Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 20:23:22 +0000 EUVD-2026-256457 https://cve.radiocsirt.org/vuln/euvd-2026-256457 EUVD-2026-256457 https://cve.radiocsirt.org/vuln/euvd-2026-256457 fkie_cve-2014-3120 https://cve.radiocsirt.org/vuln/fkie_cve-2014-3120 <p>The default configuration in Elasticsearch before 1.2 enables dynamic scripting, which allows remote attackers to execute arbitrary MVEL expressions and Java code via the source parameter to _search. NOTE: this only violates the vendor&#39;s intended security policy if the user does not run Elasticsearch in its own independent virtual machine.</p> <p>The default configuration in Elasticsearch before 1.2 enables dynamic scripting, which allows remote attackers to execute arbitrary MVEL expressions and Java code via the source parameter to _search. NOTE: this only violates the vendor&#39;s intended security policy if the user does not run Elasticsearch in its own independent virtual machine.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2014-3120 GHSA-mrfm-jxgf-2h6v — Elasticsearch Improper Access Control vulnerability https://cve.radiocsirt.org/vuln/ghsa-mrfm-jxgf-2h6v <p><strong>Affected:</strong> Maven: org.elasticsearch:elasticsearch</p> <p>The default configuration in Elasticsearch before 1.4.0.Beta1 enables dynamic scripting, which allows remote attackers to execute arbitrary MVEL expressions and Java code via the source parameter to _search. NOTE: this only violates the vendor&#39;s intended security policy if the user does not run Elasticsearch in its own independent virtual machine.</p> <p><strong>Affected:</strong> Maven: org.elasticsearch:elasticsearch</p> <p>The default configuration in Elasticsearch before 1.4.0.Beta1 enables dynamic scripting, which allows remote attackers to execute arbitrary MVEL expressions and Java code via the source parameter to _search. NOTE: this only violates the vendor&#39;s intended security policy if the user does not run Elasticsearch in its own independent virtual machine.</p> https://cve.radiocsirt.org/vuln/ghsa-mrfm-jxgf-2h6v gsd-2014-3120 https://cve.radiocsirt.org/vuln/gsd-2014-3120 gsd-2014-3120 https://cve.radiocsirt.org/vuln/gsd-2014-3120 RHSA-2014:1170 — Red Hat Security Advisory: Red Hat JBoss Fuse/A-MQ 6.1.0 security update https://cve.radiocsirt.org/vuln/rhsa-2014:1170 <p>elasticsearch: remote code execution flaw via dynamic scripting</p> <p>elasticsearch: remote code execution flaw via dynamic scripting</p> https://cve.radiocsirt.org/vuln/rhsa-2014:1170