Skip to content
OpenAdvisories

Archive

July 2014

Vulnerabilities first published in this month (UTC), newest first.

2 results · Clear filters · Feed

  • High 8.1
    CVE-2014-3120 Exploited Public exploit EPSS 89%

    Elasticsearch Improper Access Control vulnerability

    The default configuration in Elasticsearch before 1.2 enables dynamic scripting, which allows remote attackers to execute arbitrary MVEL expressions and Java code via the source parameter to _search. NOTE: this only violates the vendor's intended security pol…

    KEV Mar 25, 2022
  • Medium 6.5
    CVE-2013-3993 Exploited · Ransomware

    IBM InfoSphere BigInsights before 2.1.0.3 allows remote authenticated users to bypass intended file and directory restr…

    KEV May 25, 2022