Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 24 Oct 2026 15:13:40 +0000 cnvd-2020-38065 https://cve.radiocsirt.org/vuln/cnvd-2020-38065 cnvd-2020-38065 https://cve.radiocsirt.org/vuln/cnvd-2020-38065 EUVD-2026-37701 https://cve.radiocsirt.org/vuln/euvd-2026-37701 EUVD-2026-37701 https://cve.radiocsirt.org/vuln/euvd-2026-37701 fkie_cve-2020-7012 https://cve.radiocsirt.org/vuln/fkie_cve-2020-7012 <p>Kibana versions 6.7.0 to 6.8.8 and 7.0.0 to 7.6.2 contain a prototype pollution flaw in the Upgrade Assistant. An authenticated attacker with privileges to write to the Kibana index could insert data that would cause Kibana to execute arbitrary code. This could possibly lead to an attacker executing code with the permissions of the Kibana process on the host system.</p> <p>Kibana versions 6.7.0 to 6.8.8 and 7.0.0 to 7.6.2 contain a prototype pollution flaw in the Upgrade Assistant. An authenticated attacker with privileges to write to the Kibana index could insert data that would cause Kibana to execute arbitrary code. This could possibly lead to an attacker executing code with the permissions of the Kibana process on the host system.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-7012 GHSA-xrx6-ghw2-jgjm https://cve.radiocsirt.org/vuln/ghsa-xrx6-ghw2-jgjm <p>Kibana versions 6.7.0 to 6.8.8 and 7.0.0 to 7.6.2 contain a prototype pollution flaw in the Upgrade Assistant. An authenticated attacker with privileges to write to the Kibana index could insert data that would cause Kibana to execute arbitrary code. This could possibly lead to an attacker executing code with the permissions of the Kibana process on the host system.</p> <p>Kibana versions 6.7.0 to 6.8.8 and 7.0.0 to 7.6.2 contain a prototype pollution flaw in the Upgrade Assistant. An authenticated attacker with privileges to write to the Kibana index could insert data that would cause Kibana to execute arbitrary code. This could possibly lead to an attacker executing code with the permissions of the Kibana process on the host system.</p> https://cve.radiocsirt.org/vuln/ghsa-xrx6-ghw2-jgjm gsd-2020-7012 https://cve.radiocsirt.org/vuln/gsd-2020-7012 gsd-2020-7012 https://cve.radiocsirt.org/vuln/gsd-2020-7012