784 matches found
EUVD-2022-3531
Malicious code in bioql PyPI...
EUVD-2022-5761
Malicious code in bioql PyPI...
EUVD-2022-2310
Malicious code in bioql PyPI...
EUVD-2022-2373
Malicious code in bioql PyPI...
EUVD-2022-44593
Malicious code in bioql PyPI...
EUVD-2022-3690
Malicious code in bioql PyPI...
EUVD-2022-5297
Malicious code in bioql PyPI...
EUVD-2022-0662
Malicious code in bioql PyPI...
EUVD-2018-0485
Malicious code in bioql PyPI...
EUVD-2022-3336
Malicious code in bioql PyPI...
Apache Solr 6.6.x < 9.8.0 Relative Path Traversal
Relative Path Traversal vulnerability in Apache Solr. Solr instances running on Windows are vulnerable to arbitrary filepath write-access, due to a lack of input-sanitation in the 'configset upload' API. Commonly known as a 'zipslip', maliciously constructed ZIP files can use relative filepaths t...
Linux Distros Unpatched Vulnerability : CVE-2024-45217
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insecure Default Initialization of Resource vulnerability in Apache Solr. New ConfigSets that are created via a Restore command, which copy a configSet from the...
Linux Distros Unpatched Vulnerability : CVE-2024-45216
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper Authentication vulnerability in Apache Solr. Solr instances using the PKIAuthenticationPlugin, which is enabled by default when Solr Authentication is...
Linux Distros Unpatched Vulnerability : CVE-2019-17558
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Apache Solr 5.0.0 to Apache Solr 8.3.1 are vulnerable to a Remote Code Execution through the VelocityResponseWriter. A Velocity template can be provided through...
Linux Distros Unpatched Vulnerability : CVE-2018-1308
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - This vulnerability in Apache Solr 1.2 to 6.6.2 and 7.0.0 to 7.2.1 relates to an XML external entity expansion XXE in the &dataConfig= parameter of Solr's...
Linux Distros Unpatched Vulnerability : CVE-2021-29262
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When starting Apache Solr versions prior to 8.8.2, configured with the SaslZkACLProvider or VMParamsAllAndReadonlyDigestZkACLProvider and no existing...
PT-2025-34650 · Undefined · Undefined
CVE-2025-58037 - Apache Solr SQL Injection CVE ID : CVE-2025-58037 Published : Aug. 23, 2025, 3:15 a.m. | 1 hour, 3 minutes ago Description : Rejected reason: Not used Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...
Linux Distros Unpatched Vulnerability : CVE-2023-50290
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Solr. The Solr Metrics API publishes all unprotected environment variables...
Security Bulletin: A vulnerability affect Apache Solr, Apache Zookeeper, Logstash shipped with IBM Operations Analytics - Log Analysis (WS-2022-0468)
Summary There is a Jackson-Core vulnerability in Apache Solr, Apache Zookeeper, Logstash shipped with IBM Operations Analytics - Log Analysis Vulnerability Details WSID: WS-2022-0468 DESCRIPTION: The jackson-core package is vulnerable to a Denial of Service DoS attack. The methods in the classes...
CVE-2024-52012
Relative Path Traversal vulnerability in Apache Solr. Solr instances running on Windows are vulnerable to arbitrary filepath write-access, due to a lack of input-sanitation in the "configset upload" API. Commonly known as a "zipslip", maliciously constructed ZIP files can use relative filepaths t...