edu.cmu.lti.oaqa.core.provider:solr-provider (1.0.3), org.apache.directmemory:directmemory-solr (0.1-incubating) +20 more potentially affected by CVE-2012-6612 via org.apache.solr:solr-core (3.6.0)

org.apache.solr:solr-core MAVEN version 3.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.solr:solr-core and may be impacted: - edu.cmu.lti.oaqa.core.provider:solr-provider 1.0.3 - org.apache.directmemory:directmemory-solr 0.1-incubating...

Exposure of Resource to Wrong Sphere in org.craftercms:crafter-search

Installations, where crafter-search is not protected, allow unauthenticated remote attackers to create, view, and delete search indexes...

CVE-2021-23264

Installations, where crafter-search is not protected, allow unauthenticated remote attackers to create, view, and delete search indexes...

CVE-2021-23264

Installations, where crafter-search is not protected, allow unauthenticated remote attackers to create, view, and delete search indexes...

CVE-2021-23264

Crafter CMS crafter-search vulnerability (CVE-2021-23264). Affected product: Crafter CMS with the crafter-search component. Root cause: lack of authentication/authorization on crafter-search allowing unauthenticated remote attackers to perform privileged actions. Impact: create, view, and delete ...

CVE-2021-23264 Transmission of Private Resources into a New Sphere ('Resource Leak') and Exposure of Resource to Wrong Sphere in Crafter Search

Installations, where crafter-search is not protected, allow unauthenticated remote attackers to create, view, and delete search indexes...

CVE-2021-23264: Transmission of Private Resources into a New Sphere

Installations, where crafter-search is not protected, allow unauthenticated remote attackers to create, view, and delete search indexes...

CVE-2021-23264

Installations, where crafter-search is not protected, allow unauthenticated remote attackers to create, view, and delete search indexes...

org.craftercms:crafter-deployer (3.0.0), org.craftercms:crafter-engine (3.0.0) +1 more potentially affected by CVE-2017-15682 via org.craftercms:crafter-core (3.0.0)

org.craftercms:crafter-core MAVEN version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.craftercms:crafter-core and may be impacted: - org.craftercms:crafter-deployer 3.0.0 - org.craftercms:crafter-engine 3.0.0 -...