| CVE-2026-107755 |
Insufficient filtering of credentials in the _replicator database in Apache CouchDB 3.5.2 and below on all platforms…
|
6.0
Moyenne
|
20 oct. 2026 |
| CVE-2026-90800 |
Missing authorisation checks in chttpd in Apache CouchDB 3.5.2 and below on all platforms allows any request to read the…
|
8.1
Élevée
|
20 oct. 2026 |
| CVE-2026-90799 |
Unsafe binary deserialisation in chttpd in Apache CouchDB 3.5.2 and below on all platforms allows an authenticated…
|
1.3
Faible
|
20 oct. 2026 |
| CVE-2026-90798 |
A missing circuit-breaker in the replicator in Apache CouchDB 3.5.2 and below on all platforms allows the owner of a…
|
0.6
Faible
|
20 oct. 2026 |
| CVE-2026-90797 |
An unlimited gzip decompression routine in chttpd in Apache CouchDB 3.5.2 and below on all platforms allows any remote…
|
7.7
Élevée
|
20 oct. 2026 |
| CVE-2026-86471 |
An unvalidated runtime configuration value in Apache CouchDB 3.5.2 and below on all platforms allows a CouchDB server…
|
9.3
Critique
|
20 oct. 2026 |
| CVE-2023-45725 |
Design document functions which receive a user http request object may expose authorization or session cookie headers of…
|
Non notée
|
13 déc. 2023 |
| CVE-2023-26268 |
Design documents with matching document IDs, from databases on the same cluster, may share a mutable Javascript…
|
4.4
Moyenne
|
2 mai 2023 |
| CVE-2022-24706 |
Exploitée
Apache CouchDB Insecure Default Initialization of Resource Vulnerability
|
Non notée
|
26 avr. 2022 |
| CVE-2021-38295 |
In Apache CouchDB, a malicious user with permission to create documents in a database is able to attach a HTML…
|
Non notée
|
14 oct. 2021 |
| CVE-2018-17188 |
Prior to CouchDB version 2.3.0, CouchDB allowed for runtime-configuration of key components of the database
|
Non notée
|
2 janv. 2019 |
| CVE-2018-11769 |
CouchDB administrative users before 2.2.0 can configure the database server via HTTP(S)
|
Non notée
|
8 août 2018 |
| CVE-2018-8007 |
Apache CouchDB administrative users can configure the database server via HTTP(S)
|
Non notée
|
11 juil. 2018 |
| CVE-2016-8742 |
The Windows installer that the Apache CouchDB team provides was vulnerable to local privilege escalation
|
Non notée
|
12 févr. 2018 |
| CVE-2017-12636 |
CouchDB administrative users can configure the database server via HTTP(S)
|
Non notée
|
14 nov. 2017 |
| CVE-2017-12635 |
Due to differences in the Erlang-based JSON parser and JavaScript-based JSON parser, it is possible in Apache CouchDB…
|
Non notée
|
14 nov. 2017 |