Unity Linux 20.1060e / 20.1070e Security Update: sphinx (UTSA-2026-016628)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-016628 advisory. SphinxSearch in Sphinx Technologies Sphinx through 3.1.1 allows directory traversal in conjunction with CVE-2019-14511 because the mysql client can be used for CALL...

ROS-20240626-12

A vulnerability in the Sphinx search engine is related to a path traversal error. Exploitation of the vulnerability could allow an attacker acting remotely to gain unauthorized access to the protected information using the CALL SNIPPETS statement or the loadfile function...

GHSA-XGFM-FJX6-62MJ readthedocs-sphinx-search vulnerable to cross-site scripting when including search results from malicious projects

Impact This vulnerability could have allowed an attacker to include arbitrary HTML content in search results by having a user search a malicious project. This was due to our search client not correctly escaping all user content from search results. You can find more information in the advisory...

PT-2024-40529 · Unknown · Readthedocs-Sphinx-Search

Name of the Vulnerable Software and Affected Versions: readthedocs-sphinx-search versions prior to 0.3.2 Description: This issue could have allowed an attacker to include arbitrary HTML content in search results by having a user search a malicious project. The problem was due to the search client...

Sphinx Technologies Sphinx 路径遍历漏洞

Sphinx Technologies Sphinx is a full-text F/OSS search engine from Sphinx Technologies, USA. Sphinx Technologies Sphinx suffers from a path traversal vulnerability that stems from the discovery that sphinxsearch, a fast standalone full-text SQL search engine, can be allowed to abuse configuration...

Sphinx Search Server Public WAN (Internet) / Public LAN Accessible

The script checks if the target host is running an Sphinx search server accessible from a public WAN Internet / public LAN. Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Sphinx search server Detection

The script checks the presence of a Sphinx search server and sets the version in the kb. SPDX-FileCopyrightText: 2015 SCHUTZWERK GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later...