Elasticsearch up to 7.13.x Searchable Snapshot permission assignment
A vulnerability, which was classified as problematic, was found in Elasticsearch up to 7.13.x. Affected is an unknown code block
Elasticsearch up to 6.8.16/7.13.2 Grok Parser infinite loop
A vulnerability was found in Elasticsearch up to 6.8.16/7.13.2 and classified as problematic. This issue affects an unknown functionality of
Elasticsearch Elastic Cloud Enterprise API permission [CVE-2021-22146]
A vulnerability was found in Elasticsearch Elastic Cloud Enterprise (Cloud Software) (affected version unknown). It has been declared as critical.
Elasticsearch up to 7.13.3 Error Report information exposure
A vulnerability classified as critical was found in Elasticsearch up to 7.13.3. Affected by this vulnerability is an unknown code
Elasticsearch versions from 6.7.0 to 6.8.7 and 7.0.0 to 7.6.1 contain a privilege escalation flaw if an attacker is able to create API keys.
[vc_row][vc_column][vc_column_text] Overview : Elasticsearch versions from 6.7.0 to 6.8.7 and 7.0.0 to 7.6.1 contain a privilege escalation flaw if an
Disclosure of Private Merge Requests and Issues via Elasticsearch integration
Overview : An access control issue exists in < 12.3.5, < 12.2.8, and < 12.1.14 for GitLab Community Edition (CE)
CVE-2021-44228 – Apache log4j up to 2.14.1 JNDI LDAP Server Lookup format string
Zero-Day RCE Vulnerability CVE-2021-44228 aka Critical Apache Log4j Remote Code Execution Vulnerability(Log4Shell)Affects Java Background on Apache log4j Apache log4j 2