https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 15 Oct 2026 02:15:59 +0000 https://cve.radiocsirt.org/vuln/cnvd-2019-27441 cnvd-2019-27441 https://cve.radiocsirt.org/vuln/cnvd-2019-27441 https://cve.radiocsirt.org/vuln/euvd-2026-51478 EUVD-2026-51478 https://cve.radiocsirt.org/vuln/euvd-2026-51478 https://cve.radiocsirt.org/vuln/fkie_cve-2019-7614 <p>A race condition flaw was found in the response headers Elasticsearch versions before 7.2.1 and 6.8.2 returns to a request. On a system with multiple users submitting requests, it could be possible for an attacker to gain access to response header containing sensitive data from another user.</p> <p>A race condition flaw was found in the response headers Elasticsearch versions before 7.2.1 and 6.8.2 returns to a request. On a system with multiple users submitting requests, it could be possible for an attacker to gain access to response header containing sensitive data from another user.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-7614 https://cve.radiocsirt.org/vuln/ghsa-jqm6-m3j3-8gg9 <p><strong>Affected:</strong> Maven: org.elasticsearch:elasticsearch</p> <p>A race condition flaw was found in the response headers Elasticsearch versions before 7.2.1 and 6.8.2 returns to a request. On a system with multiple users submitting requests, it could be possible for an attacker to gain access to response header containing sensitive data from another user.</p> <p><strong>Affected:</strong> Maven: org.elasticsearch:elasticsearch</p> <p>A race condition flaw was found in the response headers Elasticsearch versions before 7.2.1 and 6.8.2 returns to a request. On a system with multiple users submitting requests, it could be possible for an attacker to gain access to response header containing sensitive data from another user.</p> https://cve.radiocsirt.org/vuln/ghsa-jqm6-m3j3-8gg9 https://cve.radiocsirt.org/vuln/gsd-2019-7614 gsd-2019-7614 https://cve.radiocsirt.org/vuln/gsd-2019-7614 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3184 <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Elasticsearch und Kibana ausnutzen, um beliebigen Programmcode mit den Rechten des Dienstes auszuführen, Sicherheitsmechanismen zu umgehen und Informationen offenzulegen.</p> <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Elasticsearch und Kibana ausnutzen, um beliebigen Programmcode mit den Rechten des Dienstes auszuführen, Sicherheitsmechanismen zu umgehen und Informationen offenzulegen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3184