Lucene search
+L

53 matches found

Vulnrichment
Vulnrichment
added 2025/03/11 12:00 a.m.15 views

CVE-2024-58102

An issue was discovered in Datalust Seq before 2024.3.13545. An insecure default parsing depth limit allows stack consumption when parsing user-supplied queries containing deeply nested expressions...

5.7CVSS5.6AI score0.00347EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2025/03/11 12:00 a.m.36 views

CVE-2024-58102

An issue was discovered in Datalust Seq before 2024.3.13545. An insecure default parsing depth limit allows stack consumption when parsing user-supplied queries containing deeply nested expressions...

5.7CVSS0.00347EPSS
SaveExploits0References3
CVE
CVE
added 2025/03/11 12:00 a.m.84 views

CVE-2024-58102

CVE-2024-58102 affects Datalust Seq prior to 2024.3.13545. The issue is an insecure default parsing depth limit that allows stack consumption when processing user-supplied queries containing deeply nested expressions. This is the stated root cause and impacts availability (via potential stack exh...

6.5CVSS7.2AI score0.00347EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2025/03/11 12:00 a.m.37 views

CVE-2025-27911

An issue was discovered in Datalust Seq before 2024.3.13545. Expansion of identifiers in message templates can be used to bypass the system "Event body limit bytes" setting, leading to increased resource consumption. With sufficiently large events, there can be disk space exhaustion if saved to...

6.5CVSS0.00428EPSS
SaveExploits0References2
CVE
CVE
added 2025/03/11 12:00 a.m.91 views

CVE-2025-27912

CVE-2025-27912 affects Datalust Seq prior to 2024.3.13545. The issue is caused by missing Content-Type validation, enabling CSRF when a user authenticated via Entra ID/OpenID Connect, or via username/password/AD, visits a malicious site on the same TLD as the Seq server. Exploitation could allow ...

8.8CVSS7.2AI score0.00185EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2025/03/11 12:00 a.m.51 views

CVE-2025-27912

An issue was discovered in Datalust Seq before 2024.3.13545. Missing Content-Type validation can lead to CSRF when 1 Entra ID or OpenID Connect authentication is in use and a user visits a compromised/malicious site, or 2 when username/password or Active Directory authentication is in use and a...

8.8CVSS0.00185EPSS
SaveExploits0References2
NVD
NVD
added 2024/03/21 2:15 p.m.22 views

CVE-2024-29866

Datalust Seq before 2023.4.11151 and 2024 before 2024.1.11146 has Incorrect Access Control because a Project Owner or Organization Owner can escalate to System privileges...

9.1CVSS6.8AI score0.0069EPSS
SaveExploits0References2
OSV
OSV
added 2024/03/21 2:15 p.m.10 views

CVE-2024-29866

Datalust Seq before 2023.4.11151 and 2024 before 2024.1.11146 has Incorrect Access Control because a Project Owner or Organization Owner can escalate to System privileges...

9.1CVSS5.8AI score0.0069EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/03/21 12:00 a.m.11 views

PT-2024-23091 · Datalust · Datalust Seq

Name of the Vulnerable Software and Affected Versions: Datalust Seq versions before 2023.4.11151 Datalust Seq version 2024 before 2024.1.11146 Description: The issue is related to Incorrect Access Control, where a Project Owner or Organization Owner can escalate to System privileges. This can be...

9.1CVSS6.5AI score0.0069EPSS
SaveExploits0References7
Vulnrichment
Vulnrichment
added 2024/03/21 12:00 a.m.16 views

CVE-2024-29866

Datalust Seq before 2023.4.11151 and 2024 before 2024.1.11146 has Incorrect Access Control because a Project Owner or Organization Owner can escalate to System privileges...

7.2AI score0.0069EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/03/21 12:00 a.m.14 views

Datalust Seq 安全漏洞

Datalust Seq is a logging server from Datalust Australia. It is used to speed up diagnostics in complex, asynchronous and distributed applications. A security vulnerability exists in Datalust Seq versions prior to 2023.4.11151 and prior to 2024.1.11146, which stems from an application having...

9.1CVSS6.9AI score0.0069EPSS
SaveExploits0References3
CVE
CVE
added 2024/03/21 12:00 a.m.76 views

CVE-2024-29866

Datalust Seq is affected by an Incorrect Access Control vulnerability disclosed as CVE-2024-29866. Versions before 2023.4.11151 and before 2024.1.11146 allow a Project Owner or Organization Owner to escalate to System privileges. The issue is described consistently across sources, with a high-sev...

9.1CVSS7.1AI score0.0069EPSS
SaveExploits0References2Affected Software1
NVD
NVD
added 2023/07/22 5:15 p.m.43 views

CVE-2023-38195

Datalust Seq before 2023.2.9489 allows insertion of sensitive information into an externally accessible file or directory. This is exploitable only when external SQL Server or PostgreSQL metadata storage is used. Exploitation can only occur from a high-privileged user account...

4.9CVSS5AI score0.00518EPSS
SaveExploits0References1
Prion
Prion
added 2023/07/22 5:15 p.m.24 views

Design/Logic Flaw

Datalust Seq before 2023.2.9489 allows insertion of sensitive information into an externally accessible file or directory. This is exploitable only when external SQL Server or PostgreSQL metadata storage is used. Exploitation can only occur from a high-privileged user account...

3.3CVSS5AI score0.00518EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2023/07/22 12:00 a.m.86 views

CVE-2023-38195

Datalust Seq versions prior to 2023.2.9489 are affected. The issue allows insertion of sensitive information into externally accessible files or directories when external metadata storage (SQL Server or PostgreSQL) is used, and exploitation requires a high-privilege user. Remediation: upgrade to ...

4.9CVSS5AI score0.00518EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2023/07/22 12:00 a.m.11 views

Datalust Seq 安全漏洞

Datalust Seq is a logging server from Datalust Australia. It is used to speed up diagnostics in complex, asynchronous and distributed applications. A security vulnerability exists in Datalust Seq versions prior to 2023.2.9489, which stems from allowing sensitive information to be inserted into...

4.9CVSS5.2AI score0.00518EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2023/07/22 12:00 a.m.17 views

CVE-2023-38195

Datalust Seq before 2023.2.9489 allows insertion of sensitive information into an externally accessible file or directory. This is exploitable only when external SQL Server or PostgreSQL metadata storage is used. Exploitation can only occur from a high-privileged user account...

6.6AI score0.00518EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2023/07/22 12:00 a.m.48 views

CVE-2023-38195

Datalust Seq before 2023.2.9489 allows insertion of sensitive information into an externally accessible file or directory. This is exploitable only when external SQL Server or PostgreSQL metadata storage is used. Exploitation can only occur from a high-privileged user account...

5.3AI score0.00518EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2023/07/22 12:00 a.m.18 views

PT-2023-26331 · Datalust +1 · Datalust Seq +1

Name of the Vulnerable Software and Affected Versions: Datalust Seq versions prior to 2023.2.9489 Description: The issue allows insertion of sensitive information into an externally accessible file or directory. This can be exploited when external metadata storage, such as SQL Server or PostgreSQ...

4.9CVSS5.2AI score0.00518EPSS
SaveExploits0References4
Check Point Advisories
Check Point Advisories
added 2022/10/12 12:00 a.m.35 views

Datalust Seq Authentication Bypass (CVE-2018-8096)

An authentication bypass vulnerability exists in Datalust Seq. Successful exploitation of this vulnerability would allow remote attackers to gain unauthorized access into the affected system...

7.5CVSS6.7AI score0.48184EPSS
SaveExploits5
Rows per page
Query Builder