Vulmon
Recent Vulnerabilities
Product List
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
elastic logstash 1.4.1 vulnerabilities and exploits
(subscribe to this query)
445
VMScore
CVE-2015-5378
Logstash 1.5.x prior to 1.5.3 and 1.4.x prior to 1.4.4 allows remote malicious users to read communications between Logstash Forwarder agent and Logstash server.
Elasticsearch Logstash 1.5.1
Elasticsearch Logstash 1.4.3
Elasticsearch Logstash 1.5.0
Elasticsearch Logstash 1.5.2
Elastic Logstash 1.4.1
Elastic Logstash 1.4.2
Elastic Logstash 1.4.0
668
VMScore
CVE-2014-4326
Elasticsearch Logstash 1.0.14 up to and including 1.4.x prior to 1.4.2 allows remote malicious users to execute arbitrary commands via a crafted event in (1) zabbix.rb or (2) nagios_nsca.rb in outputs/.
Elastic Logstash 1.0.14
Elastic Logstash 1.0.15
Elastic Logstash 1.0.16
Elastic Logstash 1.0.17
Elastic Logstash 1.1.0.1
Elastic Logstash 1.1.2
Elastic Logstash 1.1.3
Elastic Logstash 1.1.4
Elastic Logstash 1.1.5
Elastic Logstash 1.1.6
Elastic Logstash 1.1.7
Elastic Logstash 1.1.8
Elastic Logstash 1.1.9
Elastic Logstash 1.1.10
Elastic Logstash 1.1.11
Elastic Logstash 1.1.12
Elastic Logstash 1.1.13
Elastic Logstash 1.2.1
Elastic Logstash 1.2.2
Elastic Logstash 1.3.0
Elastic Logstash 1.3.1
Elastic Logstash 1.3.2
383
VMScore
CVE-2015-5619
Logstash 1.4.x prior to 1.4.5 and 1.5.x prior to 1.5.4 with Lumberjack output or the Logstash forwarder does not validate SSL/TLS certificates from the Logstash server, which might allow malicious users to obtain sensitive information via a man-in-the-middle attack.
Elasticsearch Logstash 1.5.3
Elasticsearch Logstash 1.4.4
Elasticsearch Logstash 1.5.1
Elasticsearch Logstash 1.4.3
Elasticsearch Logstash 1.5.0
Elasticsearch Logstash 1.5.2
Elastic Logstash 1.4.1
Elastic Logstash 1.4.2
Elastic Logstash 1.4.0
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
SSRF
server-side request forgery
CVE-2024-30067
CVE-2024-5553
CVE-2024-30095
IDOR
CVE-2024-35252
CVE-2024-23692
CVE-2024-27801
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started