https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 21:49:16 +0000 https://cve.radiocsirt.org/vuln/certfr-2021-avi-670 certfr-2021-avi-670 https://cve.radiocsirt.org/vuln/certfr-2021-avi-670 https://cve.radiocsirt.org/vuln/euvd-2026-235623 EUVD-2026-235623 https://cve.radiocsirt.org/vuln/euvd-2026-235623 https://cve.radiocsirt.org/vuln/fkie_cve-2021-37936 <p>It was discovered that Kibana was not sanitizing document fields containing HTML snippets. Using this vulnerability, an attacker with the ability to write documents to an elasticsearch index could inject HTML. When the Discover app highlighted a search term containing the HTML, it would be rendered for the user.</p> <p>It was discovered that Kibana was not sanitizing document fields containing HTML snippets. Using this vulnerability, an attacker with the ability to write documents to an elasticsearch index could inject HTML. When the Discover app highlighted a search term containing the HTML, it would be rendered for the user.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-37936 https://cve.radiocsirt.org/vuln/ghsa-p8x3-m7c8-mcj5 <p>It was discovered that Kibana was not sanitizing document fields containing HTML snippets. Using this vulnerability, an attacker with the ability to write documents to an elasticsearch index could inject HTML. When the Discover app highlighted a search term containing the HTML, it would be rendered for the user.</p> <p>It was discovered that Kibana was not sanitizing document fields containing HTML snippets. Using this vulnerability, an attacker with the ability to write documents to an elasticsearch index could inject HTML. When the Discover app highlighted a search term containing the HTML, it would be rendered for the user.</p> https://cve.radiocsirt.org/vuln/ghsa-p8x3-m7c8-mcj5 https://cve.radiocsirt.org/vuln/gsd-2021-37936 gsd-2021-37936 https://cve.radiocsirt.org/vuln/gsd-2021-37936 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0029 <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Elasticsearch und Kibana ausnutzen, um beliebigen Programmcode auszuführen, um Informationen offenzulegen, um einen Cross-Site Scripting Angriff durchzuführen und um Administratorrechte zu erlangen.</p> <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Elasticsearch und Kibana ausnutzen, um beliebigen Programmcode auszuführen, um Informationen offenzulegen, um einen Cross-Site Scripting Angriff durchzuführen und um Administratorrechte zu erlangen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0029