7.3Yüksek
couchbase sync gateway
An issue was discovered in Couchbase Sync Gateway before 3.2.6. In sgcollect_info_options.log and sync_gateway.log, there are cleartext passwords in redacted and unredacted output.
couchbase güvenlik açıkları (CVE)
couchbase için yayımlanan CVE kayıtları, en yenisi üstte. Yeni bir açık çıktığında e-posta almak için takip edin.
4.9Orta
couchbase .net sdk
The Couchbase .NET SDK (client library) before 3.7.1 does not properly enable hostname verification for TLS certificates. In fact, the SDK was also using IP addresses instead of hostnames due to a configuration option that was incorrectly enabled by default.
7.6Yüksek
couchbase couchbase server
A security issue has been discovered in Couchbase Server before 7.6.4 and fixed in v.7.6.4 and v.7.2.7 for Windows that could allow unauthorized access to sensitive files. Depending on the level of privileges, this vulnerability may grant access to files such…
6.5Orta
couchbase couchbase server
An issue was discovered in Couchbase Server 7.6.x through 7.6.3. A user with the security_admin_local role can create a new user in a group that has the admin role.
8.8Yüksek
CVE-2024-0519
KEV
Google Chromium V8 Out-of-Bounds Memory Access Vulnerability
Google Chrome; google chrome
Out of bounds memory access in V8 in Google Chrome prior to 120.0.6099.224 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
3.8%EPSS
8.8Yüksek
CVE-2023-3079
KEV
Google Chromium V8 Type Confusion Vulnerability
Google Chrome
Type confusion in V8 in Google Chrome prior to 114.0.5735.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
38%EPSS
8.8Yüksek
CVE-2023-2033
KEV
Google Chromium V8 Type Confusion Vulnerability
Google Chrome
Type confusion in V8 in Google Chrome prior to 112.0.5615.121 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
41%EPSS