CVE-2014-2668

CVE-2014-2668 affects Apache CouchDB 1.5.0 and earlier. A remote attacker could trigger a Denial of Service by abusing the count parameter to /_uuids, consuming CPU and memory. Public advisories and OpenVAS/Gentoo entries consistently describe the issue and recommend upgrading to a newer CouchDB ...

CVE-2012-5650

The CVE-2012-5650 entry describes a Cross-Site Scripting (XSS) vulnerability in the Futon UI of Apache CouchDB. AFFECTED VERSIONS include CouchDB before 1.0.4, 1.1.x before 1.1.2, and 1.2.x before 1.2.1. The issue allows remote attackers to inject arbitrary web script or HTML via unspecified para...

CVE-2012-5641

CVE-2012-5641 describes a directory traversal in MochiWeb (partition2 in mochiweb_util.erl) that could let remote attackers read arbitrary files via ..\ in the default URI. Affected: MochiWeb prior to 2.4.0 used in Apache CouchDB prior to 1.0.4, 1.1.x prior to 1.1.2, and 1.2.x prior to 1.2.1. Imp...

CVE-2012-5649

CVE-2012-5649 affects Apache CouchDB up to vulnerable branches: 1.0.4, 1.1.x up to 1.1.2, and 1.2.x up to 1.2.1. The issue allows remote attackers to execute arbitrary code via a JSONP callback related to Adobe Flash. Mitigation: upgrade to fixed releases (1.0.4+, 1.1.2+, 1.2.1+). Open detail con...