https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T17:06:28.219080+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2025-avi-0661 certfr-2025-avi-0661 — De multiples vulnérabilités ont été découvertes dans les produits Splunk. Elles permettent à un attaquant de provoquer… 2026-10-02T17:06:28.222910+00:00 certfr-2025-avi-0661 https://cve.radiocsirt.org/vuln/euvd-2026-61350 EUVD-2026-61350 2026-10-02T17:06:28.222946+00:00 EUVD-2026-61350 https://cve.radiocsirt.org/vuln/fkie_cve-2018-3824 fkie_cve-2018-3824 2026-10-02T17:06:28.222960+00:00

X-Pack Machine Learning versions before 6.2.4 and 5.6.9 had a cross-site scripting (XSS) vulnerability. If an attacker is able to inject data into an index that has a ML job running against it, then when another user views the results of the ML job it could allow the attacker to obtain sensitive information from or perform destructive actions on behalf of that other ML user.

 https://cve.radiocsirt.org/vuln/ghsa-mjpc-qx7h-r8c9 GHSA-mjpc-qx7h-r8c9 — Elasticsearch subject to cross site scripting 2026-10-02T17:06:28.222995+00:00

Affected: Maven: org.elasticsearch:elasticsearch

X-Pack Machine Learning versions before 6.2.4 and 5.6.9 had a cross-site scripting (XSS) vulnerability. If an attacker is able to inject data into an index that has a ML job running against it, then when another user views the results of the ML job it could allow the attacker to obtain sensitive information from or perform destructive actions on behalf of that other ML user.

 https://cve.radiocsirt.org/vuln/gsd-2018-3824 gsd-2018-3824 2026-10-02T17:06:28.223020+00:00 gsd-2018-3824