Most recent entries from all

bdu:2019-04030

cnvd-2019-06598

EUVD-2026-164879

fkie_cve-2019-0192

In Apache Solr versions 5.0.0 to 5.5.5 and 6.0.0 to 6.6.5, the Config API allows to configure the JMX server via an HTTP POST request. By pointing it to a malicious RMI server, an attacker could take advantage of Solr's unsafe deserialization to trigger remote code execution on the Solr side.

GHSA-xhcq-fv7x-grr2 — Critical severity vulnerability that affects org.apache.solr:solr-core

Affected: Maven: org.apache.solr:solr-core

gsd-2019-0192

RHSA-2019:2413 — Red Hat Security Advisory: Red Hat Fuse 7.4.0 security update

hazelcast: java deserialization in join cluster procedure leading to remote code execution spring-security-core: Unauthorized Access with Spring Security Method Security thrift: SASL negotiation isComplete validation bypass in the org.apache.thrift.transport.TSaslTransport class slf4j: Deserialisation vulnerability in EventData constructor can allow for arbitrary code execution jolokia: system-wide CSRF that could lead to Remote Code Execution spring-security-oauth: Privilege escalation by manipulating saved authorization request solr: remote code execution due to unsafe deserialization wildfly: Race condition on PID file allows for termination of arbitrary processes by local users

UBUNTU-CVE-2019-0192

Affected: Ubuntu:Pro:14.04:LTS: lucene-solr, Ubuntu:Pro:16.04:LTS: lucene-solr, Ubuntu:Pro:18.04:LTS: lucene-solr, Ubuntu:20.04:LTS: lucene-solr, Ubuntu:22.04:LTS: lucene-solr, Ubuntu:24.04:LTS: lucene-solr, Ubuntu:25.10: lucene-solr, Ubuntu:26.04:LTS: lucene-solr