Lucene search
+L

1398 matches found

Prion
Prion
added 2015/01/06 3:59 p.m.23 views

Cross site scripting

Cross-site scripting XSS vulnerability in the Admin UI Plugin / Stats page in Apache Solr 4.x before 4.10.3 allows remote attackers to inject arbitrary web script or HTML via the fieldvaluecache object...

4.3CVSS6.1AI score0.04702EPSS
SaveExploits0References2Affected Software1
NVD
NVD
added 2015/01/06 3:59 p.m.25 views

CVE-2014-3628

Cross-site scripting XSS vulnerability in the Admin UI Plugin / Stats page in Apache Solr 4.x before 4.10.3 allows remote attackers to inject arbitrary web script or HTML via the fieldvaluecache object...

4.3CVSS5.6AI score0.04702EPSS
SaveExploits0References2
CVE
CVE
added 2015/01/06 3:00 p.m.84 views

CVE-2014-3628

CVE-2014-3628 affects Apache Solr 4.x prior to 4.10.3, specifically the Admin UI Plugin / Stats page. The vulnerability is an XSS due to improper sanitization of data in the fieldvaluecache object, allowing a remote attacker to inject arbitrary script/HTML into a victim’s browser. The issue is do...

4.3CVSS5.7AI score0.04702EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2015/01/06 3:00 p.m.38 views

CVE-2014-3628

Cross-site scripting XSS vulnerability in the Admin UI Plugin / Stats page in Apache Solr 4.x before 4.10.3 allows remote attackers to inject arbitrary web script or HTML via the fieldvaluecache object...

5.5AI score0.04702EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2015/01/06 3:00 p.m.45 views

CVE-2014-3628

Cross-site scripting XSS vulnerability in the Admin UI Plugin / Stats page in Apache Solr 4.x before 4.10.3 allows remote attackers to inject arbitrary web script or HTML via the fieldvaluecache object...

4.3CVSS5.6AI score0.04702EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2014/06/18 12:00 a.m.36 views

Fedora 19 : dovecot-2.2.13-1.fc19 (2014-6331)

Fixed a DoS attack against imap/pop3-login processes. If SSL/TLS handshake was started but wasn't finished, the login process attempted to eventually forcibly disconnect the client, but failed to do it correctly. This could have left the connections hanging arond for a long time. Affected Dovecot...

5CVSS5.7AI score0.03331EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2014/06/18 12:00 a.m.50 views

Debian DSA-2963-1 : lucene-solr - security update

Multiple vulnerabilities were found in Solr, an open source enterprise search server based on Lucene, resulting in information disclosure or code execution. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian...

6.4CVSS5.3AI score0.56255EPSS
SaveExploits1References5
Debian
Debian
added 2014/06/17 7:32 p.m.122 views

[SECURITY] [DSA 2963-1] lucene-solr security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2963-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff June 17, 2014 http://www.debian.org/security/faq -...

6.4CVSS6.5AI score0.56255EPSS
SaveExploits1
OpenVAS
OpenVAS
added 2014/06/17 12:00 a.m.36 views

Debian Security Advisory DSA 2963-1 (lucene-solr - security update)

Multiple vulnerabilities were found in Solr, an open source enterprise search server based on Lucene, resulting in information disclosure or code execution. OpenVAS Vulnerability Test $Id: deb2963.nasl 6637 2017-07-10 09:58:13Z teissa $ Auto-generated from advisory DSA 2963-1 using nvtgen 1.0...

6.4CVSS6.5AI score0.56255EPSS
SaveExploits1References1
OSV
OSV
added 2014/06/17 12:00 a.m.31 views

DSA-2963-1 lucene-solr - security update

Bulletin has no description...

7.5CVSS5.9AI score0.56255EPSS
SaveExploits1
OpenVAS
OpenVAS
added 2014/06/16 12:00 a.m.43 views

Debian: Security Advisory (DSA-2963-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS6.5AI score0.56255EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
added 2014/05/19 12:00 a.m.37 views

Fedora 20 : dovecot-2.2.13-1.fc20 (2014-6338)

Fixed a DoS attack against imap/pop3-login processes. If SSL/TLS handshake was started but wasn't finished, the login process attempted to eventually forcibly disconnect the client, but failed to do it correctly. This could have left the connections hanging arond for a long time. Affected Dovecot...

5CVSS5.7AI score0.03331EPSS
SaveExploits0References4
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2014/02/10 12:00 a.m.56 views

JVN#14876762: Apache Commons FileUpload vulnerable to denial-of-service (DoS)

Apache Commons FileUpload provided by Apache Software Foundation contains an issue in processing a multi-part request, which may cause the process to be in an infinite loop. As of 2014 February 12, an exploit tool to attack against this vulnerability has been confirmed. Impact Processing a...

7.5CVSS7.2AI score0.82766EPSS
SaveExploits8
OpenVAS
OpenVAS
added 2014/01/29 12:00 a.m.39 views

Apache Solr XML External Entity (XXE) Vulnerability (SOLR-3895, SOLR-5520) - Linux

Apache Solr is prone to an XML external entity XXE vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apache:solr";...

6.3AI score
SaveExploits0References6
OpenVAS
OpenVAS
added 2014/01/29 12:00 a.m.33 views

Apache Solr Directory Traversal Vulnerability (SOLR-4882, SOLR-5520) - Linux

Apache Solr is prone to a directory traversal vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apache:solr";...

4.3CVSS6.3AI score0.56255EPSS
SaveExploits1References6
OpenVAS
OpenVAS
added 2014/01/29 12:00 a.m.26 views

Apache Solr Directory Traversal Vulnerability (SOLR-4882, SOLR-5520) - Windows

Apache Solr is prone to a directory traversal vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apache:solr";...

4.3CVSS6.5AI score0.56255EPSS
SaveExploits1References6
OpenVAS
OpenVAS
added 2014/01/29 12:00 a.m.12 views

Apache Solr Detection (HTTP)

HTTP based detection of Apache Solr. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.903506";...

5.8AI score
SaveExploits0References1
OpenVAS
OpenVAS
added 2014/01/29 12:00 a.m.27 views

Apache Solr XML External Entity (XXE) Vulnerability (SOLR-4881, SOLR-5520) - Windows

Apache Solr is prone to an XML external entity XXE vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apache:solr";...

6.4CVSS6.5AI score0.114EPSS
SaveExploits0References5
OpenVAS
OpenVAS
added 2014/01/29 12:00 a.m.46 views

Apache Solr XML External Entity (XXE) Vulnerability (SOLR-4881, SOLR-5520) - Linux

Apache Solr is prone to an XML external entity XXE vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apache:solr";...

6.4CVSS6.3AI score0.114EPSS
SaveExploits0References5
OpenVAS
OpenVAS
added 2014/01/29 12:00 a.m.27 views

Apache Solr XML External Entity (XXE) Vulnerability (SOLR-3895, SOLR-5520) - Windows

Apache Solr is prone to an XML external entity XXE vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apache:solr";...

6.5AI score
SaveExploits0References6
Rows per page
Query Builder