2504 matches found
PT-2021-14860 · Elastic · Elasticsearch
Name of the Vulnerable Software and Affected Versions: Elasticsearch versions 7.7.0 through 7.10.1 Description: The issue is an information disclosure flaw in the async search API. When an async search is executed, HTTP headers are improperly stored. An Elasticsearch user with read access to the...
Elastic 资源管理错误漏洞
Elasticsearch is a search engine based on the Lucene library. An information disclosure vulnerability exists in the asynchronous search API in Elasticsearch 7.7.0 - 7.10.1. The vulnerability stems from the fact that users performing asynchronous searches will incorrectly store HTTP headers. An...
Millions of Social Profiles Leaked by Chinese Data-Scrapers
More than 400GB of public and private profile data for 214 million social-media users from around the world has been exposed to the internet – including details for celebrities and social-media influencers in the U.S. and elsewhere. The leak stems from a misconfigured ElasticSearch database owned...
Exploit for Injection in Elastic Elasticsearch
CVE-2015-5377 Elasticsearch 1.5.2 is vulner...
Photon OS 1.0: Elasticsearch PHSA-2020-1.0-0348
An update of the elasticsearch package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-1.0-0348. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Security Bulletin: Multiple vulnerabilities in middleware software affect IBM Cloud Pak for Automation
Summary The vulnerabilities are related to the WebSphere Liberty server, to Node.js runtime and modules and to other open source packages. Vulnerability Details CVEID: CVE-2019-7619 DESCRIPTION: Elastic Elasticsearch could allow a remote attacker to obtain sensitive information, caused by a flaw ...
Moderate Photon OS Security Update - PHSA-2020-0348
Updates of 'elasticsearch', 'cassandra' packages of Photon OS have been released...
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2020-1.0-0348
An update of 'cassandra', 'elasticsearch' packages of Photon OS has been released...
CVE-2020-8908 vulnerabilities
Vulnerabilities for packages: celeborn, hadoop-client-modules, gradle, druid, spark-fips, hadoop-fips, maven-stage0, cassandra-reaper, trino, spdx-tools-java...
Photon OS 3.0: Elasticsearch PHSA-2020-3.0-0166
An update of the elasticsearch package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-3.0-0166. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
CVE-2020-13956 vulnerabilities
Vulnerabilities for packages: elasticsearch, zaproxy, druid, trino...
CVE-2020-27816
The elasticsearch-operator does not validate the namespace where kibana logging resource is created and due to that it is possible to replace the original openshift-logging console link kibana console to different one, created based on the new CR for the new kibana resource. This could lead to an...
CVE-2020-27816
The elasticsearch-operator does not validate the namespace where kibana logging resource is created and due to that it is possible to replace the original openshift-logging console link kibana console to different one, created based on the new CR for the new kibana resource. This could lead to an...
Design/Logic Flaw
The elasticsearch-operator does not validate the namespace where kibana logging resource is created and due to that it is possible to replace the original openshift-logging console link kibana console to different one, created based on the new CR for the new kibana resource. This could lead to an...
CVE-2020-27816
The elasticsearch-operator does not validate the namespace where kibana logging resource is created and due to that it is possible to replace the original openshift-logging console link kibana console to different one, created based on the new CR for the new kibana resource. This could lead to an...
CVE-2020-27816
The CVE-2020-27816 issue affects the elasticsearch-operator (container) prior to version 4.7, where the operator does not validate the namespace for kibana logging resources, enabling replacement of the openshift-logging console link and potential arbitrary URL redirection. Red Hat advisory RHSA-...
CVE-2020-27816
The elasticsearch-operator does not validate the namespace where kibana logging resource is created and due to that it is possible to replace the original openshift-logging console link kibana console to different one, created based on the new CR for the new kibana resource. This could lead to an...
Red Hat OpenShift Elasticsearch-operator Input Validation Error Vulnerability
Red Hat OpenShift Elasticsearch-operator is a software from Red Hat USA for use in OpenShift to support interaction with Elasticsearch. A security vulnerability exists in elasticsearch-operator-container versions prior to 4.7 that stems from not validating the namespace in which a kibana logging...
Spotify resets some user logins after hacker database found floating online
A team of researchers working for vpnMentor has found a treasure trove in the form of an unsecured Elasticsearch database containing over 380 million records. The trove contained login credentials and other data belonging to Spotify users. So whats Spotify doing leaving its user data hanging arou...