CVE-2017-18488

The Backup Guard plugin before 1.1.47 for WordPress has multiple XSS issues...

CVE-2017-18488

The Backup Guard plugin before 1.1.47 for WordPress has multiple XSS issues...

Cross site scripting

The Backup Guard plugin before 1.1.47 for WordPress has multiple XSS issues...

CVE-2017-18488

CVE-2017-18488 affects the Backup Guard WordPress plugin, with multiple XSS issues reported in versions prior to 1.1.47. The connected documents confirm the existence of XSS in this plugin, but do not provide technical details about the exact vulnerable component, root cause, impact specifics, ex...

CVE-2017-18488

The Backup Guard plugin before 1.1.47 for WordPress has multiple XSS issues...

CVE-2019-13420

Search Guard versions before 21.0 had an timing side channel issue when using the internal user database...

CVE-2019-13420

Search Guard versions before 21.0 had an timing side channel issue when using the internal user database...

CVE-2019-13419

Search Guard versions before 23.1 had an issue that for aggregations clear text values of anonymised fields were leaked...

CVE-2019-13419

Search Guard versions before 23.1 had an issue that for aggregations clear text values of anonymised fields were leaked...

Code injection

Search Guard versions before 23.1 had an issue that for aggregations clear text values of anonymised fields were leaked...

Code injection

Search Guard versions before 21.0 had an timing side channel issue when using the internal user database...

CVE-2019-13419

Search Guard versions before 23.1 had an issue that for aggregations clear text values of anonymised fields were leaked...

CVE-2019-13419

The CVE-2019-13419 issue affects floragunn Search Guard (Search Guard) prior to version 23.1, where aggregations could leak cleartext values of anonymised fields. The vulnerability is documented across multiple sources (NVD, Red Hat, CNVD) with a common description: before 23.1, an information di...

CVE-2019-13420

CVE-2019-13420 affects floragunn Search Guard (Elasticsearch/ELK plugin) prior to version 21.0. The vulnerability is a timing side-channel in the internal user database, which could leak information and impact confidentiality. The detail provided specifies the root cause as a timing discrepancy w...

CVE-2019-13420

Search Guard versions before 21.0 had an timing side channel issue when using the internal user database...

floragunn Search Guard Input Validation Error Vulnerability

floragunn Search Guard is a German floragunn company for Elasticsearch and ELK open source plug-ins , it mainly provides encryption , authentication , authorization management and log auditing and other functions . An input validation error vulnerability exists in versions prior to floragunn Sear...

CVE-2019-13418

Search Guard versions before 24.0 had an issue that values of string arrays in documents are not properly anonymized...

CVE-2019-13418

Search Guard versions before 24.0 had an issue that values of string arrays in documents are not properly anonymized...

Input validation

Search Guard versions before 24.0 had an issue that values of string arrays in documents are not properly anonymized...

CVE-2019-13417

Search Guard versions before 24.0 had an issue that field caps and mapping API leak field names but not values for fields which are not allowed for the user when field level security FLS is activated...