Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 17:06:25 +0000 certfr-2025-avi-0661 — De multiples vulnérabilités ont été découvertes dans les produits Splunk. Elles permettent à un attaquant de provoquer… https://cve.radiocsirt.org/vuln/certfr-2025-avi-0661 certfr-2025-avi-0661 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0661 EUVD-2026-61350 https://cve.radiocsirt.org/vuln/euvd-2026-61350 EUVD-2026-61350 https://cve.radiocsirt.org/vuln/euvd-2026-61350 fkie_cve-2018-3824 https://cve.radiocsirt.org/vuln/fkie_cve-2018-3824 <p>X-Pack Machine Learning versions before 6.2.4 and 5.6.9 had a cross-site scripting (XSS) vulnerability. If an attacker is able to inject data into an index that has a ML job running against it, then when another user views the results of the ML job it could allow the attacker to obtain sensitive information from or perform destructive actions on behalf of that other ML user.</p> <p>X-Pack Machine Learning versions before 6.2.4 and 5.6.9 had a cross-site scripting (XSS) vulnerability. If an attacker is able to inject data into an index that has a ML job running against it, then when another user views the results of the ML job it could allow the attacker to obtain sensitive information from or perform destructive actions on behalf of that other ML user.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2018-3824 GHSA-mjpc-qx7h-r8c9 — Elasticsearch subject to cross site scripting https://cve.radiocsirt.org/vuln/ghsa-mjpc-qx7h-r8c9 <p><strong>Affected:</strong> Maven: org.elasticsearch:elasticsearch</p> <p>X-Pack Machine Learning versions before 6.2.4 and 5.6.9 had a cross-site scripting (XSS) vulnerability. If an attacker is able to inject data into an index that has a ML job running against it, then when another user views the results of the ML job it could allow the attacker to obtain sensitive information from or perform destructive actions on behalf of that other ML user.</p> <p><strong>Affected:</strong> Maven: org.elasticsearch:elasticsearch</p> <p>X-Pack Machine Learning versions before 6.2.4 and 5.6.9 had a cross-site scripting (XSS) vulnerability. If an attacker is able to inject data into an index that has a ML job running against it, then when another user views the results of the ML job it could allow the attacker to obtain sensitive information from or perform destructive actions on behalf of that other ML user.</p> https://cve.radiocsirt.org/vuln/ghsa-mjpc-qx7h-r8c9 gsd-2018-3824 https://cve.radiocsirt.org/vuln/gsd-2018-3824 gsd-2018-3824 https://cve.radiocsirt.org/vuln/gsd-2018-3824