4856 matches found
CVE-2015-1427: Undefined Security Weakness
The Groovy scripting engine in Elasticsearch before 1.3.8 and 1.4.x before 1.4.3 allows remote attackers to bypass the sandbox protection mechanism and execute arbitrary shell commands via a crafted script...
Elasticsearch Groovy Scripting Engine Sandbox Security Bypass Vulnerability
ElasticSearch is an open source , distributed , RESTful search engine built on Lucene . A security bypass vulnerability exists in the Elasticsearch Groovy scripting engine sandbox, which can be exploited by an attacker to bypass certain security restrictions and perform unauthorized operations...
elasticsearch -- remote OS command execution via Groovy scripting engine
Elastic reports: Vulnerability Summary: Elasticsearch versions 1.3.0-1.3.7 and 1.4.0-1.4.2 have vulnerabilities in the Groovy scripting engine that were introduced in 1.3.0. The vulnerability allows an attacker to construct Groovy scripts that escape the sandbox and execute shell commands as the...
ElasticSearch Search Groovy Sandbox Bypass
This module exploits a remote command execution RCE vulnerability in ElasticSearch, exploitable by default on ElasticSearch prior to 1.4.3. The bug is found in the REST API, which does not require authentication, where the search function allows groovy code execution and its sandbox can be bypass...
Mozilla Defense Platform: MozDef
Mozilla Defense Platform The inspiration for MozDef comes from the large arsenal of tools available to attackers. Suites like metasploit, armitage, lair, dradis and others are readily available to help attackers coordinate, share intelligence and finely tune their attacks in real time. Defenders...
Open Source OpenSOC Security Analytics Framework Released
Cisco announced today that it has made available through open source a framework that integrates data analytics tools into security operations. “The OpenSOC framework helps organizations make big data part of their technical security strategy by providing a platform for the application of anomaly...
Oracle Linux 6 : rsyslog7 (ELSA-2014-1654)
The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2014-1654 advisory. 7.4.10-3 - fix CVE-2014-3634 resolves: 1149150 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...
CVE-2014-4326 Remote command execution in Logstash zabbix and nagios_nsca outputs.
Vendor: Elasticsearch Product: Logstash CVE: CVE-2014-4326 Affected versions: Logstash 1.0.14 through 1.4.1 Recommendations: All affected users should upgrade to Logstash 1.4.2. We also provide patch instructions for Logstash 1.3.x at the bottom of this note. The vulnerability impacts deployments...
CVE-2014-6439
Cross-site scripting XSS vulnerability in the CORS functionality in Elasticsearch before 1.4.0.Beta1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
UBUNTU-CVE-2014-6439
Cross-site scripting XSS vulnerability in the CORS functionality in Elasticsearch before 1.4.0.Beta1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
Cross site scripting
Cross-site scripting XSS vulnerability in the CORS functionality in Elasticsearch before 1.4.0.Beta1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2014-6439
Cross-site scripting XSS vulnerability in the CORS functionality in Elasticsearch before 1.4.0.Beta1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2014-6439
Cross-site scripting XSS vulnerability in the CORS functionality in Elasticsearch before 1.4.0.Beta1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
at.molindo:esi4j (>=0.3.0-alpha-1, <=0.3.2), be.thematchbox:abstractriver (1.0.1) +285 more potentially affected by CVE-2014-6439 via org.elasticsearch:elasticsearch (>=0.6.0, <=1.3.9)
org.elasticsearch:elasticsearch MAVEN version =0.6.0, =0.3.0-alpha-1, =1.0.0, =1.1.2, =1.0.0, =0.20.3-build002, =0.1pre4, =0.1pre4, =0.1pre4, =0.1pre4, =0.0.1, =0.1.13, =0.1.1, =0.8.1, =0.1.0, =0.1.1 and more Source cves: CVE-2014-6439 Source advisory: MEND:CVE-2014-6439...
CVE-2014-6439
Cross-site scripting XSS vulnerability in the CORS functionality in Elasticsearch before 1.4.0.Beta1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2014-6439
The CVE-2014-6439 entry tracks a Cross-site Scripting (XSS) vulnerability in the CORS functionality of Elasticsearch prior to 1.4.0.Beta1. The issue could allow remote attackers to inject arbitrary script/HTML via unspecified vectors. Public references confirm this XSS surface is tied to Elastics...
CVE-2014-6439: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the CORS functionality in Elasticsearch before 1.4.0.Beta1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
PT-2014-7220
Name of the Vulnerable Software and Affected Versions Elasticsearch versions prior to 1.4.0.Beta1 Description A cross-site scripting XSS issue exists in the CORS functionality, allowing remote attackers to inject arbitrary web script or HTML via unspecified vectors. Recommendations For versions...
Elasticsearch vulnerability CVE-2014-6439
Summary: Elasticsearch versions 1.3.x and prior have a default configuration for CORS that allows an attacker to craft links that could cause a user’s browser to send requests to Elasticsearch instances on their local network. These requests could cause data loss or compromise. We have been...