CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

6 matches found

OSV•added 2023/07/25 3:30 p.m.•4 views

GHSA-Q8CM-3V62-JJ79 Remote code execution in Apache Jackrabbit

Java object deserialization issue in Jackrabbit webapp/standalone on all platforms allows attacker to remotely execute code via RMIVersions up to including 2.20.10 stable branch and 2.21.17 unstable branch use the component "commons-beanutils", which contains a class that can be used for remote...

9.8CVSS7.7AI score0.02657EPSS

Exploits0References6

OSV•added 2020/01/28 10:26 p.m.•28 views

GHSA-2289-PQFQ-6WX7 Unrestricted upload of file with dangerous type in Apache Solr

The 8.1.1 and 8.2.0 releases of Apache Solr contain an insecure setting for the ENABLEREMOTEJMXOPTS configuration option in the default solr.in.sh configuration file shipping with Solr. If you use the default solr.in.sh file from the affected releases, then JMX monitoring will be enabled and...

9.8CVSS9.4AI score0.21866EPSS

Exploits4References10

BDU FSTEC•added 2019/12/22 12:0 a.m.•5 views

The vulnerability of the solr.in.sh component of the Apache Solr search server allows attackers to upload malicious files.

The vulnerability of the solr.in.sh component of the Apache Solr search server is related to the unlimited loading of dangerous files. Exploiting this vulnerability allows a malicious actor to upload malicious files through the RMI PORT remotely...

10CVSS7.7AI score0.21866EPSS

Exploits4References4Affected Software1