İçeriğe atla
Noroxi

SearchBlox kayıtları

searchblox üreticisine ait 17 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
2
Düzeltme kaydı olan
%0
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 18
  2. 21
  3. 23

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

17 kayıt
  • CVE-2015-7919
    47Planlayın

    SearchBlox 8.3 before 8.3.1 allows remote attackers to write to the config file, and consequently cause a denial of service (application cra

    KritikCVSS 10,0İstismar yokEPSS %21

    searchblox · searchblox21 Ara 2015

  • CVE-2018-11586
    43Planlayın

    XML external entity (XXE) vulnerability in api/rest/status in SearchBlox 8.6.7 allows remote unauthenticated users to read arbitrary files o

    KritikCVSS 9,8Kavram kanıtıEPSS %14

    searchblox · searchblox5 Haz 2018

  • CVE-2018-11538
    39İzleyin

    servlet/UserServlet in SearchBlox 8.6.6 has CSRF via the u_name, u_passwd1, u_passwd2, role, and X-XSRF-TOKEN POST parameters because of CSR

    YüksekCVSS 8,8Kavram kanıtıEPSS %12

    searchblox · searchblox1 Haz 2018

  • CVE-2020-10131
    39İzleyin

    SearchBlox before Version 9.2.1 is vulnerable to CSV macro injection in "Featured Results" parameter.

    KritikCVSS 9,8Kavram kanıtıEPSS %1

    searchblox · searchblox6 Eyl 2023

  • CVE-2015-0970
    35İzleyin

    Cross-site request forgery (CSRF) vulnerability in SearchBlox before 8.2 allows remote attackers to hijack the authentication of arbitrary u

    YüksekCVSS 8,8İstismar yokEPSS %1

    searchblox · searchblox17 Nis 2015

  • CVE-2020-10130
    35İzleyin

    SearchBlox before Version 9.1 is vulnerable to business logic bypass where the user is able to create multiple super admin users in the syst

    YüksekCVSS 8,8Kavram kanıtıEPSS %0

    searchblox · searchblox6 Eyl 2023

  • CVE-2020-10129
    35İzleyin

    SearchBlox before Version 9.2.1 is vulnerable to Privileged Escalation-Lower user is able to access Admin functionality.

    YüksekCVSS 8,8Kavram kanıtıEPSS %0

    searchblox · searchblox6 Eyl 2023

  • CVE-2020-35580
    34İzleyin

    A local file inclusion vulnerability in the FileServlet in all SearchBlox before 9.2.2 allows remote, unauthenticated users to read arbitrar

    YüksekCVSS 7,5Kavram kanıtıEPSS %13

    searchblox · searchblox20 May 2021

  • CVE-2015-0968
    31İzleyin

    Unrestricted file upload vulnerability in admin/uploadImage.html in SearchBlox before 8.2 allows remote attackers to execute arbitrary code

    YüksekCVSS 7,5İstismar yokEPSS %2

    searchblox · searchblox17 Nis 2015

  • CVE-2013-3590
    28İzleyin

    Unrestricted file upload vulnerability in admin/uploadImage.html in SearchBlox before 7.5 build 1 allows remote attackers to execute arbitra

    OrtaCVSS 6,8İstismar yokEPSS %2

    searchblox · searchblox28 Ağu 2013

  • CVE-2015-0969
    24İzleyin

    SearchBlox before 8.2 allows remote attackers to obtain sensitive information via a pretty=true action to the _cluster/health URI.

    OrtaCVSS 5,0İstismar yokEPSS %13

    searchblox · searchblox17 Nis 2015

  • CVE-2020-10132
    24İzleyin

    SearchBlox before Version 9.1 is vulnerable to cross-origin resource sharing misconfiguration.

    OrtaCVSS 6,1Kavram kanıtıEPSS %0

    searchblox · searchblox6 Eyl 2023

  • CVE-2013-3597
    23İzleyin

    servlet/CollectionListServlet in SearchBlox before 7.5 build 1 allows remote attackers to read usernames and passwords via a getList action.

    OrtaCVSS 5,0Kavram kanıtıEPSS %8

    searchblox · searchblox28 Ağu 2013

  • CVE-2013-3598
    21İzleyin

    Directory traversal vulnerability in servlet/CreateTemplateServlet in SearchBlox before 7.5 build 1 allows remote attackers to overwrite arb

    OrtaCVSS 5,0İstismar yokEPSS %2

    searchblox · searchblox28 Ağu 2013

  • CVE-2020-10128
    21İzleyin

    SearchBlox product before V-9.2.1 is vulnerable to Stored-Cross Site Scripting

    OrtaCVSS 5,4Kavram kanıtıEPSS %0

    searchblox · searchblox5 Eyl 2023

  • CVE-2015-3422
    18İzleyin

    Cross-site scripting (XSS) vulnerability in SearchBlox before 8.2.1 allows remote attackers to inject arbitrary web script or HTML via the m

    OrtaCVSS 4,3İstismar yokEPSS %1

    searchblox · searchblox18 Haz 2015

  • CVE-2015-0967
    17İzleyin

    Multiple cross-site scripting (XSS) vulnerabilities in SearchBlox before 8.2 allow remote attackers to inject arbitrary web script or HTML v

    OrtaCVSS 4,3İstismar yokEPSS %1

    searchblox · searchblox17 Nis 2015