Lucene search
K

11 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2017-6519

Malware in sbrugna...

8.8CVSS8.8AI score0.00381EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2010-0216

Malware in sbrugna...

5CVSS6.4AI score0.01646EPSS
Exploits1References9
OSV
OSV
added 2025/04/30 2:54 p.m.4 views

CVE-2025-32971 XWiki Solr script service doesn't take dropped programming right into account

XWiki is a generic wiki platform. In versions starting from 4.5.1 to before 15.10.13, from 16.0.0-rc-1 to before 16.4.4, and from 16.5.0-rc-1 to before 16.8.0-rc-1, the Solr script service doesn't take dropped programming rights into account. The Solr script service that is accessible in XWiki's...

3.8CVSS6.7AI score0.00091EPSS
Exploits1References5
Zero Day Initiative
Zero Day Initiative
added 2022/10/14 12:0 a.m.23 views

Adobe ColdFusion Solr Service XML External Entity Processing Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe ColdFusion. Authentication is not required to exploit this vulnerability. The specific flaw exists within the Apache Solr service. Due to the improper restriction of XML External Entity...

5.9CVSS2.8AI score0.02751EPSS
Exploits0References1
OSV
OSV
added 2017/11/21 1:29 p.m.1 views

CVE-2017-15044

The default installation of DocuWare Fulltext Search server through 6.11 allows remote users to connect to and download searchable text from the embedded Solr service, bypassing DocuWare's access control features of the DocuWare user interfaces and API. An attacker can also gain privileges by...

8.8CVSS5.8AI score0.00381EPSS
Exploits0References1
Prion
Prion
added 2017/11/21 1:29 p.m.9 views

Design/Logic Flaw

The default installation of DocuWare Fulltext Search server through 6.11 allows remote users to connect to and download searchable text from the embedded Solr service, bypassing DocuWare's access control features of the DocuWare user interfaces and API. An attacker can also gain privileges by...

6.5CVSS8.8AI score0.00381EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2017/11/21 1:0 p.m.13 views

CVE-2017-15044

The default installation of DocuWare Fulltext Search server through 6.11 allows remote users to connect to and download searchable text from the embedded Solr service, bypassing DocuWare's access control features of the DocuWare user interfaces and API. An attacker can also gain privileges by...

8.9AI score0.00381EPSS
Exploits0References1
Dsquare
Dsquare
added 2012/03/18 12:0 a.m.40 views

Adobe Coldfusion Solr Service Information Disclosure

Adobe ColdFusion Solr Service Information Disclosure Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...

5CVSS0.5AI score0.01646EPSS
Exploits1References2
NVD
NVD
added 2010/02/03 6:30 p.m.17 views

CVE-2010-0185

The default configuration of Adobe ColdFusion 9.0 does not restrict access to collections that have been created by the Solr Service, which allows remote attackers to obtain collection metadata, search information, and index data via a request to an unspecified URL...

5CVSS6.7AI score0.01646EPSS
Exploits1References8
Prion
Prion
added 2010/02/03 6:30 p.m.12 views

Default configuration

The default configuration of Adobe ColdFusion 9.0 does not restrict access to collections that have been created by the Solr Service, which allows remote attackers to obtain collection metadata, search information, and index data via a request to an unspecified URL...

5CVSS7.2AI score0.01646EPSS
Exploits1References8Affected Software1
Cvelist
Cvelist
added 2010/02/03 6:0 p.m.20 views

CVE-2010-0185

The default configuration of Adobe ColdFusion 9.0 does not restrict access to collections that have been created by the Solr Service, which allows remote attackers to obtain collection metadata, search information, and index data via a request to an unspecified URL...

6.7AI score0.01646EPSS
Exploits1References8
Rows per page
Query Builder