https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 13:53:26 +0000 https://cve.radiocsirt.org/vuln/cnvd-2018-23907 cnvd-2018-23907 https://cve.radiocsirt.org/vuln/cnvd-2018-23907 https://cve.radiocsirt.org/vuln/euvd-2026-68609 EUVD-2026-68609 https://cve.radiocsirt.org/vuln/euvd-2026-68609 https://cve.radiocsirt.org/vuln/fkie_cve-2018-17246 <p>Kibana versions before 6.4.3 and 5.6.13 contain an arbitrary file inclusion flaw in the Console plugin. An attacker with access to the Kibana Console API could send a request that will attempt to execute javascript code. This could possibly lead to an attacker executing arbitrary commands with permissions of the Kibana process on the host system.</p> <p>Kibana versions before 6.4.3 and 5.6.13 contain an arbitrary file inclusion flaw in the Console plugin. An attacker with access to the Kibana Console API could send a request that will attempt to execute javascript code. This could possibly lead to an attacker executing arbitrary commands with permissions of the Kibana process on the host system.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2018-17246 https://cve.radiocsirt.org/vuln/ghsa-cpwf-64qm-2jpm <p>Kibana versions before 6.4.3 and 5.6.13 contain an arbitrary file inclusion flaw in the Console plugin. An attacker with access to the Kibana Console API could send a request that will attempt to execute javascript code. This could possibly lead to an attacker executing arbitrary commands with permissions of the Kibana process on the host system.</p> <p>Kibana versions before 6.4.3 and 5.6.13 contain an arbitrary file inclusion flaw in the Console plugin. An attacker with access to the Kibana Console API could send a request that will attempt to execute javascript code. This could possibly lead to an attacker executing arbitrary commands with permissions of the Kibana process on the host system.</p> https://cve.radiocsirt.org/vuln/ghsa-cpwf-64qm-2jpm https://cve.radiocsirt.org/vuln/gsd-2018-17246 gsd-2018-17246 https://cve.radiocsirt.org/vuln/gsd-2018-17246 https://cve.radiocsirt.org/vuln/rhba-2018:3743 <p>kibana: Arbitrary file inclusion vulnerability in the Console plugin jenkins: Arbitrary file write vulnerability using file parameter definitions jenkins: Reflected XSS vulnerability jenkins: Ephemeral user record creation jenkins: Session fixation vulnerability on user signup jenkins: Failures to process form submission data could result in secrets being displayed or written to logs jenkins: Path traversal vulnerability in Stapler allowed accessing internal data jenkins: Ephemeral user record was created on some invalid authentication attempts</p> <p>kibana: Arbitrary file inclusion vulnerability in the Console plugin jenkins: Arbitrary file write vulnerability using file parameter definitions jenkins: Reflected XSS vulnerability jenkins: Ephemeral user record creation jenkins: Session fixation vulnerability on user signup jenkins: Failures to process form submission data could result in secrets being displayed or written to logs jenkins: Path traversal vulnerability in Stapler allowed accessing internal data jenkins: Ephemeral user record was created on some invalid authentication attempts</p> https://cve.radiocsirt.org/vuln/rhba-2018:3743