Couchbase

Records71All Threatist records

Exploited (KEV)3In CISA KEV

CVSS critical10CVSS 9.0–10.0

CVSS high36CVSS 7.0–8.9

Exploited now

Couchbase records in CISA KEV

TI-2024-00478 Google Chromium V8 Out-of-Bounds Memory Access Vulnerability CRITICAL 97KEV 2024-01-17 TI-2023-02885 Google Chromium V8 Type Confusion Vulnerability CRITICAL 97KEV 2023-06-07 TI-2023-01910 Google Chromium V8 Type Confusion Vulnerability CRITICAL 97KEV 2023-04-17

Components

Products in the NVD configurations · select one to filter the records

Couchbase Server 63 records CRITICAL Sync Gateway 5 records MEDIUM .net Sdk 1 record LOW Bleve 1 record LOW Cloud Native Operator 1 record LOW Couchbase Server Java Sdk 1 record LOW

Records

71 records

TI-2024-00478 CVE-2024-0519 · GHSA-vg6w-jr5m-86c8

Out-of-bounds read in Google Chrome

CRITICAL 97KEV

Out of bounds memory access in V8 in Google Chrome prior to 120.0.6099.224 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.03802 Published 2024-01-16 Fixed in 120.0.6099.224 CWE-125

TI-2023-02885 CVE-2023-3079 · GHSA-8mwf-hvfp-6xfg

Type confusion in Google Chrome

CRITICAL 97KEV

Type confusion in V8 in Google Chrome prior to 114.0.5735.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.37858 Published 2023-06-05 Fixed in 114.0.5735.110 CWE-843

TI-2023-01910 CVE-2023-2033 · GHSA-5gxv-52gp-vmhp

Type confusion in Google Chrome

CRITICAL 97KEV

Type confusion in V8 in Google Chrome prior to 112.0.5615.121 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.40648 Published 2023-04-14 Fixed in 112.0.5615.121 CWE-843

TI-2023-27712 CVE-2023-50782 · GHSA-3ww4-gg4f-jr7f

Python-cryptography: bleichenbacher timing oracle attack against rsa decryption - incomplete fix for cve-2020-25659

HIGH 66

A flaw was found in the python-cryptography package.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01118 Published 2024-02-05 Partial fix · 42.0.0 CWE-203

TI-2020-15177 CVE-2020-24719 · GHSA-gvjj-4rcj-mxhw

Exposed Erlang Cookie could lead to Remote Command Execution (RCE) attack.

MEDIUM 62

Exposed Erlang Cookie could lead to Remote Command Execution (RCE) attack.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.23304 Published 2020-11-12 No fix listed CWE-78

TI-2023-27298 CVE-2023-49931 · GHSA-489r-g239-g94j

An issue was discovered in Couchbase Server before 7.2.4.

MEDIUM 51

An issue was discovered in Couchbase Server before 7.2.4.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00902 Published 2024-02-28 No fix listed CWE-284

TI-2020-07255 CVE-2020-9039 · GHSA-j2x2-7857-rm23

Couchbase Server 4.0.0, 4.1.0, 4.1.1, 4.5.0, 4.5.1, 4.6.0 through 4.6.5, 5.0.0, 5.1.1…

MEDIUM 49

Couchbase Server 4.0.0, 4.1.0, 4.1.1, 4.5.0, 4.5.1, 4.6.0 through 4.6.5, 5.0.0, 5.1.1, 5.5.0 and 5.5.1 have Insecure Permissions for the projector and indexer REST endpoints (they allow unauthenticated access).The /setti…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03939 Published 2020-02-22 No fix listed CWE-276

TI-2019-06524 CVE-2019-9039 · GHSA-g622-r636-qfqh

In Couchbase Sync Gateway 2.1.2, an attacker with access to the Sync Gateway’s public…

MEDIUM 47

In Couchbase Sync Gateway 2.1.2, an attacker with access to the Sync Gateway’s public REST API was able to issue additional N1QL statements and extract sensitive data or call arbitrary N1QL functions through the paramete…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02741 Published 2019-06-26 Fixed in 2.5.0 CWE-89

TI-2019-08586 CVE-2019-11495 · GHSA-55q6-9vmq-6mv6

In Couchbase Server 5.1.1, the cookie used for intra-node communication was not generated…

MEDIUM 46

In Couchbase Server 5.1.1, the cookie used for intra-node communication was not generated securely.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02139 Published 2019-09-10 No fix listed CWE-335

TI-2023-27584 CVE-2023-50437 · GHSA-mrff-v44r-8gc2

An issue was discovered in Couchbase Server before 7.2.x before 7.2.4.

MEDIUM 44

An issue was discovered in Couchbase Server before 7.2.x before 7.2.4.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00683 Published 2024-02-28 No fix listed CWE-266

TI-2023-27297 CVE-2023-49930 · GHSA-rfw9-hv5h-2w85

An issue was discovered in Couchbase Server before 7.2.4.

MEDIUM 44

An issue was discovered in Couchbase Server before 7.2.4.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00902 Published 2024-02-28 No fix listed CWE-284

TI-2022-14194 CVE-2022-32563 · GHSA-9266-j9v3-q4j5

An issue was discovered in Couchbase Sync Gateway 3.x before 3.0.2.

