https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 17:39:37 +0000 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0855 certfr-2025-avi-0855 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0855 https://cve.radiocsirt.org/vuln/cnvd-2015-01160 cnvd-2015-01160 https://cve.radiocsirt.org/vuln/cnvd-2015-01160 https://cve.radiocsirt.org/vuln/euvd-2026-256438 EUVD-2026-256438 https://cve.radiocsirt.org/vuln/euvd-2026-256438 https://cve.radiocsirt.org/vuln/fkie_cve-2015-1427 <p>The Groovy scripting engine in Elasticsearch before 1.3.8 and 1.4.x before 1.4.3 allows remote attackers to bypass the sandbox protection mechanism and execute arbitrary shell commands via a crafted script.</p> <p>The Groovy scripting engine in Elasticsearch before 1.3.8 and 1.4.x before 1.4.3 allows remote attackers to bypass the sandbox protection mechanism and execute arbitrary shell commands via a crafted script.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2015-1427 https://cve.radiocsirt.org/vuln/ghsa-w94p-6mhw-4qxw <p><strong>Affected:</strong> Maven: org.elasticsearch:elasticsearch</p> <p>The Groovy scripting engine in Elasticsearch before 1.3.8 and 1.4.x before 1.4.3 allows remote attackers to bypass the sandbox protection mechanism and execute arbitrary shell commands via a crafted script.</p> <p><strong>Affected:</strong> Maven: org.elasticsearch:elasticsearch</p> <p>The Groovy scripting engine in Elasticsearch before 1.3.8 and 1.4.x before 1.4.3 allows remote attackers to bypass the sandbox protection mechanism and execute arbitrary shell commands via a crafted script.</p> https://cve.radiocsirt.org/vuln/ghsa-w94p-6mhw-4qxw https://cve.radiocsirt.org/vuln/gsd-2015-1427 gsd-2015-1427 https://cve.radiocsirt.org/vuln/gsd-2015-1427 https://cve.radiocsirt.org/vuln/rhsa-2017:0868 <p>jakarta-commons-httpclient: missing connection hostname check against X.509 certificate name elasticsearch: remote code execution via Groovy sandbox bypass ActiveMQ: DoS in client via shutdown command apache-cxf: XSS in Apache CXF FormattedServiceListWriter Groovy: Remote code execution via deserialization apache-cxf: Atom entity provider of Apache CXF JAX-RS is vulnerable to XXE Spark: Directory traversal vulnerability in version 2.5 swagger-ui: cross-site scripting in key names camel-snakeyaml: Unmarshalling operation is vulnerable to RCE</p> <p>jakarta-commons-httpclient: missing connection hostname check against X.509 certificate name elasticsearch: remote code execution via Groovy sandbox bypass ActiveMQ: DoS in client via shutdown command apache-cxf: XSS in Apache CXF FormattedServiceListWriter Groovy: Remote code execution via deserialization apache-cxf: Atom entity provider of Apache CXF JAX-RS is vulnerable to XXE Spark: Directory traversal vulnerability in version 2.5 swagger-ui: cross-site scripting in key names camel-snakeyaml: Unmarshalling operation is vulnerable to RCE</p> https://cve.radiocsirt.org/vuln/rhsa-2017:0868 https://cve.radiocsirt.org/vuln/ubuntu-cve-2015-1427 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: elasticsearch</p> <p>The Groovy scripting engine in Elasticsearch before 1.3.8 and 1.4.x before 1.4.3 allows remote attackers to bypass the sandbox protection mechanism and execute arbitrary shell commands via a crafted script.</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: elasticsearch</p> <p>The Groovy scripting engine in Elasticsearch before 1.3.8 and 1.4.x before 1.4.3 allows remote attackers to bypass the sandbox protection mechanism and execute arbitrary shell commands via a crafted script.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2015-1427 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2233 <p>Ein entfernter Angreifer kann eine Schwachstelle in Elasticsearch ausnutzen, um beliebigen Programmcode mit den Rechten des Dienstes auszuführen.</p> <p>Ein entfernter Angreifer kann eine Schwachstelle in Elasticsearch ausnutzen, um beliebigen Programmcode mit den Rechten des Dienstes auszuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2233