Lucene search
+L

10 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/12 12:00 a.m.•2 views

CVE-2026-19311: Undefined Behavior for Input to API

Missing authorization in the Execute Monitor API in Amazon OpenSearch Alerting plugin might allow an authenticated remote user to read, modify, or delete arbitrary index data via a crafted inline monitor request with unintentional data source and input index parameters...

8.6CVSS5.9AI score0.00582EPSS
SaveExploits0References2
Patchstack
Patchstack
•added 2026/05/19 5:36 p.m.•21 views

WordPress Anomify AI – Anomaly Detection and Alerting plugin <= 0.3.6 - Cross-Site Request Forgery vulnerability

Cross-Site Request Forgery vulnerability discovered by Muhammad Nur Ibnu Hubab Ibnu - Pondok Teknologi in WordPress Plugin Anomify AI – Anomaly Detection and Alerting versions = 0.3.6...

4.3CVSS5.8AI score0.00202EPSS
SaveExploits0References1Affected Software1
RedhatCVE
RedhatCVE
•added 2026/01/09 11:24 a.m.•19 views

CVE-2021-31828

An SSRF issue in Open Distro for Elasticsearch ODFE before 1.13.1.0 allows an existing privileged user to enumerate listening services or interact with configured resources via HTTP requests exceeding the Alerting plugin's intended scope...

7.1CVSS6.8AI score0.00893EPSS
SaveExploits1References1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•16 views

EUVD-2021-18703

Malware in sbrugna...

7.1CVSS6.9AI score0.00893EPSS
SaveExploits1References4
OSV
OSV
•added 2021/05/06 7:15 p.m.•25 views

CVE-2021-31828

An SSRF issue in Open Distro for Elasticsearch ODFE before 1.13.1.0 allows an existing privileged user to enumerate listening services or interact with configured resources via HTTP requests exceeding the Alerting plugin's intended scope...

7.1CVSS6.8AI score
SaveExploits0References3
attackerkb
attackerkb
•added 2021/05/06 7:15 p.m.•9 views

CVE-2021-31828

An SSRF issue in Open Distro for Elasticsearch ODFE before 1.13.1.0 allows an existing privileged user to enumerate listening services or interact with configured resources via HTTP requests exceeding the Alerting plugin's intended scope...

7.1CVSS7AI score0.00893EPSS
SaveExploits1References4
Prion
Prion
•added 2021/05/06 7:15 p.m.•24 views

Server side request forgery (ssrf)

An SSRF issue in Open Distro for Elasticsearch ODFE before 1.13.1.0 allows an existing privileged user to enumerate listening services or interact with configured resources via HTTP requests exceeding the Alerting plugin's intended scope...

5.5CVSS6.8AI score0.00893EPSS
SaveExploits1References3Affected Software1
CVE
CVE
•added 2021/05/06 6:13 p.m.•90 views

CVE-2021-31828

CVE-2021-31828 (ODFE SSRF) affects Open Distro for Elasticsearch (ODFE) until version 1.13.1.0. The issue is an SSRF in the Alerting module that allows an authenticated, existing privileged user to enumerate listening services or interact with configured resources by issuing HTTP requests beyond ...

7.1CVSS6.8AI score0.00893EPSS
SaveExploits1References3Affected Software1
GitLab Advisory Database
GitLab Advisory Database
•added 2021/05/06 12:00 a.m.•37 views

Server-Side Request Forgery (SSRF)

An SSRF issue in Open Distro for Elasticsearch ODFE allows an existing privileged user to enumerate listening services or interact with configured resources via HTTP requests exceeding the Alerting plugin's intended scope...

7.1CVSS2.3AI score0.00893EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/05/06 12:00 a.m.•5 views

CVE-2021-31828: Server-Side Request Forgery (SSRF)

An SSRF issue in Open Distro for Elasticsearch ODFE before 1.13.1.0 allows an existing privileged user to enumerate listening services or interact with configured resources via HTTP requests exceeding the Alerting plugin's intended scope...

7.1CVSS5.8AI score0.00893EPSS
SaveExploits1References2
Rows per page
Query Builder