https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 17:49:56 +0000 https://cve.radiocsirt.org/vuln/bdu:2024-01379 bdu:2024-01379 https://cve.radiocsirt.org/vuln/bdu:2024-01379 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0099 certfr-2024-avi-0099 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0099 https://cve.radiocsirt.org/vuln/euvd-2026-159118 EUVD-2026-159118 https://cve.radiocsirt.org/vuln/euvd-2026-159118 https://cve.radiocsirt.org/vuln/fkie_cve-2024-23446 <p>An issue was discovered by Elastic, whereby the Detection Engine Search API does not respect Document-level security (DLS) or Field-level security (FLS) when querying the .alerts-security.alerts-{space_id} indices. Users who are authorized to call this API may obtain unauthorized access to documents if their roles are configured with DLS or FLS against the aforementioned index.</p> <p>An issue was discovered by Elastic, whereby the Detection Engine Search API does not respect Document-level security (DLS) or Field-level security (FLS) when querying the .alerts-security.alerts-{space_id} indices. Users who are authorized to call this API may obtain unauthorized access to documents if their roles are configured with DLS or FLS against the aforementioned index.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-23446 https://cve.radiocsirt.org/vuln/ghsa-967w-7xjc-4wqj <p>An issue was discovered by Elastic, whereby the Detection Engine Search API does not respect Document-level security (DLS) or Field-level security (FLS) when querying the .alerts-security.alerts-{space_id} indices. Users who are authorized to call this API may obtain unauthorized access to documents if their roles are configured with DLS or FLS against the aforementioned index.</p> <p>An issue was discovered by Elastic, whereby the Detection Engine Search API does not respect Document-level security (DLS) or Field-level security (FLS) when querying the .alerts-security.alerts-{space_id} indices. Users who are authorized to call this API may obtain unauthorized access to documents if their roles are configured with DLS or FLS against the aforementioned index.</p> https://cve.radiocsirt.org/vuln/ghsa-967w-7xjc-4wqj https://cve.radiocsirt.org/vuln/gsd-2024-23446 gsd-2024-23446 https://cve.radiocsirt.org/vuln/gsd-2024-23446 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0310 <p>Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Kibana ausnutzen, um Informationen offenzulegen.</p> <p>Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Kibana ausnutzen, um Informationen offenzulegen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0310