MEDIUM 44

An issue was discovered in Couchbase Sync Gateway 3.x before 3.0.2.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00839 Published 2022-06-10 Fixed in 3.0.2 CWE-295

TI-2021-14398 CVE-2021-35943 · GHSA-cm7f-fcwh-gc62

Couchbase Server 6.5.x and 6.6.x through 6.6.2 has Incorrect Access Control.

MEDIUM 44

Couchbase Server 6.5.x and 6.6.x through 6.6.2 has Incorrect Access Control.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0107 Published 2021-09-29 No fix listed CWE-287

TI-2018-11214 CVE-2018-15728 · GHSA-jmwc-v96p-wc34

Couchbase Server exposed the '/diag/eval' endpoint which by default is available on…

MEDIUM 43

Couchbase Server exposed the '/diag/eval' endpoint which by default is available on TCP/8091 and/or TCP/18091.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.0288 Published 2018-08-24 No fix listed CWE-94

TI-2022-14190 CVE-2022-32559 · GHSA-cmhm-j62g-4h3r

An issue was discovered in Couchbase Server before 7.0.4.

MEDIUM 42

An issue was discovered in Couchbase Server before 7.0.4.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.01368 Published 2022-06-14 No fix listed CWE-770

TI-2019-08587 CVE-2019-11496 · GHSA-44rm-2q9r-5gjr

In versions of Couchbase Server prior to 5.0, the bucket named "default" was a special…

MEDIUM 42

In versions of Couchbase Server prior to 5.0, the bucket named "default" was a special bucket that allowed read and write access without authentication.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.0141 Published 2019-09-10 No fix listed CWE-306

TI-2023-18483 CVE-2023-36667 · GHSA-rvf5-fhrh-vc2m

Couchbase Server 7.1.4 before 7.1.5 and 7.2.0 before 7.2.1 allows Directory Traversal.

MEDIUM 41

Couchbase Server 7.1.4 before 7.1.5 and 7.2.0 before 7.2.1 allows Directory Traversal.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00998 Published 2023-11-08 No fix listed CWE-22

TI-2024-15407 CVE-2024-23302 · GHSA-p6qq-fvj3-9vmg

Couchbase Server before 7.2.4 has a private key leak in goxdcr.log.

MEDIUM 40

Couchbase Server before 7.2.4 has a private key leak in goxdcr.log.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00748 Published 2024-02-28 No fix listed CWE-200

TI-2023-26951 CVE-2023-49338 · GHSA-2977-w3fj-rc33

Couchbase Server 7.1.x and 7.2.x before 7.2.4 does not require authentication for the…

MEDIUM 40

Couchbase Server 7.1.x and 7.2.x before 7.2.4 does not require authentication for the /admin/stats and /admin/vitals endpoints on TCP port 8093 of localhost.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00604 Published 2024-02-28 No fix listed CWE-276

TI-2023-24629 CVE-2023-45875 · GHSA-cm77-ccvm-f7p6

An issue was discovered in Couchbase Server 7.2.0.

MEDIUM 40

An issue was discovered in Couchbase Server 7.2.0.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00736 Published 2023-11-08 No fix listed CWE-200

TI-2023-23466 CVE-2023-43768 · GHSA-vwc8-vmvr-qqcf

An issue was discovered in Couchbase Server 6.6.x through 7.2.0, before 7.1.5 and 7.2.1.

MEDIUM 40

An issue was discovered in Couchbase Server 6.6.x through 7.2.0, before 7.1.5 and 7.2.1.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00749 Published 2024-03-27 No fix listed CWE-770

TI-2022-14193 CVE-2022-32562 · GHSA-vcg8-f42r-c5px

An issue was discovered in Couchbase Server before 7.0.4.

MEDIUM 40

An issue was discovered in Couchbase Server before 7.0.4.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01001 Published 2022-06-13 No fix listed CWE-276

TI-2023-10489 CVE-2023-25016 · GHSA-c2x6-rvvf-2x2v

Couchbase Server before 6.6.6, 7.x before 7.0.5, and 7.1.x before 7.1.2 exposes Sensitive…

LOW 39

Couchbase Server before 6.6.6, 7.x before 7.0.5, and 7.1.x before 7.1.2 exposes Sensitive Information to an Unauthorized Actor.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00446 Published 2023-02-06 No fix listed CWE-319

TI-2020-07258 CVE-2020-9042 · GHSA-fw6f-h6pj-mcvp

In Couchbase Server 6.0, credentials cached by a browser can be used to perform a CSRF…

LOW 39

In Couchbase Server 6.0, credentials cached by a browser can be used to perform a CSRF attack if an administrator has used their browser to check the results of a REST API request.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00591 Published 2020-06-08 No fix listed CWE-352

TI-2022-20937 CVE-2022-42951 · GHSA-jhxg-8fv9-xvgm

An issue was discovered in Couchbase Server 6.5.x and 6.6.x before 6.6.6, 7.x before…

LOW 38

An issue was discovered in Couchbase Server 6.5.x and 6.6.x before 6.6.6, 7.x before 7.0.5, and 7.1.x before 7.1.2.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00657 Published 2023-02-06 No fix listed CWE-287

Open these records in search →