7.3Hoch
couchbase sync gateway
An issue was discovered in Couchbase Sync Gateway before 3.2.6. In sgcollect_info_options.log and sync_gateway.log, there are cleartext passwords in redacted and unredacted output.
couchbase Schwachstellen (CVE)
Für couchbase veröffentlichte CVE-Einträge, neueste zuerst. Folgen Sie, um bei neuen Einträgen eine E-Mail zu erhalten.
4.9Mittel
couchbase .net sdk
The Couchbase .NET SDK (client library) before 3.7.1 does not properly enable hostname verification for TLS certificates. In fact, the SDK was also using IP addresses instead of hostnames due to a configuration option that was incorrectly enabled by default.
7.6Hoch
couchbase couchbase server
A security issue has been discovered in Couchbase Server before 7.6.4 and fixed in v.7.6.4 and v.7.2.7 for Windows that could allow unauthorized access to sensitive files. Depending on the level of privileges, this vulnerability may grant access to files such…
6.5Mittel
couchbase couchbase server
An issue was discovered in Couchbase Server 7.6.x through 7.6.3. A user with the security_admin_local role can create a new user in a group that has the admin role.
8.8Hoch
CVE-2024-0519
KEV
Google Chromium V8 Out-of-Bounds Memory Access Vulnerability
Google Chrome; google chrome
Out of bounds memory access in V8 in Google Chrome prior to 120.0.6099.224 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
3.8%EPSS
8.8Hoch
CVE-2023-3079
KEV
Google Chromium V8 Type Confusion Vulnerability
Google Chrome
Type confusion in V8 in Google Chrome prior to 114.0.5735.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
38%EPSS
8.8Hoch
CVE-2023-2033
KEV
Google Chromium V8 Type Confusion Vulnerability
Google Chrome
Type confusion in V8 in Google Chrome prior to 112.0.5615.121 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
41%EPSS