ROOT-APP-MAVEN-CVE-2025-68390 CVE-2025-68390 in io.root.org.elasticsearch.plugin:x-pack-core - Patched by Root

Root has patched CVE-2025-68390 in the io.root.org.elasticsearch.plugin:x-pack-core package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2025-68384 CVE-2025-68384 in io.root.org.elasticsearch.plugin:x-pack-security - Patched by Root

Root has patched CVE-2025-68384 in the io.root.org.elasticsearch.plugin:x-pack-security package for Root:Maven. Multiple fixed versions available...

Denial Of Service (DoS)

org.elasticsearch.plugin, x-pack-security is vulnerable to Denial of Service DoS. The vulnerability is due to the lack of limits or throttling on user settings data allocation, which allows a low-privileged authenticated attacker to submit oversized data and trigger excessive memory allocation...

EUVD-2017-17401

Malware in sbrugna...

EUVD-2017-17400

Malware in sbrugna...

EUVD-2017-17396

Malware in sbrugna...

EUVD-2018-15611

Malware in sbrugna...

EUVD-2018-15610

Malware in sbrugna...

EUVD-2017-17394

Malware in sbrugna...

EUVD-2017-17392

Malware in sbrugna...

EUVD-2016-1546

Malware in sbrugna...

EUVD-2017-17397

Malware in sbrugna...

EUVD-2017-3100

Malware in sbrugna...

EUVD-2017-17399

Malware in sbrugna...

EUVD-2017-17398

Malware in sbrugna...

EUVD-2017-17389

Malware in sbrugna...

EUVD-2018-15607

Malware in sbrugna...

EUVD-2022-4583

Malicious code in bioql PyPI...

Information Disclosure

org.elasticsearch.plugin: x-pack-security is vulnerable to Information Disclosure. The vulnerability arises from the failure to enforce search restrictions during cross-cluster searches when an API key grants both search and replication rights to an index, which allows an attacker to access...

SUSE CVE-2016-10364

With X-Pack installed, Kibana versions 5.0.0 and 5.0.1 were not properly authenticating requests to advanced settings and the short URL service, any authenticated user could make requests to those services regardless of their own permissions...