Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 12:32:38 +0000 certfr-2021-avi-670 — De multiples vulnérabilités ont été découvertes dans les produits Elastic. Elles permettent à un attaquant de provoquer… https://cve.radiocsirt.org/vuln/certfr-2021-avi-670 certfr-2021-avi-670 https://cve.radiocsirt.org/vuln/certfr-2021-avi-670 EUVD-2026-205377 https://cve.radiocsirt.org/vuln/euvd-2026-205377 EUVD-2026-205377 https://cve.radiocsirt.org/vuln/euvd-2026-205377 fkie_cve-2021-22150 https://cve.radiocsirt.org/vuln/fkie_cve-2021-22150 <p>It was discovered that a user with Fleet admin permissions could upload a malicious package. Due to using an older version of the js-yaml library, this package would be loaded in an insecure manner, allowing an attacker to execute commands on the Kibana server.</p> <p>It was discovered that a user with Fleet admin permissions could upload a malicious package. Due to using an older version of the js-yaml library, this package would be loaded in an insecure manner, allowing an attacker to execute commands on the Kibana server.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-22150 GHSA-534g-6jq4-vq89 https://cve.radiocsirt.org/vuln/ghsa-534g-6jq4-vq89 <p>It was discovered that a user with Fleet admin permissions could upload a malicious package. Due to using an older version of the js-yaml library, this package would be loaded in an insecure manner, allowing an attacker to execute commands on the Kibana server.</p> <p>It was discovered that a user with Fleet admin permissions could upload a malicious package. Due to using an older version of the js-yaml library, this package would be loaded in an insecure manner, allowing an attacker to execute commands on the Kibana server.</p> https://cve.radiocsirt.org/vuln/ghsa-534g-6jq4-vq89 gsd-2021-22150 https://cve.radiocsirt.org/vuln/gsd-2021-22150 gsd-2021-22150 https://cve.radiocsirt.org/vuln/gsd-2021-22150 WID-SEC-W-2022-0029 — Elasticsearch und Kibana: Mehrere Schwachstellen https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0029 <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Elasticsearch und Kibana ausnutzen, um beliebigen Programmcode auszuführen, um Informationen offenzulegen, um einen Cross-Site Scripting Angriff durchzuführen und um Administratorrechte zu erlangen.</p> <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Elasticsearch und Kibana ausnutzen, um beliebigen Programmcode auszuführen, um Informationen offenzulegen, um einen Cross-Site Scripting Angriff durchzuführen und um Administratorrechte zu erlangen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0029