831 matches found
Apache Solr < 4.10.5 'plugin.js' XSS
The version of Apache Solr running on the remote web server is affected by a persistent cross-site scripting vulnerability due to a failure to sanitize query histories before returning them to the user of the Solr administration panel. A remote, unauthenticated attacker can exploit this issue to...
Apache Solr Cross-Site Scripting Vulnerability
Apache Solr is an open source search server. A cross-site scripting vulnerability in the Admin UI Plugin / Stats page in version 4.x of Apache Solr prior to 4.10.3 allows remote attackers to inject arbitrary web script or HTML via fieldvaluecache objects...
Cross site scripting
Cross-site scripting XSS vulnerability in the Admin UI Plugin / Stats page in Apache Solr 4.x before 4.10.3 allows remote attackers to inject arbitrary web script or HTML via the fieldvaluecache object...
CVE-2014-3628
Cross-site scripting XSS vulnerability in the Admin UI Plugin / Stats page in Apache Solr 4.x before 4.10.3 allows remote attackers to inject arbitrary web script or HTML via the fieldvaluecache object...
CVE-2014-3628
Cross-site scripting XSS vulnerability in the Admin UI Plugin / Stats page in Apache Solr 4.x before 4.10.3 allows remote attackers to inject arbitrary web script or HTML via the fieldvaluecache object...
CVE-2014-3628
CVE-2014-3628 affects Apache Solr 4.x prior to 4.10.3, specifically the Admin UI Plugin / Stats page. The vulnerability is an XSS due to improper sanitization of data in the fieldvaluecache object, allowing a remote attacker to inject arbitrary script/HTML into a victim’s browser. The issue is do...
CVE-2014-3628
Cross-site scripting XSS vulnerability in the Admin UI Plugin / Stats page in Apache Solr 4.x before 4.10.3 allows remote attackers to inject arbitrary web script or HTML via the fieldvaluecache object...
CVE-2014-3628
Cross-site scripting XSS vulnerability in the Admin UI Plugin / Stats page in Apache Solr 4.x before 4.10.3 allows remote attackers to inject arbitrary web script or HTML via the fieldvaluecache object...
Apache Solr XML External Entity (XXE) Vulnerability (SOLR-3895, SOLR-5520) - Linux
Apache Solr is prone to an XML external entity XXE vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apache:solr";...
Apache Solr Directory Traversal Vulnerability (SOLR-4882, SOLR-5520) - Linux
Apache Solr is prone to a directory traversal vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apache:solr";...
Apache Solr Directory Traversal Vulnerability (SOLR-4882, SOLR-5520) - Windows
Apache Solr is prone to a directory traversal vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apache:solr";...
Apache Solr XML External Entity (XXE) Vulnerability (SOLR-4881, SOLR-5520) - Linux
Apache Solr is prone to an XML external entity XXE vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apache:solr";...
Apache Solr XML External Entity (XXE) Vulnerability (SOLR-3895, SOLR-5520) - Windows
Apache Solr is prone to an XML external entity XXE vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apache:solr";...
Apache Solr XML External Entity (XXE) Vulnerability (SOLR-4881, SOLR-5520) - Windows
Apache Solr is prone to an XML external entity XXE vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apache:solr";...
Apache Solr Detection (HTTP)
HTTP based detection of Apache Solr. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.903506";...
Important: Red Hat Security Advisory: Red Hat JBoss Data Grid 6.2.0 update
Red Hat JBoss Data Grid 6.2.0, which fixes multiple security issues, various bugs, and adds enhancements, is now available from the Red Hat Customer Portal. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base...
Vulnerabilities in Apache Solr < 4.6.0
Hello, Apache Solr is search platform edited by the Apache project. Quoting http://lucene.apache.org/solr/:"its major features include powerful full-text search, hit highlighting, faceted search, near real-time indexing, dynamic clustering, database integration, rich document e.g., Word, PDF...
Apache Solr Detection
Binary data solrdetect.nbin...
Apache Solr < 4.6.0 'SolrResourceLoader' Directory Traversal
The version of Apache Solr running on the remote web server is affected by a directory traversal vulnerability because the 'SolrResourceLoader' class fails to restrict access to the loading of specially crafted XLS stylesheets and velocity templates. A remote, unauthenticated attacker can exploit...
Apache Solr < 4.3.1 XML External Entity Injection
The version of Apache Solr running on the remote web server is affected by an XML external entity injection vulnerability due to an incorrectly configured XML parser in the 'DocumentAnalysisRequestHandler' class. A remote, unauthenticated attacker can exploit this flaw to gain access to arbitrary...