https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 02:53:36 +0000 https://cve.radiocsirt.org/vuln/cnvd-2017-34234 cnvd-2017-34234 https://cve.radiocsirt.org/vuln/cnvd-2017-34234 https://cve.radiocsirt.org/vuln/euvd-2026-168614 EUVD-2026-168614 https://cve.radiocsirt.org/vuln/euvd-2026-168614 https://cve.radiocsirt.org/vuln/fkie_cve-2017-12636 <p>CouchDB administrative users can configure the database server via HTTP(S). Some of the configuration options include paths for operating system-level binaries that are subsequently launched by CouchDB. This allows an admin user in Apache CouchDB before 1.7.0 and 2.x before 2.1.1 to execute arbitrary shell commands as the CouchDB user, including downloading and executing scripts from the public internet.</p> <p>CouchDB administrative users can configure the database server via HTTP(S). Some of the configuration options include paths for operating system-level binaries that are subsequently launched by CouchDB. This allows an admin user in Apache CouchDB before 1.7.0 and 2.x before 2.1.1 to execute arbitrary shell commands as the CouchDB user, including downloading and executing scripts from the public internet.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2017-12636 https://cve.radiocsirt.org/vuln/ghsa-fcpq-cj4x-h8mv <p>CouchDB administrative users can configure the database server via HTTP(S). Some of the configuration options include paths for operating system-level binaries that are subsequently launched by CouchDB. This allows an admin user in Apache CouchDB before 1.7.0 and 2.x before 2.1.1 to execute arbitrary shell commands as the CouchDB user, including downloading and executing scripts from the public internet.</p> <p>CouchDB administrative users can configure the database server via HTTP(S). Some of the configuration options include paths for operating system-level binaries that are subsequently launched by CouchDB. This allows an admin user in Apache CouchDB before 1.7.0 and 2.x before 2.1.1 to execute arbitrary shell commands as the CouchDB user, including downloading and executing scripts from the public internet.</p> https://cve.radiocsirt.org/vuln/ghsa-fcpq-cj4x-h8mv https://cve.radiocsirt.org/vuln/gsd-2017-12636 gsd-2017-12636 https://cve.radiocsirt.org/vuln/gsd-2017-12636 https://cve.radiocsirt.org/vuln/suse-su-2018:2578-1 <p>Security update for couchdb</p> <p>Security update for couchdb</p> https://cve.radiocsirt.org/vuln/suse-su-2018:2578-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-12636 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: couchdb</p> <p>CouchDB administrative users can configure the database server via HTTP(S). Some of the configuration options include paths for operating system-level binaries that are subsequently launched by CouchDB. This allows an admin user in Apache CouchDB before 1.7.0 and 2.x before 2.1.1 to execute arbitrary shell commands as the CouchDB user, including downloading and executing scripts from the public internet.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: couchdb</p> <p>CouchDB administrative users can configure the database server via HTTP(S). Some of the configuration options include paths for operating system-level binaries that are subsequently launched by CouchDB. This allows an admin user in Apache CouchDB before 1.7.0 and 2.x before 2.1.1 to execute arbitrary shell commands as the CouchDB user, including downloading and executing scripts from the public internet.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-12636