Overview 70 matches · 0 in Waratek scope · 0 protected · 3 exploited · 3 CISA KEV · 5 public PoC · 0 EPSS ≥ 0.5
70matches
0in Waratek scope0.0%
0protected0.0%
3exploited4.3%
3CISA KEV4.3%
5public PoC7.1%
0EPSS ≥ 0.50.0%
Protected by Waratek
0
0.0%
Rule in development
0
0.0%
Mitigation candidate
0
0.0%
No exploit published
0
0.0%
Outside Waratek scope
0
0.0%
Not applicable
70
100.0%
Withdrawn CVE
0
0.0%
blocked by ARMR today
0
0.0%
partly blocked
0
0.0%
not blocked
70
100.0%
not established
0
0.0%
unrecorded
0
0.0%
split by
peak 15 / year
20141
Not applicable1
Medium1
not blocked1
No public exploit1
20150
20160
20170
20181
Not applicable1
High1
not blocked1
No public exploit1
20198
Not applicable8
Critical2
High3
Medium3
not blocked8
No public exploit8
20209
Not applicable9
Critical2
High5
Medium1
Low1
not blocked9
Working exploit published3
No public exploit6
202111
Not applicable11
Critical1
High5
Medium5
not blocked11
No public exploit11
202215
Not applicable15
Critical1
High9
Medium5
not blocked15
No public exploit15
20238
Not applicable8
High6
Medium2
not blocked8
Exploited2
No public exploit6
202415
Not applicable15
Critical2
High6
Medium7
not blocked15
Exploited1
Proof of concept only1
No public exploit13
20252
Not applicable2
High1
Medium1
not blocked2
No public exploit2
201420152016201720182019202020212022202320242025
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2025-46619 | High | 2025-04-30 | Not applicable | No public exploit | A security issue has been discovered in Couchbase Server before 7.6.4 and fixed in v.7.6.4 and v.7.2.7 for Windows that could allow unauthorized access to sensitive files. Depending on the level of privileges, this vulnerability may grant access to files such as /etc/passwd or /etc/shadow. |
| CVE-2024-56178 | Medium | 2025-01-27 | Not applicable | No public exploit | An issue was discovered in Couchbase Server 7.6.x through 7.6.3. A user with the security_admin_local role can create a new user in a group that has the admin role. |
| CVE-2024-25673 | Medium | 2024-09-19 | Not applicable | No public exploit | Couchbase Server 7.6.x before 7.6.2, 7.2.x before 7.2.6, and all earlier versions allows HTTP Host header injection. |
| CVE-2024-37034 | Medium | 2024-07-26 | Not applicable | No public exploit | An issue was discovered in Couchbase Server before 7.2.5 and 7.6.0 before 7.6.1. It does not ensure that credentials are negotiated with the Key-Value (KV) service using SCRAM-SHA when remote link encryption is configured for Half-Secure. |
| CVE-2023-43768 | High | 2024-03-27 | Not applicable | No public exploit | An issue was discovered in Couchbase Server 6.6.x through 7.2.0, before 7.1.5 and 7.2.1. Unauthenticated users may cause memcached to run out of memory via large commands. |
| CVE-2024-23302 | High | 2024-02-29 | Not applicable | No public exploit | Couchbase Server before 7.2.4 has a private key leak in goxdcr.log. |
| CVE-2023-50437 | High | 2024-02-29 | Not applicable | No public exploit | An issue was discovered in Couchbase Server before 7.2.x before 7.2.4. otpCookie is shown with full admin on pools/default/serverGroups and engageCluster2. |
| CVE-2023-50436 | Medium | 2024-02-29 | Not applicable | No public exploit | An issue was discovered in Couchbase Server before 7.2.4. ns_server admin credentials are leaked in encoded form in the diag.log file. The earliest affected version is 7.1.5. |
| CVE-2023-49932 | Medium | 2024-02-29 | Not applicable | No public exploit | An issue was discovered in Couchbase Server before 7.2.4. An attacker can bypass SQL++ N1QL cURL host restrictions. |
| CVE-2023-49931 | Critical | 2024-02-29 | Not applicable | No public exploit | An issue was discovered in Couchbase Server before 7.2.4. SQL++ cURL calls to /diag/eval are not sufficiently restricted. |
| CVE-2023-49930 | Critical | 2024-02-29 | Not applicable | No public exploit | An issue was discovered in Couchbase Server before 7.2.4. cURL calls to /diag/eval are not sufficiently restricted. |
| CVE-2023-45874 | Medium | 2024-02-29 | Not applicable | No public exploit | An issue was discovered in Couchbase Server through 7.2.2. A data reader may cause a denial of service (outage of reader threads). |
| CVE-2023-43769 | Medium | 2024-02-29 | Not applicable | No public exploit | An issue was discovered in Couchbase Server through 7.1.4 before 7.1.5 and before 7.2.1. There are Unauthenticated RMI Service Ports Exposed in Analytics. |
