2446 matches found
GHSA-RJCG-56PH-3QVG vulnerabilities
Vulnerabilities for packages: kubevela-fips, argo-rollouts, spicedb-operator-fips, extism, mattmoor-chainit, kvm-device-plugin, packer, prometheus-statsd-exporter-fips, timoni, pgpool2exporter, kafka-proxy-fips, dynamic-localpv-provisioner-fips, go-md2man, kubernetes-csi-node-driver-registrar-fip...
CVE-2025-58189 vulnerabilities
Vulnerabilities for packages: kubevela-fips, argo-rollouts, spicedb-operator-fips, extism, mattmoor-chainit, kvm-device-plugin, packer, prometheus-statsd-exporter-fips, timoni, pgpool2exporter, kafka-proxy-fips, dynamic-localpv-provisioner-fips, go-md2man, kubernetes-csi-node-driver-registrar-fip...
CVE-2025-61724 vulnerabilities
Vulnerabilities for packages: kubevela-fips, argo-rollouts, spicedb-operator-fips, extism, mattmoor-chainit, kvm-device-plugin, packer, prometheus-statsd-exporter-fips, timoni, pgpool2exporter, kafka-proxy-fips, dynamic-localpv-provisioner-fips, go-md2man, kubernetes-csi-node-driver-registrar-fip...
Linux Distros Unpatched Vulnerability : CVE-2014-6439
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Cross-site scripting XSS vulnerability in the CORS functionality in Elasticsearch before 1.4.0.Beta1 allows remote attackers to inject arbitrary web script or...
Linux Distros Unpatched Vulnerability : CVE-2025-37727
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insertion of sensitive information in log file in Elasticsearch can lead to loss of confidentiality under specific preconditions when auditing requests to the...
Security Bulletin: vulerability in IBM Spectrum Symphony with Elasticsearch
Summary vulerability in IBM Spectrum Symphony with Elasticsearch Vulnerability Details CVEID:CVE-2024-23450 DESCRIPTION: A flaw was discovered in Elasticsearch, where processing a document in a deeply nested pipeline on an ingest node could cause the Elasticsearch node to crash. CWE:CWE-400:...
CVE-2025-37727
Insertion of sensitive information in log file in Elasticsearch can lead to loss of confidentiality under specific preconditions when auditing requests to the reindex API https://www.elastic.co/docs/api/doc/elasticsearch/operation/operation-reindex...
Elasticsearch Leak Exposes 6 Billion Records from Scraping, Old and New Breaches
An Elasticsearch leak exposed 6 billion records from global data breaches and scraping sources, including banking and personal details tied to multiple regions...
BIT-ELASTICSEARCH-2025-37727 Elasticsearch Insertion of sensitive information in log file
Insertion of sensitive information in log file in Elasticsearch can lead to loss of confidentiality under specific preconditions when auditing requests to the reindex API https://www.elastic.co/docs/api/doc/elasticsearch/operation/operation-reindex...
Elasticsearch Insertion of sensitive information in log file
...
EUVD-2025-33703
Elasticsearch: Insertion of Sensitive Information into Log File via reindex API...
Elasticsearch: Insertion of Sensitive Information into Log File via reindex API
Insertion of sensitive information in log file in Elasticsearch can lead to loss of confidentiality under specific preconditions when auditing requests to the reindex API https://www.elastic.co/docs/api/doc/elasticsearch/operation/operation-reindex...
GHSA-56R7-H6MW-RCFV Elasticsearch: Insertion of Sensitive Information into Log File via reindex API
Insertion of sensitive information in log file in Elasticsearch can lead to loss of confidentiality under specific preconditions when auditing requests to the reindex API https://www.elastic.co/docs/api/doc/elasticsearch/operation/operation-reindex...
Cross-site Scripting (XSS)
Overview kibana is an open source Apache Licensed, browser-based analytics and search dashboard for Elasticsearch. Affected versions of this package are vulnerable to Cross-site Scripting XSS via improper input neutralization in the web page generation in Vega visualizations. An attacker can...
Insertion of Sensitive Information into Log File
Overview org.elasticsearch:elasticsearch is a Distributed, RESTful Search Engine. Affected versions of this package are vulnerable to Insertion of Sensitive Information into Log File via the reindex request due to redacting certain fields from the body of rest requests in audit logs. An attacker...
ai.ylyue:yue-library-data-es (>=j8.2.2.0, <=j11.2.2.0), ca.bc.gov.tno:elastic (>=0.0.1-alpha, <=0.0.5-alpha) +629 more potentially affected by CVE-2025-37727 via org.elasticsearch.plugin:reindex-client (>=5.0.0, <=7.17.29)
org.elasticsearch.plugin:reindex-client MAVEN version =5.0.0, =j8.2.2.0, =0.0.1-alpha, =0.1.0, =2.1.0.m8, =2.1.0.m8, =1.4.1, =1.4.0-alpha, =1.4.1, =1.4.0-alpha, =1.2.0.release, =1.1.1.release, =1.4.2.release - cn.patterncat:spring-boot-starter-elasticsearch 0.0.1 -...
CVE-2025-37727
Insertion of sensitive information in log file in Elasticsearch can lead to loss of confidentiality under specific preconditions when auditing requests to the reindex API https://www.elastic.co/docs/api/doc/elasticsearch/operation/operation-reindex...
UBUNTU-CVE-2025-37727
Insertion of sensitive information in log file in Elasticsearch can lead to loss of confidentiality under specific preconditions when auditing requests to the reindex API https://www.elastic.co/docs/api/doc/elasticsearch/operation/operation-reindex...
CVE-2025-37727 Elasticsearch Insertion of sensitive information in log file
Insertion of sensitive information in log file in Elasticsearch can lead to loss of confidentiality under specific preconditions when auditing requests to the reindex API https://www.elastic.co/docs/api/doc/elasticsearch/operation/operation-reindex...
CVE-2025-37727 Elasticsearch Insertion of sensitive information in log file
Insertion of sensitive information in log file in Elasticsearch can lead to loss of confidentiality under specific preconditions when auditing requests to the reindex API https://www.elastic.co/docs/api/doc/elasticsearch/operation/operation-reindex...