← Back

Sphinx

sphinx

Vendor: Sphinxsearch • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2020-29050
2Debian
Sphinxsearch
2Debian Linux
Sphinx
Jun 17, 2026
Jan 10, 2022
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
SphinxSearch in Sphinx Technologies Sphinx through 3.1.1 allows directory traversal (in conjunction with CVE-2019-14511) because the mysql client can be used for CALL SNIPPETS and load_file operations on a full pathname...Show more
SphinxSearch in Sphinx Technologies Sphinx through 3.1.1 allows directory traversal (in conjunction with CVE-2019-14511) because the mysql client can be used for CALL SNIPPETS and load_file operations on a full pathname (e.g., a file in the /etc directory). NOTE: this is unrelated to CMUSphinx.Show less
CVE-2019-14511
1Sphinxsearch
1Sphinx
Jun 17, 2026
Aug 22, 2019
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Sphinx Technologies Sphinx 3.1.1 by default has no authentication and listens on 0.0.0.0, making it exposed to the internet (unless filtered by a firewall or reconfigured to listen to 127.0.0.1 only).