577 matches found
[SECURITY] [DLA 1046-1] lucene-solr security update
Package : lucene-solr Version : 3.6.0+dfsg-1+deb7u2 CVE ID : CVE-2017-3163 Debian Bug : 867712 lucene-solr handler supports an HTTP API /replication?command=filecontent&file=filename which is vulnerable to path traversal attack. Specifically, this API does not perform any validation of the user...
DLA-1046-1 lucene-solr - security update
Bulletin has no description...
PT-2016-5783
Name of the Vulnerable Software and Affected Versions dotCMS versions prior to 3.5.1 Description The issue is related to a cross-site scripting XSS vulnerability. It allows remote attackers to inject arbitrary web script or HTML via the query parameter to the "c/portal/layout" endpoint,...
Solr 3.5.0 - Arbitrary Data Deletion
Exploit for java platform in category web applications Exploit Title: All Solr Data Can Be Delete Google Dork: intext:Schema Config Analysis Schema Browser Statistics Info Distribution Ping Logging Date: 5/2/2016 Exploit Author: N37 Myanmar Vendor Homepage: http://lucene.apache.org/solr/ Software...
Solr 3.5.0 - Arbitrary Data Deletion
Solr 3.5.0 - Arbitrary Data Deletion Exploit Title: All Solr Data Can Be Delete Google Dork: intext:Schema Config Analysis Schema Browser Statistics Info Distribution Ping Logging Date: 5/2/2016 Exploit Author: N37 Myanmar Vendor Homepage: http://lucene.apache.org/solr/ Software Link:...
Solr 3.5.0 - Arbitrary Data Deletion
Exploit Title: All Solr Data Can Be Delete Google Dork: intext:Schema Config Analysis Schema Browser Statistics Info Distribution Ping Logging Date: 5/2/2016 Exploit Author: N37 Myanmar Vendor Homepage: http://lucene.apache.org/solr/ Software Link: https://archive.apache.org/dist/lucene/solr/3.5....
3618med.com XSS vulnerability
Vulnerable URL: http://www.3618med.com/LuceneSearchWebServiceClientWeb/search/lsearchServlet Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 20:43 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 31396 Google...
[SECURITY] Fedora 22 Update: elasticsearch-1.6.1-0.fc22
Elasticsearch is a search server based on Lucene. It provides a distributed, multitenant-capable full-text search engine with a RESTful web interface and schema-free JSON documents. Elasticsearch is developed in Java and is relea sed as open source under the terms of the Apache License. It is a...
Elasticsearch Arbitrary Code Execution Vulnerability
Elasticsearch is a set of open source distributed RESTful search engine built on Lucene , it is mainly used in cloud computing , and supports data indexing via HTTP using JSON . A security vulnerability exists in Elasticsearch that allows a remote attacker to submit a special request to execute...
SearchBlox 8.2 Cross Site Scripting
Advisory ID: HTB23256 Product: SearchBlox Vendor: SearchBlox Software, Inc. Vulnerable Versions: 8.2 and probably prior Tested Version: 8.2 Advisory Publication: April 22, 2015 without technical details Vendor Notification: April 22, 2015 Vendor Patch: May 26, 2015 Public Disclosure: June 17, 201...
Elasticsearch vulnerability CVE-2015-4165
Summary: Elasticsearch versions 1.0.0 - 1.5.2 are vulnerable to an engineered attack on other applications on the system. The snapshot API may be used indirectly to place snapshot metadata files into locations that are writeable by the user running the Elasticsearch process. It is possible to...
Fedora 21 : dovecot-2.2.16-2.fc21 (2015-7089)
fixes CVE-2015-3420: SSL/TLS handshake failures leading to a crash of the login process - dovecot updated to 2.2.16 - auth: Don't crash if master user login is attempted without any configured master=yes passdbs - Parsing UTF-8 text for mails could have caused broken results sometimes if bufferin...
Fedora 22 : dovecot-2.2.16-2.fc22 (2015-7156)
fixes CVE-2015-3420: SSL/TLS handshake failures leading to a crash of the login process - dovecot updated to 2.2.16 - auth: Don't crash if master user login is attempted without any configured master=yes passdbs - Parsing UTF-8 text for mails could have caused broken results sometimes if bufferin...
Debian GNU/Linux Remote Compromise Data Compromise
The multiple vulnerabilities in the lucene-solr package of the Debian GNU/Linux operating system may lead to breaches of the confidentiality and accessibility of protected information. These vulnerabilities can be exploited remotely...
Amazon Linux AMI : php-ZendFramework (ALAS-2014-460)
The 1 ZendLdap class in Zend before 1.12.9 and 2 Zend\Ldap component in Zend 2.x before 2.2.8 and 2.3.x before 2.3.3 allows remote attackers to bypass authentication via a password starting with a null byte, which triggers an unauthenticated bind. CVE-2014-8088 The 1.12.9, 2.2.8, and 2.3.3 releas...
Debian DSA-2963-1 : lucene-solr - security update
Multiple vulnerabilities were found in Solr, an open source enterprise search server based on Lucene, resulting in information disclosure or code execution. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian...
Fedora 19 : dovecot-2.2.13-1.fc19 (2014-6331)
Fixed a DoS attack against imap/pop3-login processes. If SSL/TLS handshake was started but wasn't finished, the login process attempted to eventually forcibly disconnect the client, but failed to do it correctly. This could have left the connections hanging arond for a long time. Affected Dovecot...
[SECURITY] [DSA 2963-1] lucene-solr security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2963-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff June 17, 2014 http://www.debian.org/security/faq -...
Debian Security Advisory DSA 2963-1 (lucene-solr - security update)
Multiple vulnerabilities were found in Solr, an open source enterprise search server based on Lucene, resulting in information disclosure or code execution. OpenVAS Vulnerability Test $Id: deb2963.nasl 6637 2017-07-10 09:58:13Z teissa $ Auto-generated from advisory DSA 2963-1 using nvtgen 1.0...