Archive
July 2014
Vulnerabilities first published in this month (UTC), newest first.
2 results · Clear filters · Feed
-
High 8.1
Elasticsearch Improper Access Control vulnerability
The default configuration in Elasticsearch before 1.2 enables dynamic scripting, which allows remote attackers to execute arbitrary MVEL expressions and Java code via the source parameter to _search. NOTE: this only violates the vendor's intended security pol…
KEV Mar 25, 2022 -
Medium 6.5CVE-2013-3993 Exploited · Ransomware
IBM InfoSphere BigInsights before 2.1.0.3 allows remote authenticated users to bypass intended file and directory restr…
KEV May 25, 2022