GCVE - cpe:2.3:a:apache:couchdb:0.8.0:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:apache:couchdb:0.8.0:*:*:*:*:*:*:*

part: a version: 0.8.0 update: *

Vendor	Apache (`b0303047-b7dd-5cf8-abcc-71b7d9d80b95`)
Product	Couchdb (`3de04e4d-acf5-50dd-b2a1-80e025817e6a`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:apache/couchdb`	purl2cpe	2026-06-01 10:14:25.191273
`pkg:docker/couchdb`	purl2cpe	2026-06-01 10:14:25.191274
`pkg:github/apache/couchdb`	purl2cpe	2026-06-01 10:14:25.191276
`pkg:gitlab/kalilinux/couchdb`	purl2cpe	2026-06-01 10:14:25.191277
`pkg:rpm/fedora/couchdb`	purl2cpe	2026-06-01 10:14:25.191279
`pkg:rpm/opensuse/couchdb`	purl2cpe	2026-06-01 10:14:25.191280

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2010-3854`	vulnerable	2026-06-08 04:55:17.594846	Details available Multiple cross-site scripting (XSS) vulnerabilities in the web administration interface (aka Futon) in Apache CouchDB 0.8.0 through 1.0.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. Published: 2011-02-02T00:00:00.000Z Updated: 2024-08-07T03:26:12.348Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/65050 http://mail-archives.apache.org/mod_mbox/couchdb-dev/201101.mbox/%3CC840F655-C8C5-4EC6-8AA8-DD223E39C34A%40apache.org%3E http://osvdb.org/70734 http://www.vupen.com/english/advisories/2011/0263 http://www.securityfocus.com/bid/46066	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-2953`	vulnerable	2026-06-08 04:55:11.776720	Details available Untrusted search path vulnerability in a certain Debian GNU/Linux patch for the couchdb script in CouchDB 0.8.0 allows local users to gain privileges via a crafted shared library in the current working directory. Published: 2010-09-14T18:00:00.000Z Updated: 2024-08-07T02:55:45.502Z Open on db.gcve.eu Reference links http://www.nth-dimension.org.uk/blog.php?id=87 http://www.vupen.com/english/advisories/2010/2341 http://secunia.com/advisories/41383 http://www.securityfocus.com/bid/42758 http://www.openwall.com/lists/oss-security/2010/08/29/4	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-2234`	vulnerable	2026-06-08 04:54:12.343941	Details available Cross-site request forgery (CSRF) vulnerability in Apache CouchDB 0.8.0 through 0.11.0 allows remote attackers to hijack the authentication of administrators for direct requests to an installation URL. Published: 2010-08-19T20:00:00.000Z Updated: 2024-08-07T02:25:07.400Z Open on db.gcve.eu Reference links http://seclists.org/fulldisclosure/2010/Aug/199 http://www.securityfocus.com/archive/1/513174/100/0/threaded https://bugzilla.redhat.com/show_bug.cgi?id=624764 http://www.securityfocus.com/bid/42501	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-0009`	vulnerable	2026-06-08 04:51:52.283080	Details available Apache CouchDB 0.8.0 through 0.10.1 allows remote attackers to obtain sensitive information by measuring the completion time of operations that verify (1) hashes or (2) passwords. Published: 2010-04-05T16:00:00.000Z Updated: 2024-08-07T00:30:47.025Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/39116 https://bugzilla.redhat.com/show_bug.cgi?id=578572 http://www.securityfocus.com/archive/1/510427/100/0/threaded http://secunia.com/advisories/39146 http://archives.neohapsis.com/archives/bugtraq/2010-03/0267.html	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.