| CVE-2023-49338 | High | 2024-02-28 | Not applicable | No public exploit | Couchbase Server 7.1.x and 7.2.x before 7.2.4 does not require authentication for the /admin/stats and /admin/vitals endpoints on TCP port 8093 of localhost. |
| CVE-2023-45873 | Medium | 2024-02-28 | Not applicable | No public exploit | An issue was discovered in Couchbase Server through 7.2.2. A data reader may cause a denial of service (application exist) because of the OOM killer. |
| CVE-2023-50782 | High | 2024-02-05 | Not applicable | Proof of concept only | A flaw was found in the python-cryptography package. This issue may allow a remote attacker to decrypt captured messages in TLS servers that use RSA key exchanges, which may lead to exposure of confidential or sensitive data. |
| CVE-2024-0519 | High | 2024-01-16 | Not applicable | Exploited | Out of bounds memory access in V8 in Google Chrome prior to 120.0.6099.224 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
| CVE-2023-45875 | High | 2023-11-08 | Not applicable | No public exploit | An issue was discovered in Couchbase Server 7.2.0. There is a private key leak in debug.log while adding a pre-7.0 node to a 7.2 cluster. |
| CVE-2023-36667 | High | 2023-11-08 | Not applicable | No public exploit | Couchbase Server 7.1.4 before 7.1.5 and 7.2.0 before 7.2.1 allows Directory Traversal. |
| CVE-2023-3079 | High | 2023-06-05 | Not applicable | Exploited | Type confusion in V8 in Google Chrome prior to 114.0.5735.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
| CVE-2023-2033 | High | 2023-04-14 | Not applicable | Exploited | Type confusion in V8 in Google Chrome prior to 112.0.5615.121 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
| CVE-2023-28470 | Medium | 2023-03-23 | Not applicable | No public exploit | In Couchbase Server 5 through 7 before 7.1.4, the nsstats endpoint is accessible without authentication. |
| CVE-2023-25016 | High | 2023-02-06 | Not applicable | No public exploit | Couchbase Server before 6.6.6, 7.x before 7.0.5, and 7.1.x before 7.1.2 exposes Sensitive Information to an Unauthorized Actor. |
| CVE-2022-42951 | High | 2023-02-06 | Not applicable | No public exploit | An issue was discovered in Couchbase Server 6.5.x and 6.6.x before 6.6.6, 7.x before 7.0.5, and 7.1.x before 7.1.2. During the start-up of a Couchbase Server node, there is a small window of time (before the cluster management authentication has started) where an attacker can connect to the cluster manager using default credentials. |
| CVE-2022-42950 | Medium | 2023-02-06 | Not applicable | No public exploit | An issue was discovered in Couchbase Server 7.x before 7.0.5 and 7.1.x before 7.1.2. A crafted HTTP REST request from an administrator account to the Couchbase Server Backup Service can exhaust memory resources, causing the process to be killed, which can be used for denial of service. |
| CVE-2022-32556 | High | 2022-07-21 | Not applicable | No public exploit | An issue was discovered in Couchbase Server before 7.0.4. A private key is leaked to the log files with certain crashes. |
| CVE-2022-34826 | Medium | 2022-07-15 | Not applicable | No public exploit | In Couchbase Server 7.1.x before 7.1.1, an encrypted Private Key passphrase may be leaked in the logs. |
| CVE-2022-33911 | Medium | 2022-07-12 | Not applicable | No public exploit | An issue was discovered in Couchbase Server 7.x before 7.0.4. Field names are not redacted in logged validation messages for Analytics Service. An Unauthorized Actor may be able to obtain Sensitive Information. |
| CVE-2022-33173 | High | 2022-07-12 | Not applicable | No public exploit | An algorithm-downgrade issue was discovered in Couchbase Server before 7.0.4. Analytics Remote Links may temporarily downgrade to non-TLS connection to determine the TLS port number, using SCRAM-SHA instead. |
| CVE-2022-32561 | Medium | 2022-06-14 | Not applicable | No public exploit | An issue was discovered in Couchbase Server before 6.6.5 and 7.x before 7.0.4. Previous mitigations for CVE-2018-15728 were found to be insufficient when it was discovered that diagnostic endpoints could still be accessed from the network. |
| CVE-2022-32559 | Critical | 2022-06-14 | Not applicable | No public exploit | An issue was discovered in Couchbase Server before 7.0.4. Random HTTP requests lead to leaked metrics. |
| CVE-2022-32557 | High | 2022-06-14 | Not applicable | No public exploit | An issue was discovered in Couchbase Server before 7.0.4. The Index Service does not enforce authentication for TCP/TLS servers. |
