Sphinxsearch

sphinxsearch

2 CVEs • 1 product

Products (1)

Click to collapse

Toggle

Sphinx

sphinx

2 CVEs

CVEs (2)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2020-29050 2Debian Sphinxsearch 2Debian Linux Sphinx Jun 17, 2026 Jan 10, 2022 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 SphinxSearch in Sphinx Technologies Sphinx through 3.1.1 allows directory traversal (in conjunction with CVE-2019-14511) because the mysql client can be used for CALL SNIPPETS and load_file operations on a full pathname...Show more SphinxSearch in Sphinx Technologies Sphinx through 3.1.1 allows directory traversal (in conjunction with CVE-2019-14511) because the mysql client can be used for CALL SNIPPETS and load_file operations on a full pathname (e.g., a file in the /etc directory). NOTE: this is unrelated to CMUSphinx.Show less
CVE-2019-14511 1Sphinxsearch 1Sphinx Jun 17, 2026 Aug 22, 2019 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Sphinx Technologies Sphinx 3.1.1 by default has no authentication and listens on 0.0.0.0, making it exposed to the internet (unless filtered by a firewall or reconfigured to listen to 127.0.0.1 only).

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2020-29050

2Debian

Sphinxsearch

2Debian Linux

Sphinx

Jun 17, 2026

Jan 10, 2022

N/A· v4

7.5 HIGH· v3

5.0 MEDIUM· v2

SphinxSearch in Sphinx Technologies Sphinx through 3.1.1 allows directory traversal (in conjunction with CVE-2019-14511) because the mysql client can be used for CALL SNIPPETS and load_file operations on a full pathname...Show more

CVE-2019-14511

1Sphinxsearch

1Sphinx

Jun 17, 2026

Aug 22, 2019

N/A· v4

7.5 HIGH· v3

5.0 MEDIUM· v2

Sphinx Technologies Sphinx 3.1.1 by default has no authentication and listens on 0.0.0.0, making it exposed to the internet (unless filtered by a firewall or reconfigured to listen to 127.0.0.1 only).