https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 17 Oct 2026 02:04:19 +0000 https://cve.radiocsirt.org/vuln/bdu:2024-06005 bdu:2024-06005 https://cve.radiocsirt.org/vuln/bdu:2024-06005 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0654 certfr-2024-avi-0654 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0654 https://cve.radiocsirt.org/vuln/euvd-2026-158307 EUVD-2026-158307 https://cve.radiocsirt.org/vuln/euvd-2026-158307 https://cve.radiocsirt.org/vuln/fkie_cve-2024-37287 <p>A flaw allowing arbitrary code execution was discovered in Kibana. An attacker with access to ML and Alerting connector features, as well as write access to internal ML indices can trigger a prototype pollution vulnerability, ultimately leading to arbitrary code execution.</p> <p>A flaw allowing arbitrary code execution was discovered in Kibana. An attacker with access to ML and Alerting connector features, as well as write access to internal ML indices can trigger a prototype pollution vulnerability, ultimately leading to arbitrary code execution.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-37287 https://cve.radiocsirt.org/vuln/ghsa-7fgx-pmw9-49h5 <p>A flaw allowing arbitrary code execution was discovered in Kibana. An attacker with access to ML and Alerting connector features, as well as write access to internal ML indices can trigger a prototype pollution vulnerability, ultimately leading to arbitrary code execution.</p> <p>A flaw allowing arbitrary code execution was discovered in Kibana. An attacker with access to ML and Alerting connector features, as well as write access to internal ML indices can trigger a prototype pollution vulnerability, ultimately leading to arbitrary code execution.</p> https://cve.radiocsirt.org/vuln/ghsa-7fgx-pmw9-49h5 https://cve.radiocsirt.org/vuln/icsa-24-319-13 <p>Verve Reporting utilizes Kibana, which contains a remote code execution vulnerability that allows an attacker with access to ML and alerting connecting features as well as write access to internal ML to trigger a prototype pollution vulnerability, which can ultimately lead to arbitrary code execution. The code execution is limited to the container.</p> <p>Verve Reporting utilizes Kibana, which contains a remote code execution vulnerability that allows an attacker with access to ML and alerting connecting features as well as write access to internal ML to trigger a prototype pollution vulnerability, which can ultimately lead to arbitrary code execution. The code execution is limited to the container.</p> https://cve.radiocsirt.org/vuln/icsa-24-319-13 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1768 <p>Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Kibana ausnutzen, um beliebigen Programmcode auszuführen.</p> <p>Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Kibana ausnutzen, um beliebigen Programmcode auszuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1768