Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2730▼ 551 respecto a la semana anterior

Críticas / altas1294▼ 234 respecto a la semana anterior

Nueva explotación activa (KEV)3▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)244▼ 258 respecto a la semana anterior

106 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2012-5641	Modificada	Media (5)	8.9%	—	Apache Couchdb Mochiweb Project Mochiweb	18/3/2014	16/6/2026	Directory traversal vulnerability in the partition2 function in mochiweb_util.erl in MochiWeb before 2.4.0, as used in Apache CouchDB before 1.0.4, 1.1.x before 1.1.2, and 1.2.x before 1.2.1, allows remote attackers to read arbitrary files via a ..\ (dot dot backslash) in the default URI.
CVE-2012-1409	Modificada	Alta (10)	1.4%	—	Tinycouch Tiny Password	14/3/2012	16/6/2026	Unspecified vulnerability in the Tiny Password (com.tinycouch.android.freepassword) application 1.64 for Android has unknown impact and attack vectors.
CVE-2010-3854	Modificada	Media (4.3)	5.9%	—	Apache Couchdb	2/2/2011	16/6/2026	Multiple cross-site scripting (XSS) vulnerabilities in the web administration interface (aka Futon) in Apache CouchDB 0.8.0 through 1.0.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2010-2953	Modificada	Media (6.9)	0.60%	—	Apache Couchdb	14/9/2010	16/6/2026	Untrusted search path vulnerability in a certain Debian GNU/Linux patch for the couchdb script in CouchDB 0.8.0 allows local users to gain privileges via a crafted shared library in the current working directory.
CVE-2010-2234	Modificada	Media (6.8)	1.8%	—	Apache Couchdb	19/8/2010	16/6/2026	Cross-site request forgery (CSRF) vulnerability in Apache CouchDB 0.8.0 through 0.11.0 allows remote attackers to hijack the authentication of administrators for direct requests to an installation URL.
CVE-2010-0009	Modificada	Media (4.3)	5.3%	—	Apache Couchdb	5/4/2010	16/6/2026	Apache CouchDB 0.8.0 through 0.10.1 allows remote attackers to obtain sensitive information by measuring the completion time of operations that verify (1) hashes or (2) passwords.