CVE-2010-3854

CVE-2010-3854 affects Apache CouchDB Futon (web admin) from versions 0.8.0 through 1.0.1, where multiple XSS vulnerabilities permit remote script/HTML injection via unspecified vectors. Core issue: improper input handling in Futon. Impact is remote script execution in the admin interface context....

Apache CouchDB Web Administration Interface 0.8.x <= 1.0.1 XSS Vulnerability

Apache CouchDB is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2010-3854: Apache CouchDB Cross Site Scripting Issue

CVE-2010-3854: Apache CouchDB Cross Site Scripting Issue Severity: Important Vendor: The Apache Software Foundation Versions Affected: Apache CouchDB 0.8.0 to 1.0.1 Description: Apache CouchDB versions prior to version 1.0.2 are vulnerable to cross site scripting XSS attacks. Mitigation: All user...

IBM DB2, IBM Informix, ЛИНТЕР [Редковстречающиеся СУБД]

Intro- Буду краток: рассмотрим здесь особенности СУБД, которые попадаются на глаза довольно редко. Я расскажу о 3х из них: IBM DB2, IBM Informix и ЛИНТЕР. Также в приложении можно обнаружить эксплоиты к ним и подобранную информацию о таких субд как Apache CouchDB, Berkeley DB, CUBRID, H2,...

Debian Security Advisory DSA 2107-1 (couchdb)

The remote host is missing an update to couchdb announced via advisory DSA 2107-1. OpenVAS Vulnerability Test $Id: deb21071.nasl 6614 2017-07-07 12:09:12Z cfischer $ Description: Auto-generated from advisory DSA 2107-1 couchdb Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...

Debian: Security Advisory (DSA-2107-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for couchdb FEDORA-2010-13640

Check for the Version of couchdb OpenVAS Vulnerability Test Fedora Update for couchdb FEDORA-2010-13640 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Fedora Update for couchdb FEDORA-2010-13665

Check for the Version of couchdb OpenVAS Vulnerability Test Fedora Update for couchdb FEDORA-2010-13665 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Fedora Update for couchdb FEDORA-2010-13640

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for couchdb FEDORA-2010-13665

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

[SECURITY] Fedora 13 Update: couchdb-0.11.2-2.fc13

Apache CouchDB is a distributed, fault-tolerant and schema-free document-oriented database accessible via a RESTful HTTP/JSON API. Among other features, it provides robust, incremental replication with bi-directional conflict detection and resolution, and is queryable and indexable using a...

[SECURITY] Fedora 12 Update: couchdb-0.11.2-2.fc12

Apache CouchDB is a distributed, fault-tolerant and schema-free document-oriented database accessible via a RESTful HTTP/JSON API. Among other features, it provides robust, incremental replication with bi-directional conflict detection and resolution, and is queryable and indexable using a...

Fedora 12 : couchdb-0.11.2-2.fc12 (2010-13665)

Despite the fact that this is a security-related fix I would like to test these packages for a while because of possible API incompatibilities version upgrade. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has...

Fedora 13 : couchdb-0.11.2-2.fc13 (2010-13640)

Despite the fact that this is a security-related fix I would like to test these packages for a while because of possible API incompatibilities version upgrade. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has...

CVE-2010-2953

Untrusted search path vulnerability in a certain Debian GNU/Linux patch for the couchdb script in CouchDB 0.8.0 allows local users to gain privileges via a crafted shared library in the current working directory...

CVE-2010-2953

Untrusted search path vulnerability in a certain Debian GNU/Linux patch for the couchdb script in CouchDB 0.8.0 allows local users to gain privileges via a crafted shared library in the current working directory...

Design/Logic Flaw

Untrusted search path vulnerability in a certain Debian GNU/Linux patch for the couchdb script in CouchDB 0.8.0 allows local users to gain privileges via a crafted shared library in the current working directory...

CVE-2010-2953

Untrusted search path vulnerability in a certain Debian GNU/Linux patch for the couchdb script in CouchDB 0.8.0 allows local users to gain privileges via a crafted shared library in the current working directory...

CVE-2010-2953

Technical details about CVE-2010-2953 (affected products, root cause, and fixes) are not publicly provided in the supplied documents; monitor for updates from vendors and security advisories.

[SECURITY] [DSA 2107-1] New couchdb package fixes arbitrary code execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - - ------------------------------------------------------------------------ Debian Security Advisory DSA-2107-1 [email protected] http://www.debian.org/security/ Sebastien Delafond Sep 9, 2010 http://www.debian.org/security/faq - -...