Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 42
Reset filtersElasticsearch Vulnerable to Stack Overflow due to a Large Recursion
Elasticsearch-grok Potential Node Crash due to Large Recursion in `innerForbidCircularReferences` Function
Elasticsearch allocation of resources without limits or throttling leads to crash
Elasticsearch Incorrect Authorization vulnerability
Elasticsearch stores private key on disk unencrypted
Elasticsearch Insertion of Sensitive Information into Log File
Elasticsearch StackOverflow vulnerability
Elasticsearch Uncaught Exception leading to crash
Elasticsearch Incorrect Authorization vulnerability
Elasticsearch Uncontrolled Resource Consumption vulnerability
Elasticsearch-hadoop Unsafe Deserialization
Elasticsearch Improper Handling of Exceptional Conditions
Elasticsearch vulnerable to Uncontrolled Resource Consumption
Elasticsearch allows insertion of sensitive information into log files when using deprecated URIs
Elasticsearch vulnerable to stack overflow in the search API
Improper Check for Unusual or Exceptional Conditions in Elasticsearch
Exposure of Sensitive Information to an Unauthorized Actor in Elasticsearch
Insertion of Sensitive Information into Log File in Elasticsearch
Improper privilege management in elasticsearch
Improper Privilege Management in Elasticsearch
Exposure of Sensitive Information to an Unauthorized Actor in Elasticsearch
Concurrent Execution using Shared Resource with Improper Synchronization in Elasticsearch
Improper Limitation of a Pathname to a Restricted Directory in Elasticsearch
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.