchdb script in... CVE-2010-2953 Fix available 6.9 MediumSeptember 9, 2010
• apache couchdb Cross-site request forgery (CSRF) vulnerability in Apache CouchDB 0.8.0 through 0.11.0 allows... CVE-2010-2234 6.8 MediumAugust 19, 2010
• apache couchdb Apache CouchDB 0.8.0 through 0.10.1 allows remote attackers to obtain sensitive information by... CVE-2010-0009 4.3 MediumApril 5, 2010