| CVE-2022-32565 | High | 2022-06-13 | Not applicable | No public exploit | An issue was discovered in Couchbase Server before 7.0.4. The Backup Service log leaks unredacted usernames and document ids. |
| CVE-2022-32564 | High | 2022-06-13 | Not applicable | No public exploit | An issue was discovered in Couchbase Server before 7.0.4. In couchbase-cli, server-eshell leaks the Cluster Manager cookie. |
| CVE-2022-32562 | High | 2022-06-13 | Not applicable | No public exploit | An issue was discovered in Couchbase Server before 7.0.4. Operations may succeed on a collection using stale RBAC permission. |
| CVE-2022-32560 | High | 2022-06-13 | Not applicable | No public exploit | An issue was discovered in Couchbase Server before 7.0.4. XDCR lacks role checking when changing internal settings. |
| CVE-2022-32558 | High | 2022-06-13 | Not applicable | No public exploit | An issue was discovered in Couchbase Server before 7.0.4. Sample bucket loading may leak internal user passwords during a failure. |
| CVE-2022-32193 | Medium | 2022-06-13 | Not applicable | No public exploit | Couchbase Server 6.6.x through 7.x before 7.0.4 exposes Sensitive Information to an Unauthorized Actor. |
| CVE-2022-32192 | High | 2022-06-13 | Not applicable | No public exploit | Couchbase Server 5.x through 7.x before 7.0.4 exposes Sensitive Information to an Unauthorized Actor. |
| CVE-2021-33504 | Medium | 2022-06-02 | Not applicable | No public exploit | Couchbase Server before 7.1.0 has Incorrect Access Control. |
| CVE-2021-42763 | High | 2021-11-02 | Not applicable | No public exploit | Couchbase Server before 6.6.3 and 7.x before 7.0.2 stores Sensitive Information in Cleartext. The issue occurs when the cluster manager forwards a HTTP request from the pluggable UI (query workbench etc) to the specific service. In the backtrace, the Basic Auth Header included in the HTTP request, has the "@" user credentials of the node processing the UI request. |
| CVE-2021-37842 | High | 2021-11-02 | Not applicable | No public exploit | metakv in Couchbase Server 7.0.0 uses Cleartext for Storage of Sensitive Information. Remote Cluster XDCR credentials can get leaked in debug logs. Config key tombstone purging was added in Couchbase Server 7.0.0. This issue happens when a config key, which is being logged, has a tombstone purger time-stamp attached to it. |
| CVE-2021-35945 | High | 2021-09-29 | Not applicable | No public exploit | Couchbase Server 6.5.x, 6.6.0 through 6.6.2, and 7.0.0, has a Buffer Overflow. A specially crafted network packet sent from an attacker can crash memcached. |
| CVE-2021-35944 | High | 2021-09-29 | Not applicable | No public exploit | Couchbase Server 6.5.x, 6.6.x through 6.6.2, and 7.0.0 has a Buffer Overflow. A specially crafted network packet sent from an attacker can crash memcached. |
| CVE-2021-35943 | Critical | 2021-09-29 | Not applicable | No public exploit | Couchbase Server 6.5.x and 6.6.x through 6.6.2 has Incorrect Access Control. Externally managed users are not prevented from using an empty password, per RFC4513. |
| CVE-2021-25643 | Medium | 2021-05-26 | Not applicable | No public exploit | An issue was discovered in Couchbase Server 5.x and 6.x before 6.5.2 and 6.6.x before 6.6.2. Internal users with administrator privileges, @cbq-engine-cbauth and @index-cbauth, leak credentials in cleartext in the indexer.log file when they make a /listCreateTokens, /listRebalanceTokens, or /listMetadataTokens call. |
| CVE-2021-31158 | Medium | 2021-05-19 | Not applicable | No public exploit | In the Query Engine in Couchbase Server 6.5.x and 6.6.x through 6.6.1, Common Table Expression queries were not correctly checking the user's permissions, allowing read-access to resources beyond what those users were explicitly allowed to access. |
| CVE-2021-27925 | Medium | 2021-05-19 | Not applicable | No public exploit | An issue was discovered in Couchbase Server 6.5.x and 6.6.x through 6.6.1. When using the View Engine and Auditing is enabled, a crash condition can (depending on a race condition) cause an internal user with administrator privileges, @ns_server, to have its credentials leaked in cleartext in the ns_server.info.log file. |
| CVE-2021-27924 | Medium | 2021-05-19 | Not applicable | No public exploit | An issue was discovered in Couchbase Server 6.x through 6.6.1. The Couchbase Server UI is insecurely logging session cookies in the logs. This allows for the impersonation of a user if the log files are obtained by an attacker before a session cookie expires. |
