https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T02:53:50.616730+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2017-34234 cnvd-2017-34234 2026-10-09T02:53:50.621417+00:00 cnvd-2017-34234 https://cve.radiocsirt.org/vuln/euvd-2026-168614 EUVD-2026-168614 2026-10-09T02:53:50.621449+00:00 EUVD-2026-168614 https://cve.radiocsirt.org/vuln/fkie_cve-2017-12636 fkie_cve-2017-12636 2026-10-09T02:53:50.621474+00:00

CouchDB administrative users can configure the database server via HTTP(S). Some of the configuration options include paths for operating system-level binaries that are subsequently launched by CouchDB. This allows an admin user in Apache CouchDB before 1.7.0 and 2.x before 2.1.1 to execute arbitrary shell commands as the CouchDB user, including downloading and executing scripts from the public internet.

 https://cve.radiocsirt.org/vuln/ghsa-fcpq-cj4x-h8mv GHSA-fcpq-cj4x-h8mv 2026-10-09T02:53:50.621505+00:00

CouchDB administrative users can configure the database server via HTTP(S). Some of the configuration options include paths for operating system-level binaries that are subsequently launched by CouchDB. This allows an admin user in Apache CouchDB before 1.7.0 and 2.x before 2.1.1 to execute arbitrary shell commands as the CouchDB user, including downloading and executing scripts from the public internet.

 https://cve.radiocsirt.org/vuln/gsd-2017-12636 gsd-2017-12636 2026-10-09T02:53:50.621522+00:00 gsd-2017-12636 https://cve.radiocsirt.org/vuln/suse-su-2018:2578-1 SUSE-SU-2018:2578-1 — Security update for couchdb 2026-10-09T02:53:50.621533+00:00

Security update for couchdb

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-12636 UBUNTU-CVE-2017-12636 2026-10-09T02:53:50.621550+00:00

Affected: Ubuntu:16.04:LTS: couchdb

CouchDB administrative users can configure the database server via HTTP(S). Some of the configuration options include paths for operating system-level binaries that are subsequently launched by CouchDB. This allows an admin user in Apache CouchDB before 1.7.0 and 2.x before 2.1.1 to execute arbitrary shell commands as the CouchDB user, including downloading and executing scripts from the public internet.