ECE Projects 'tx_solr[q]' Parameter Cross-Site Scripting Vulnerability

ECE Projects is a project management application. ECE Projects handles a cross-site scripting vulnerability in the 'txsolrq' parameter, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to gain access to sensitive information or...

Drupal Apache Solr Real-Time Module Access Bypass Vulnerability

Drupal is a free, open source content management system developed in PHP and maintained by the Drupal community.Apache Solr Real-Time is one of the search engine modules. An access bypass vulnerability exists in the Drupal Apache Solr Real-Time module in versions 7.x-1.2 prior to 7.x-1.x. An...

Apache Solr Real-Time - Critical - Access Bypass - SA-CONTRIB-2015-119

This module allows content-changes to be committed to Apache Solr in real-time. The module doesn't check the status of an entity being indexed which means that unpublished content will get indexed by Solr and the title and partial content may be exposed to any user who has permission to search si...

drf.com XSS vulnerability

Open Bug Bounty ID: OBB-66029 Description| Value ---|--- Affected Website:| drf.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...

Extract Metadata From Files: ImageCat

Extract Metadata From Files This is an OODT RADIX application that uses Apache Solr , Apache Tika and Apache OODT to ingest 10s of millions of files images,but could be extended to other files in place, and to extract metadata and OCR information from those files/images using Tika and Tesseract O...

Vulnerabilities of the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality and accessibility of protected information

The multiple vulnerabilities in the lucene-solr package of the Debian GNU/Linux operating system may lead to breaches of the confidentiality and accessibility of protected information. These vulnerabilities can be exploited remotely...

Apache Solr < 4.10.5 'plugin.js' XSS

The version of Apache Solr running on the remote web server is affected by a persistent cross-site scripting vulnerability due to a failure to sanitize query histories before returning them to the user of the Solr administration panel. A remote, unauthenticated attacker can exploit this issue to...

Apache Solr Cross-Site Scripting Vulnerability

Apache Solr is an open source search server. A cross-site scripting vulnerability in the Admin UI Plugin / Stats page in version 4.x of Apache Solr prior to 4.10.3 allows remote attackers to inject arbitrary web script or HTML via fieldvaluecache objects...

Cross site scripting

Cross-site scripting XSS vulnerability in the Admin UI Plugin / Stats page in Apache Solr 4.x before 4.10.3 allows remote attackers to inject arbitrary web script or HTML via the fieldvaluecache object...

CVE-2014-3628

Cross-site scripting XSS vulnerability in the Admin UI Plugin / Stats page in Apache Solr 4.x before 4.10.3 allows remote attackers to inject arbitrary web script or HTML via the fieldvaluecache object...

CVE-2014-3628

Cross-site scripting XSS vulnerability in the Admin UI Plugin / Stats page in Apache Solr 4.x before 4.10.3 allows remote attackers to inject arbitrary web script or HTML via the fieldvaluecache object...

CVE-2014-3628

CVE-2014-3628 affects Apache Solr 4.x prior to 4.10.3, specifically the Admin UI Plugin / Stats page. The vulnerability is an XSS due to improper sanitization of data in the fieldvaluecache object, allowing a remote attacker to inject arbitrary script/HTML into a victim’s browser. The issue is do...

CVE-2014-3628

Cross-site scripting XSS vulnerability in the Admin UI Plugin / Stats page in Apache Solr 4.x before 4.10.3 allows remote attackers to inject arbitrary web script or HTML via the fieldvaluecache object...

CVE-2014-3628

Cross-site scripting XSS vulnerability in the Admin UI Plugin / Stats page in Apache Solr 4.x before 4.10.3 allows remote attackers to inject arbitrary web script or HTML via the fieldvaluecache object...

Fedora 19 : dovecot-2.2.13-1.fc19 (2014-6331)

Fixed a DoS attack against imap/pop3-login processes. If SSL/TLS handshake was started but wasn't finished, the login process attempted to eventually forcibly disconnect the client, but failed to do it correctly. This could have left the connections hanging arond for a long time. Affected Dovecot...

Debian DSA-2963-1 : lucene-solr - security update

Multiple vulnerabilities were found in Solr, an open source enterprise search server based on Lucene, resulting in information disclosure or code execution. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian...

[SECURITY] [DSA 2963-1] lucene-solr security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2963-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff June 17, 2014 http://www.debian.org/security/faq -...

Debian Security Advisory DSA 2963-1 (lucene-solr - security update)

Multiple vulnerabilities were found in Solr, an open source enterprise search server based on Lucene, resulting in information disclosure or code execution. OpenVAS Vulnerability Test $Id: deb2963.nasl 6637 2017-07-10 09:58:13Z teissa $ Auto-generated from advisory DSA 2963-1 using nvtgen 1.0...

DSA-2963-1 lucene-solr - security update

Bulletin has no description...

Debian: Security Advisory (DSA-2963-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...