| CVE-2021-25644 | High | 2021-05-19 | Not applicable | No public exploit | An issue was discovered in Couchbase Server 5.x and 6.x through 6.6.1 and 7.0.0 Beta. Incorrect commands to the REST API can result in leaked authentication information being stored in cleartext in the debug.log and info.log files, and is also shown in the UI visible to administrators. |
| CVE-2021-25645 | Medium | 2021-05-10 | Not applicable | No public exploit | An issue was discovered in Couchbase Server before 6.0.5, 6.1.x through 6.5.x before 6.5.2, and 6.6.x before 6.6.1. An internal user with administrator privileges, @ns_server, leaks credentials in cleartext in the cbcollect_info.log, debug.log, ns_couchdb.log, indexer.log, and stats.log files. NOTE: updating the product does not automatically address leaks that occurred in the past. |
| CVE-2020-24719 | Critical | 2020-11-12 | Not applicable | Working exploit published | Exposed Erlang Cookie could lead to Remote Command Execution (RCE) attack. Communication between Erlang nodes is done by exchanging a shared secret (aka "magic cookie"). There are cases where the magic cookie is included in the content of the logs. An attacker can use the cookie to attach to an Erlang node and run OS level commands on the system running the Erlang node. Affects version: 6.5.1. Fix version: 6.6.0. |
| CVE-2020-26221 | High | 2020-11-11 | Not applicable | No public exploit | touchbase.ai before version 2.0 is vulnerable to Cross-Site Scripting (XSS). The vulnerability allows an attacker to send malicious JavaScript code which could result in hijacking of the user's cookie/session tokens, redirecting the user to a malicious webpage and performing unintended browser action. The issue is patched in version 2.0. |
| CVE-2020-26220 | Low | 2020-11-11 | Not applicable | No public exploit | toucbase.ai before version 2.0 leaks information by not stripping exif data from images. Anyone with access to the uploaded image of other users could obtain its geolocation, device, and software version data etc (if present. The issue is fixed in version 2.0. |
| CVE-2020-26219 | Medium | 2020-11-11 | Not applicable | No public exploit | touchbase.ai before version 2.0 is vulnerable to Open Redirect. Impacts can be many, and vary from theft of information and credentials, to the redirection to malicious websites containing attacker-controlled content, which in some cases even cause XSS attacks. So even though an open redirection might sound harmless at first, the impacts of it can be severe should it be exploitable. The issue is fixed in version 2.0. |
| CVE-2020-26218 | High | 2020-11-11 | Not applicable | Working exploit published | touchbase.ai before version 2.0 is vulnerable to Cross-Site Scripting. The vulnerability allows an attacker to inject HTML payloads which could result in defacement, user redirection to a malicious webpage/website etc. The issue is patched in version 2.0. |
| CVE-2020-9042 | High | 2020-06-08 | Not applicable | No public exploit | In Couchbase Server 6.0, credentials cached by a browser can be used to perform a CSRF attack if an administrator has used their browser to check the results of a REST API request. |
| CVE-2020-9041 | High | 2020-06-08 | Not applicable | No public exploit | In Couchbase Server 6.0.3 and Couchbase Sync Gateway through 2.7.0, the Cluster management, views, query, and full-text search endpoints are vulnerable to the Slowloris denial-of-service attack because they don't more aggressively terminate slow connections. |
| CVE-2020-9040 | High | 2020-06-08 | Not applicable | No public exploit | Couchbase Server Java SDK before 2.7.1.1 allows a potential attacker to forge an SSL certificate and pose as the intended peer. An attacker can leverage this flaw by crafting a cryptographically valid certificate that will be accepted by Java SDK's Netty component due to missing hostname verification. |
| CVE-2020-9039 | Critical | 2020-02-22 | Not applicable | Working exploit published | Couchbase Server 4.0.0, 4.1.0, 4.1.1, 4.5.0, 4.5.1, 4.6.0 through 4.6.5, 5.0.0, 5.1.1, 5.5.0 and 5.5.1 have Insecure Permissions for the projector and indexer REST endpoints (they allow unauthenticated access).The /settings REST endpoint exposed by the projector process is an endpoint that administrators can use for various tasks such as updating configuration and collecting performance profiles. The endpoint was unauthenticated and has been updated to only allow authenticated users to access these administrative APIs. |
