https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 16:26:58 +0000 https://cve.radiocsirt.org/vuln/bdu:2019-04796 bdu:2019-04796 https://cve.radiocsirt.org/vuln/bdu:2019-04796 https://cve.radiocsirt.org/vuln/cnvd-2019-12164 cnvd-2019-12164 https://cve.radiocsirt.org/vuln/cnvd-2019-12164 https://cve.radiocsirt.org/vuln/euvd-2026-51501 EUVD-2026-51501 https://cve.radiocsirt.org/vuln/euvd-2026-51501 https://cve.radiocsirt.org/vuln/fkie_cve-2019-7610 <p>Kibana versions before 6.6.1 contain an arbitrary code execution flaw in the security audit logger. If a Kibana instance has the setting xpack.security.audit.enabled set to true, an attacker could send a request that will attempt to execute javascript code. This could possibly lead to an attacker executing arbitrary commands with permissions of the Kibana process on the host system.</p> <p>Kibana versions before 6.6.1 contain an arbitrary code execution flaw in the security audit logger. If a Kibana instance has the setting xpack.security.audit.enabled set to true, an attacker could send a request that will attempt to execute javascript code. This could possibly lead to an attacker executing arbitrary commands with permissions of the Kibana process on the host system.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-7610 https://cve.radiocsirt.org/vuln/ghsa-rrx3-4wcg-f297 <p>Kibana versions before 6.6.1 contain an arbitrary code execution flaw in the security audit logger. If a Kibana instance has the setting xpack.security.audit.enabled set to true, an attacker could send a request that will attempt to execute javascript code. This could possibly lead to an attacker executing arbitrary commands with permissions of the Kibana process on the host system.</p> <p>Kibana versions before 6.6.1 contain an arbitrary code execution flaw in the security audit logger. If a Kibana instance has the setting xpack.security.audit.enabled set to true, an attacker could send a request that will attempt to execute javascript code. This could possibly lead to an attacker executing arbitrary commands with permissions of the Kibana process on the host system.</p> https://cve.radiocsirt.org/vuln/ghsa-rrx3-4wcg-f297 https://cve.radiocsirt.org/vuln/gsd-2019-7610 gsd-2019-7610 https://cve.radiocsirt.org/vuln/gsd-2019-7610 https://cve.radiocsirt.org/vuln/rhba-2019:2824 <p>kibana: Cross-site scripting vulnerability permits perform destructive actions on behalf of other Kibana users kibana: Arbitrary code execution flaw in the Timelion visualizer kibana: Audit logging Remote Code Execution issue</p> <p>kibana: Cross-site scripting vulnerability permits perform destructive actions on behalf of other Kibana users kibana: Arbitrary code execution flaw in the Timelion visualizer kibana: Audit logging Remote Code Execution issue</p> https://cve.radiocsirt.org/vuln/rhba-2019:2824