Lucene search
K

28 matches found

RedhatCVE
RedhatCVE
added 2025/05/22 7:46 p.m.6 views

CVE-2021-32822

The npm hbs package is an Express view engine wrapper for Handlebars. Depending on usage, users of hbs may be vulnerable to a file disclosure vulnerability. There is currently no patch for this vulnerability. hbs mixes pure template data with engine configuration options through the Express rende...

5.3CVSS6.5AI score0.00299EPSS
Exploits1References1
OSV
OSV
added 2024/03/06 10:52 a.m.15 views

BIT-HANDLEBARS-2021-32820 File disclosure in Express Handlebars

Express-handlebars is a Handlebars view engine for Express. Express-handlebars mixes pure template data with engine configuration options through the Express render API. More specifically, the layout parameter may trigger file disclosure vulnerabilities in downstream applications. This potential...

8.6CVSS8.5AI score0.86122EPSS
Exploits1References6
Cvelist
Cvelist
added 2021/08/16 6:45 p.m.16 views

CVE-2021-32822 File disclosure in hbs

The npm hbs package is an Express view engine wrapper for Handlebars. Depending on usage, users of hbs may be vulnerable to a file disclosure vulnerability. There is currently no patch for this vulnerability. hbs mixes pure template data with engine configuration options through the Express rende...

4CVSS5.4AI score0.00299EPSS
Exploits1References1
OSV
OSV
added 2021/05/19 7:15 p.m.0 views

CVE-2021-27925

An issue was discovered in Couchbase Server 6.5.x and 6.6.x through 6.6.1. When using the View Engine and Auditing is enabled, a crash condition can depending on a race condition cause an internal user with administrator privileges, @nsserver, to have its credentials leaked in cleartext in the...

4.4CVSS5.8AI score
Exploits0References2
Prion
Prion
added 2021/05/19 7:15 p.m.9 views

Race condition

An issue was discovered in Couchbase Server 6.5.x and 6.6.x through 6.6.1. When using the View Engine and Auditing is enabled, a crash condition can depending on a race condition cause an internal user with administrator privileges, @nsserver, to have its credentials leaked in cleartext in the...

3.5CVSS4.7AI score0.00213EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2021/05/19 6:57 p.m.13 views

CVE-2021-27925

An issue was discovered in Couchbase Server 6.5.x and 6.6.x through 6.6.1. When using the View Engine and Auditing is enabled, a crash condition can depending on a race condition cause an internal user with administrator privileges, @nsserver, to have its credentials leaked in cleartext in the...

5AI score0.00213EPSS
Exploits0References2
CVE
CVE
added 2021/05/19 6:57 p.m.47 views

CVE-2021-27925

Affects Couchbase Server 6.5.x and 6.6.x up to 6.6.1. The vulnerability arises in the View Engine when Auditing is enabled; a race-condition can cause an internal administrator user (@ns_server) to have credentials leaked in cleartext in the ns_server.info.log. The connected Red Hat and NVD entri...

4.4CVSS4.7AI score0.00213EPSS
Exploits0References2Affected Software1
CNNVD
CNNVD
added 2021/05/19 12:0 a.m.1 views

Couchbase Server 竞争条件问题漏洞

Couchbase Server is a distributed, open source NoSQL non-relational database from Couchbase, Inc. that supports data querying, full-text searching, and active global replication. A security vulnerability exists in Couchbase Server 6.5.x and 6.6.x through 6.6.1, which stems from a crash condition...

4.4CVSS5.2AI score0.00213EPSS
Exploits0References2
NVD
NVD
added 2021/05/14 7:15 p.m.15 views

CVE-2021-32820

Express-handlebars is a Handlebars view engine for Express. Express-handlebars mixes pure template data with engine configuration options through the Express render API. More specifically, the layout parameter may trigger file disclosure vulnerabilities in downstream applications. This potential...

8.6CVSS0.86122EPSS
Exploits1References5
OSV
OSV
added 2021/05/14 7:15 p.m.12 views

CVE-2021-32820

Express-handlebars is a Handlebars view engine for Express. Express-handlebars mixes pure template data with engine configuration options through the Express render API. More specifically, the layout parameter may trigger file disclosure vulnerabilities in downstream applications. This potential...

