777 matches found
CVE-2025-46619
A security issue in Couchbase Server (versions prior to 7.6.4 ) allows unauthorized access to sensitive files due to improper access control. Depending on the user's privilege level, an attacker could gain access to sensitive files such as /etc/passwd or /etc/shadow . To remediate this vulnerabil...
PT-2025-18309 · Couchbase · Couchbase Server
Name of the Vulnerable Software and Affected Versions: Couchbase Server versions prior to 7.6.4 Couchbase Server version 7.2.7 and earlier for Windows Description: A security issue has been discovered that could allow unauthorized access to sensitive files, potentially granting access to files su...
CVE-2025-46619: Improper Access Control
A security issue has been discovered in Couchbase Server before 7.6.4 and fixed in v.7.6.4 and v.7.2.7 for Windows that could allow unauthorized access to sensitive files. Depending on the level of privileges, this vulnerability may grant access to files such as /etc/passwd or /etc/shadow...
SQL injection vulnerabilities in multiple vector stores
Description Multiple vector store integrations have SQL injection vulnerabilities, which can allow an attacker to read and write data using SQL. Example vulnerable code snippet in the Couchbase vector store integration: def deleteself, refdocid: str, kwargs: Any - None: """ Delete a document by i...
Couchbase Server Privilege Escalation
The vulnerability of Couchbase Server, a NoSQL database management system, is related to improper permission storage. Exploiting this vulnerability can allow an attacker to enhance their privileges remotely...
CVE-2024-56178
An issue was discovered in Couchbase Server 7.6.x through 7.6.3. A user with the securityadminlocal role can create a new user in a group that has the admin role...
CVE-2024-56178
An issue was discovered in Couchbase Server 7.6.x through 7.6.3. A user with the securityadminlocal role can create a new user in a group that has the admin role...
CVE-2024-56178
A security vulnerability exists in Couchbase Server versions 7.6.x through 7.6.3 due to improper permission storage . An attacker with the security_admin_local role can exploit this issue to create new users within a group that holds the admin role, leading to a significant privilege escalation ....
CVE-2024-56178
An issue was discovered in Couchbase Server 7.6.x through 7.6.3. A user with the securityadminlocal role can create a new user in a group that has the admin role...
CVE-2024-56178
An issue was discovered in Couchbase Server 7.6.x through 7.6.3. A user with the securityadminlocal role can create a new user in a group that has the admin role...
Couchbase Server 安全漏洞
Couchbase Server is a distributed open source NoSQL non-relational database from Couchbase, Inc. in the United States. It supports data query, full-text search and active global replication. A security vulnerability exists in Couchbase Server versions 7.6.x through 7.6.3. An attacker could exploi...
CVE-2024-56178: Improper Preservation of Permissions
An issue was discovered in Couchbase Server 7.6.x through 7.6.3. A user with the securityadminlocal role can create a new user in a group that has the admin role...
Couchbase < 7.2.6 / 7.6.x < 7.6.2 HTTP Host Header Injection
The version of Couchbase installed on the remote host is before 7.2.6, and 7.6.x before 7.6.2. It is, therefore, affected by a HTTP Host header injection. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL...
Couchbase 2.x < 7.2.5 Out-of-Bounds
The version of Couchbase installed on the remote host is prior to 7.2.5 or 7.6.2. It is, therefore, affected by an Out of bounds memory access exposure in V8 in Google Chrome prior to 120.0.6099.224. This allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. Not...
Couchbase 6.x < 7.2.5 / 7.6.x < 7.6.1 Information Disclosure
The version of Couchbase installed on the remote host is 6.x, prior to 7.2.5, and 7.6.x prior to 7.6.1. It is, therefore, affected by an information disclosure issue. It does not ensure that credentials are negotiated with the Key-Value KV service using SCRAM-SHA when remote link encryption is...
PT-2025-3199 · Couchbase · Couchbase Server
Name of the Vulnerable Software and Affected Versions: Couchbase Server versions 7.6.x through 7.6.3 Description: An issue was discovered that allows a user with the security admin local role to create a new user in a group that has the admin role. This is related to incorrect permission storage...
Couchbase Server Installed (Linux / Unix)
Binary data couchbaseservernixinstalled.nbin...
Couchbase Server Installed (Windows)
Binary data couchbaseserverwininstalled.nbin...