Priority LOW 34
A security issue has been discovered in Couchbase Server before 7.6.4 and fixed in v.7.6.4 and v.7.2.7 for Windows that could allow unauthorized access to sensitive files.
CVSS 3.1HIGH 7.6· Network · Low privileges · No interaction · EPSS 0.00487 · Published 2025-04-30 · No fix listed CWE-284
Priority LOW 31
An issue was discovered in Couchbase Server 7.6.x through 7.6.3.
CVSS 3.1MEDIUM 6.5· Network · High privileges · No interaction · EPSS 0.00343 · Published 2025-01-27 · No fix listed CWE-281
Priority LOW 27
Couchbase Server 7.6.x before 7.6.2, 7.2.x before 7.2.6, and all earlier versions allows HTTP Host header injection.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00305 · Published 2024-09-19 · No fix listed CWE-74
Priority LOW 26
An issue was discovered in Couchbase Server before 7.2.5 and 7.6.0 before 7.6.1.
CVSS 3.1MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.00158 · Published 2024-07-26 · No fix listed CWE-326
Priority MEDIUM 40
An issue was discovered in Couchbase Server 6.6.x through 7.2.0, before 7.1.5 and 7.2.1.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00749 · Published 2024-03-27 · No fix listed CWE-770
Priority MEDIUM 40
Couchbase Server before 7.2.4 has a private key leak in goxdcr.log.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00748 · Published 2024-02-28 · No fix listed CWE-200
Priority MEDIUM 44
An issue was discovered in Couchbase Server before 7.2.x before 7.2.4.
CVSS 3.1HIGH 8.6· Network · No auth · No interaction · EPSS 0.00683 · Published 2024-02-28 · No fix listed CWE-266
Priority LOW 24
An issue was discovered in Couchbase Server before 7.2.4.
CVSS 3.1MEDIUM 5.3· Local · Low privileges · No interaction · EPSS 0.00237 · Published 2024-02-28 · No fix listed CWE-522
Priority LOW 25
An issue was discovered in Couchbase Server before 7.2.4.
CVSS 3.1MEDIUM 5.4· Network · No auth · User interaction · EPSS 0.00526 · Published 2024-02-28 · No fix listed CWE-281
Priority MEDIUM 51
An issue was discovered in Couchbase Server before 7.2.4.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00902 · Published 2024-02-28 · No fix listed CWE-284
Priority MEDIUM 44
An issue was discovered in Couchbase Server before 7.2.4.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00902 · Published 2024-02-28 · No fix listed CWE-284
Priority MEDIUM 40
Couchbase Server 7.1.x and 7.2.x before 7.2.4 does not require authentication for the /admin/stats and /admin/vitals endpoints on TCP port 8093 of localhost.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00604 · Published 2024-02-28 · No fix listed CWE-276
Priority LOW 21
An issue was discovered in Couchbase Server through 7.2.2.
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00755 · Published 2024-02-28 · No fix listed CWE-400
Priority LOW 30
An issue was discovered in Couchbase Server through 7.2.2.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00663 · Published 2024-02-28 · No fix listed CWE-770
Priority LOW 28
An issue was discovered in Couchbase Server through 7.1.4 before 7.1.5 and before 7.2.1.
CVSS 3.1MEDIUM 6.3· Adjacent network · No auth · No interaction · EPSS 0.00441 · Published 2024-02-28 · No fix listed
Priority HIGH 66
A flaw was found in the python-cryptography package.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01118 · Published 2024-02-05 · Partial fix · 42.0.0 CWE-203
Priority CRITICAL 97KEV
Out of bounds memory access in V8 in Google Chrome prior to 120.0.6099.224 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.03802 · Published 2024-01-16 · Fixed in 120.0.6099.224 CWE-125
Priority MEDIUM 40
An issue was discovered in Couchbase Server 7.2.0.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00736 · Published 2023-11-08 · No fix listed CWE-200
Priority MEDIUM 41
Couchbase Server 7.1.4 before 7.1.5 and 7.2.0 before 7.2.1 allows Directory Traversal.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00998 · Published 2023-11-08 · No fix listed CWE-22
Priority CRITICAL 97KEV
Type confusion in V8 in Google Chrome prior to 114.0.5735.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.37858 · Published 2023-06-05 · Fixed in 114.0.5735.110 CWE-843
Priority CRITICAL 97KEV
Type confusion in V8 in Google Chrome prior to 112.0.5615.121 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.40648 · Published 2023-04-14 · Fixed in 112.0.5615.121 CWE-843
Priority LOW 31
In Couchbase Server 5 through 7 before 7.1.4, the nsstats endpoint is accessible without authentication.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00629 · Published 2023-03-23 · No fix listed CWE-306
Priority LOW 39
Couchbase Server before 6.6.6, 7.x before 7.0.5, and 7.1.x before 7.1.2 exposes Sensitive Information to an Unauthorized Actor.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00446 · Published 2023-02-06 · No fix listed CWE-319
Priority LOW 38
An issue was discovered in Couchbase Server 6.5.x and 6.6.x before 6.6.6, 7.x before 7.0.5, and 7.1.x before 7.1.2.
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.00657 · Published 2023-02-06 · No fix listed CWE-287
Priority LOW 24
An issue was discovered in Couchbase Server 7.x before 7.0.5 and 7.1.x before 7.1.2.
CVSS 3.1MEDIUM 4.9· Network · High privileges · No interaction · EPSS 0.00956 · Published 2023-02-06 · No fix listed CWE-400
Load more
THREATIST.IORead the docs