11 matches found
CVE-2019-16716
OX App Suite through 7.10.2 has Incorrect Access Control...
EUVD-2019-3193
Malware in sbrugna...
EUVD-2019-5472
Malware in sbrugna...
SUSE CVE-2021-22132
Elasticsearch versions 7.7.0 to 7.10.1 contain an information disclosure flaw in the async search API. Users who execute an async search will improperly store the HTTP headers. An Elasticsearch user with the ability to read the .tasks index could obtain sensitive request headers of other users in...
Kibana 7.10.2 < 7.14.1 Code Execution
According to its self-reported version number, the Kibana application running on the remote host is prior to 7.14.1. It is, therefore, affected by : - A code execution vulnerability due to an older version of js-yaml CVE-2021-22150 - An HTML Injection due to a lack of sanitization of document...
Elastic Kibana Code Execution Vulnerability (ESA-2021-21)
Elastic Kibana is prone to a code execution vulnerability. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:elastic:kibana";...
CVE-2021-22132
Elasticsearch versions 7.7.0 to 7.10.1 contain an information disclosure flaw in the async search API. Users who execute an async search will improperly store the HTTP headers. An Elasticsearch user with the ability to read the .tasks index could obtain sensitive request headers of other users in...
CVE-2019-16716
OX App Suite through 7.10.2 has Incorrect Access Control...
CVE-2019-14227
OX App Suite 7.10.1 and 7.10.2 allows XSS...
CVE-2019-14226
OX App Suite through 7.10.2 has Insecure Permissions...
CVE-2019-11522
OX App Suite 7.10.0 to 7.10.2 allows XSS...