8.6CVSS6.7AI score
Exploits0References5
Prion
Prion
added 2021/05/14 7:15 p.m.10 views

Information disclosure

Express-handlebars is a Handlebars view engine for Express. Express-handlebars mixes pure template data with engine configuration options through the Express render API. More specifically, the layout parameter may trigger file disclosure vulnerabilities in downstream applications. This potential...

5CVSS8.6AI score0.86122EPSS
Exploits1References5Affected Software1
CVE
CVE
added 2021/05/14 6:25 p.m.60 views

CVE-2021-32820

Summary (concrete details from sources): The CVE-2021-32820 issue affects Express-handlebars, a Handlebars view engine for Express. The vulnerability arises because the render API’s layout parameter can cause local file disclosure in downstream apps by including files with existing extensions; fi...

8.6CVSS8.6AI score0.86122EPSS
Exploits1References5Affected Software1
Fedora
Fedora
added 2020/03/16 8:49 p.m.31 views

[SECURITY] Fedora 32 Update: couchdb-3.0.0-1.fc32

Apache CouchDB is a distributed, fault-tolerant and schema-free document-oriented database accessible via a RESTful HTTP/JSON API. Among other features, it provides robust, incremental replication with bi-directional conflict detection and resolution, and is queryable and indexable using a...

9CVSS2.7AI score0.18236EPSS
Exploits18
Fedora
Fedora
added 2020/03/14 12:38 a.m.21 views

[SECURITY] Fedora 31 Update: couchdb-3.0.0-1.fc31

Apache CouchDB is a distributed, fault-tolerant and schema-free document-oriented database accessible via a RESTful HTTP/JSON API. Among other features, it provides robust, incremental replication with bi-directional conflict detection and resolution, and is queryable and indexable using a...

9CVSS2.7AI score0.18236EPSS
Exploits18
Fedora
Fedora
added 2017/12/10 5:10 a.m.36 views

[SECURITY] Fedora 27 Update: couchdb-1.7.1-3.fc27

Apache CouchDB is a distributed, fault-tolerant and schema-free document-oriented database accessible via a RESTful HTTP/JSON API. Among other features, it provides robust, incremental replication with bi-directional conflict detection and resolution, and is queryable and indexable using a...

10CVSS2.7AI score0.94098EPSS
Exploits21
Fedora
Fedora
added 2014/12/12 4:3 a.m.34 views

[SECURITY] Fedora 20 Update: couchdb-1.6.1-4.fc20

Apache CouchDB is a distributed, fault-tolerant and schema-free document-oriented database accessible via a RESTful HTTP/JSON API. Among other features, it provides robust, incremental replication with bi-directional conflict detection and resolution, and is queryable and indexable using a...

6.1CVSS2.7AI score0.05931EPSS
Exploits1
Fedora
Fedora
added 2014/07/22 3:33 a.m.22 views

[SECURITY] Fedora 20 Update: couchdb-1.6.0-9.fc20

Apache CouchDB is a distributed, fault-tolerant and schema-free document-oriented database accessible via a RESTful HTTP/JSON API. Among other features, it provides robust, incremental replication with bi-directional conflict detection and resolution, and is queryable and indexable using a...

5CVSS2.7AI score0.48831EPSS
Exploits1
OpenVAS
OpenVAS
added 2013/02/04 12:0 a.m.20 views

Fedora Update for couchdb FEDORA-2013-1375

Check for the Version of couchdb OpenVAS Vulnerability Test Fedora Update for couchdb FEDORA-2013-1375 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

6.8CVSS6.4AI score0.01836EPSS
Exploits0References2
Fedora
Fedora
added 2013/02/02 4:27 a.m.27 views

[SECURITY] Fedora 17 Update: couchdb-1.2.1-2.fc17

Apache CouchDB is a distributed, fault-tolerant and schema-free document-oriented database accessible via a RESTful HTTP/JSON API. Among other features, it provides robust, incremental replication with bi-directional conflict detection and resolution, and is queryable and indexable using a...

6.8CVSS6.4AI score0.01836EPSS
Exploits0
Fedora
Fedora
added 2013/02/02 4:25 a.m.21 views

[SECURITY] Fedora 18 Update: couchdb-1.2.1-2.fc18

Apache CouchDB is a distributed, fault-tolerant and schema-free document-oriented database accessible via a RESTful HTTP/JSON API. Among other features, it provides robust, incremental replication with bi-directional conflict detection and resolution, and is queryable and indexable using a...

6.8CVSS6.4AI score0.01836EPSS
Exploits0
Rows per page
Query Builder