Couchbase vulnerabilities, page 4
71 vulnerabilities
Known vulnerabilities in Couchbase products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 6 products.
CVE-2023-45873couchbasecouchbase_server
EPSS score0.66%
An issue was discovered in Couchbase Server through 7.2.2. A data reader may cause a denial of service (application exist) because of the OOM killer.CVE-2023-45874couchbasecouchbase_serverEPSS score0.76%
An issue was discovered in Couchbase Server through 7.2.2. A data reader may cause a denial of service (outage of reader threads).CVE-2023-28470couchbasecouchbase_serverEPSS score0.63%
In Couchbase Server 5 through 7 before 7.1.4, the nsstats endpoint is accessible without authentication.CVE-2023-49931couchbasecouchbase_serverEPSS score0.90%
An issue was discovered in Couchbase Server before 7.2.4. SQL++ cURL calls to /diag/eval are not sufficiently restricted.CVE-2023-49930couchbasecouchbase_serverEPSS score0.90%
An issue was discovered in Couchbase Server before 7.2.4. cURL calls to /diag/eval are not sufficiently restricted.CVE-2023-49932couchbasecouchbase_serverEPSS score0.53%
An issue was discovered in Couchbase Server before 7.2.4. An attacker can bypass SQL++ N1QL cURL host restrictions.CVE-2023-49338couchbasecouchbase_serverEPSS score0.60%
Couchbase Server 7.1.x and 7.2.x before 7.2.4 does not require authentication for the /admin/stats and /admin/vitals endpoints on TCP port 8093 of localhost.CVE-2023-3079chainguardhyperv-daemons-generic+39KEVEPSS score37.86%
Type confusion in V8 in Google Chrome prior to 114.0.5735.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)CVE-2023-50782chainguardairflow+72EPSS score1.12%
A flaw was found in the python-cryptography package. This issue may allow a remote attacker to decrypt captured messages in TLS servers that use RSA key exchanges, which may lead to exposure of confidential or sensitive data.CVE-2023-50436couchbasecouchbase_serverEPSS score0.24%
An issue was discovered in Couchbase Server before 7.2.4. ns_server admin credentials are leaked in encoded form in the diag.log file. The earliest affected version is 7.1.5.CVE-2023-50437couchbasecouchbase_serverEPSS score0.68%
An issue was discovered in Couchbase Server before 7.2.x before 7.2.4. otpCookie is shown with full admin on pools/default/serverGroups and engageCluster2.