Filter
AND
-Infinity
0
Trending
ElasticElasticsearch allocation of resources without limits or throttling leads to crash
7.5
First published (updated )
maven/org.elasticsearch:elasticsearchElasticsearch Insertion of sensitive information in audit logs
7.5
First published (updated )
maven/org.elasticsearch:elasticsearchElasticsearch StackOverflow vulnerability
7.5
First published (updated )
redhat/katello-configureElasticsearch Remote Code Execution Vulnerability
First published (updated )
maven/org.elasticsearch:elasticsearchElasticsearch elasticsearch-certutil csr fails to encrypt private key
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
maven/org.elasticsearch:elasticsearchElasticsearch Uncontrolled Resource Consumption vulnerability
7.5
First published (updated )
ElasticKibana exposure of sensitive information to an unauthorized actor
7.7
First published (updated )
ElasticWinlogbeat versions before 5.6.16 and 6.6.2 had an insufficient logging flaw. An attacker able to in…
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
redhat/elasticsearchA permission issue was found in Elasticsearch versions before 5.6.15 and 6.6.1 when Field Level Secu…
8.1
First published (updated )
maven/org.elasticsearch:elasticsearch-hadoopElasticsearch-hadoop Unsafe Deserialization
7.8
First published (updated )
go/github.com/elastic/apm-serverAPM Server Insertion of Sensitive Information into Log File
7.5
EPSS
0.09%
First published (updated )
ElasticKibana before 4.5.4 and 4.1.11 when a custom output is configured for logging in, cookies and author…
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
ElasticKibana versions prior to 5.2.1 configured for SSL client access, file descriptors will fail to be cl…
7.5
First published (updated )
ElasticElastic X-Pack Security versions 5.0.0 to 5.4.0 contain a privilege escalation bug in the run_as fun…
8.8
First published (updated )
ElasticAn error was found in the permission model used by X-Pack Alerting 5.0.0 to 5.6.0 whereby users mapp…
8.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
ElasticElasticsearch versions from 6.7.0 before 6.8.8 and 7.0.0 before 7.6.2 contain a privilege escalation…
8.8
First published (updated )
ElasticThe fix for CVE-2020-7009 was found to be incomplete. Elasticsearch versions from 6.7.0 to 6.8.7 and…
8.8
First published (updated )
maven/co.elastic.apm:apm-agent-parentAPM Java Agent Local Privilege Escalation
7.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
pip/elastic-apmA local privilege escalation issue was found with the APM Java agent, where a user on the system cou…
7.8
First published (updated )
ElasticAll versions of Elastic Cloud Enterprise has the Elasticsearch “anonymous” user enabled by default i…
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.