Vulnerabilities (CVE)

Filtered by vendor Searchblox Subscribe
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2018-11586 1 Searchblox 1 Searchblox 2018-07-31 7.5 HIGH 9.8 CRITICAL
XML external entity (XXE) vulnerability in api/rest/status in SearchBlox 8.6.7 allows remote unauthenticated users to read arbitrary files or conduct server-side request forgery (SSRF) attacks via a crafted DTD in an XML request.
CVE-2015-7919 1 Searchblox 1 Searchblox 2015-12-21 6.4 MEDIUM 10.0 CRITICAL
SearchBlox 8.3 before 8.3.1 allows remote attackers to write to the config file, and consequently cause a denial of service (application crash), via unspecified vectors.