Vulnerability index

Browse CVEs

15 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Searchblox CRITICAL 9.8
CVE-2020-10131

SearchBlox before Version 9.2.1 is vulnerable to CSV macro injection in "Featured Results" parameter.

Fix: 9.2.1+
Fix from $2,300 2023-09-06
Searchblox HIGH 8.8
CVE-2020-10129

SearchBlox before Version 9.2.1 is vulnerable to Privileged Escalation-Lower user is able to access Admin functionality.

Fix: 9.2.1+
Fix from $1,950 2023-09-06
Searchblox HIGH 8.8
CVE-2020-10130

SearchBlox before Version 9.1 is vulnerable to business logic bypass where the user is able to create multiple super admin users in the system.

Fix: 9.1+
Fix from $1,950 2023-09-06
Searchblox MEDIUM 6.1
CVE-2020-10132

SearchBlox before Version 9.1 is vulnerable to cross-origin resource sharing misconfiguration.

Fix: 9.1+
Fix from $1,600 2023-09-06
Searchblox MEDIUM 5.4
CVE-2020-10128

SearchBlox product with version before 9.2.1 is vulnerable to stored cross-site scripting at multiple user input parameters. In SearchBlox products m…

Fix: 9.2.1+
Fix from $1,600 2023-09-05
Searchblox HIGH 7.5
CVE-2020-35580EPSS 14%

A local file inclusion vulnerability in the FileServlet in all SearchBlox before 9.2.2 allows remote, unauthenticated users to read arbitrary files f…

Fix: 9.2.2+
Fix from $1,950 2021-05-20
Searchblox CRITICAL 9.8
CVE-2018-11586EPSS 15%

XML external entity (XXE) vulnerability in api/rest/status in SearchBlox 8.6.7 allows remote unauthenticated users to read arbitrary files or conduct…

No fix yet
Fix from $2,300 2018-06-05
Searchblox HIGH 8.8
CVE-2018-11538EPSS 13%

servlet/UserServlet in SearchBlox 8.6.6 has CSRF via the u_name, u_passwd1, u_passwd2, role, and X-XSRF-TOKEN POST parameters because of CSRF Token B…

No fix yet
Fix from $1,950 2018-06-01
Searchblox CRITICAL 10.0
CVE-2015-7919EPSS 22%

SearchBlox 8.3 before 8.3.1 allows remote attackers to write to the config file, and consequently cause a denial of service (application crash), via …

Mitigation only
Fix from $2,300 2015-12-21
Searchblox HIGH 8.8
CVE-2015-0970

Cross-site request forgery (CSRF) vulnerability in SearchBlox before 8.2 allows remote attackers to hijack the authentication of arbitrary users.

Fix: after 8.1
Fix from $1,950 2015-04-18
Searchblox MEDIUM 5.0
CVE-2015-0969EPSS 13%

SearchBlox before 8.2 allows remote attackers to obtain sensitive information via a pretty=true action to the _cluster/health URI.

Fix: after 8.1
Fix from $1,600 2015-04-18
Searchblox HIGH 7.5
CVE-2015-0968

Unrestricted file upload vulnerability in admin/uploadImage.html in SearchBlox before 8.2 allows remote attackers to execute arbitrary code by upload…

Fix: after 8.1
Fix from $1,950 2015-04-18
Searchblox MEDIUM 6.8
CVE-2013-3590

Unrestricted file upload vulnerability in admin/uploadImage.html in SearchBlox before 7.5 build 1 allows remote attackers to execute arbitrary code b…

Fix: after 7.5
Fix from $1,600 2013-08-28
Searchblox MEDIUM 5.0
CVE-2013-3597EPSS 8%

servlet/CollectionListServlet in SearchBlox before 7.5 build 1 allows remote attackers to read usernames and passwords via a getList action.

Fix: after 7.5
Fix from $1,600 2013-08-28
Searchblox MEDIUM 5.0
CVE-2013-3598

Directory traversal vulnerability in servlet/CreateTemplateServlet in SearchBlox before 7.5 build 1 allows remote attackers to overwrite arbitrary fi…

Fix: after 7.5
Fix from $1,600 2013-08-28