| CVE-2019-11497 | High | 2019-09-10 | Not applicable | No public exploit | In Couchbase Server 5.0.0, when an invalid Remote Cluster Certificate was entered as part of the reference creation, XDCR did not parse and check the certificate signature. It then accepted the invalid certificate and attempted to use it to establish future connections to the remote cluster. This has been fixed in version 5.5.0. XDCR now checks the validity of the certificate thoroughly and prevents a remote cluster reference from being created with an invalid certificate. |
| CVE-2019-11496 | Critical | 2019-09-10 | Not applicable | No public exploit | In versions of Couchbase Server prior to 5.0, the bucket named "default" was a special bucket that allowed read and write access without authentication. As part of 5.0, the behavior of all buckets including "default" were changed to only allow access by authenticated users with sufficient authorization. However, users were allowed unauthenticated and unauthorized access to the "default" bucket if the properties of this bucket were edited. This has been fixed in versions 5.1.0 and 5.5.0. |
| CVE-2019-11495 | Critical | 2019-09-10 | Not applicable | No public exploit | In Couchbase Server 5.1.1, the cookie used for intra-node communication was not generated securely. Couchbase Server uses erlang:now() to seed the PRNG which results in a small search space for potential random seeds that could then be used to brute force the cookie and execute code against a remote system. This has been fixed in version 6.0.0. |
| CVE-2019-11467 | High | 2019-09-10 | Not applicable | No public exploit | In Couchbase Server 4.6.3 and 5.5.0, secondary indexing encodes the entries to be indexed using collatejson. When index entries contain certain characters like \t, <, >, it caused buffer overrun as encoded string would be much larger than accounted for, causing indexer service to crash and restart. This has been remedied in versions 5.1.2 and 5.5.2 to ensure buffer always grows as needed for any input. |
| CVE-2019-11466 | Medium | 2019-09-10 | Not applicable | No public exploit | In Couchbase Server 6.0.0 and 5.5.0, the eventing service exposes system diagnostic profile via an HTTP endpoint that does not require credentials on a port earmarked for internal traffic only. This has been remedied in version 6.0.1 and now requires valid credentials to access. |
| CVE-2019-11465 | Medium | 2019-09-10 | Not applicable | No public exploit | An issue was discovered in Couchbase Server 5.5.x through 5.5.3 and 6.0.0. The Memcached "connections" stat block command emits a non-redacted username. The system information submitted to Couchbase as part of a bug report included the usernames for all users currently logged into the system even if the log was redacted for privacy. This has been fixed (in 5.5.4 and 6.0.1) so that usernames are tagged properly in the logs and are hashed out when the logs are redacted. |
| CVE-2019-11464 | Medium | 2019-09-10 | Not applicable | No public exploit | Some enterprises require that REST API endpoints include security-related headers in REST responses. Headers such as X-Frame-Options and X-Content-Type-Options are generally advisable, however some information security professionals additionally look for X-Permitted-Cross-Domain-Policies and X-XSS-Protection, which are more generally applicable to HTML endpoint, to be included too. These headers were not included in Couchbase Server 5.5.0 and 5.1.2 . They are now included in version 6.0.2 in responses from the Couchbase Server Views REST API (port 8092). |
| CVE-2019-15544 | High | 2019-08-26 | Not applicable | No public exploit | An issue was discovered in the protobuf crate before 2.6.0 for Rust. Attackers can exhaust all memory via Vec::reserve calls. |
| CVE-2018-15728 | High | 2018-08-24 | Not applicable | No public exploit | Couchbase Server exposed the '/diag/eval' endpoint which by default is available on TCP/8091 and/or TCP/18091. Authenticated users that have 'Full Admin' role assigned could send arbitrary Erlang code to the 'diag/eval' endpoint of the API and the code would subsequently be executed in the underlying operating system with privileges of the user which was used to start Couchbase. Affects Version: 4.0.0, 4.1.2, 4.5.1, 5.0.0, 4.6.5, 5.0.1, 5.1.1, 5.5.0, 5.5.1. Fix Version: 6.0.0, 5.5.2 |
| CVE-2013-2193 | Medium | 2014-05-29 | Not applicable | No public exploit | Apache HBase 0.92.x before 0.92.3 and 0.94.x before 0.94.9, when the Kerberos features are enabled, allows man-in-the-middle attackers to disable bidirectional authentication and obtain sensitive information via unspecified vectors. |