https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 22:21:07 +0000 https://cve.radiocsirt.org/vuln/bit-elk-2025-37732 <p><strong>Affected:</strong> Bitnami: elk</p> <p>Improper neutralization of input during web page generation (&#39;Cross-site Scripting&#39;) (CWE-79) allows an authenticated user to render HTML tags within a user’s browser via the integration package upload functionality. This issue is related to ESA-2025-17 (CVE-2025-25018) bypassing that fix to achieve HTML injection.</p> <p><strong>Affected:</strong> Bitnami: elk</p> <p>Improper neutralization of input during web page generation (&#39;Cross-site Scripting&#39;) (CWE-79) allows an authenticated user to render HTML tags within a user’s browser via the integration package upload functionality. This issue is related to ESA-2025-17 (CVE-2025-25018) bypassing that fix to achieve HTML injection.</p> https://cve.radiocsirt.org/vuln/bit-elk-2025-37732 https://cve.radiocsirt.org/vuln/certfr-2025-avi-1112 certfr-2025-avi-1112 https://cve.radiocsirt.org/vuln/certfr-2025-avi-1112 https://cve.radiocsirt.org/vuln/euvd-2026-263496 EUVD-2026-263496 https://cve.radiocsirt.org/vuln/euvd-2026-263496 https://cve.radiocsirt.org/vuln/fkie_cve-2025-37732 <p>Improper neutralization of input during web page generation (&#39;Cross-site Scripting&#39;) (CWE-79) allows an authenticated user to render HTML tags within a user’s browser via the integration package upload functionality. This issue is related to ESA-2025-17 (CVE-2025-25018) bypassing that fix to achieve HTML injection.</p> <p>Improper neutralization of input during web page generation (&#39;Cross-site Scripting&#39;) (CWE-79) allows an authenticated user to render HTML tags within a user’s browser via the integration package upload functionality. This issue is related to ESA-2025-17 (CVE-2025-25018) bypassing that fix to achieve HTML injection.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-37732 https://cve.radiocsirt.org/vuln/ghsa-97mj-r9v7-258f <p>Improper neutralization of input during web page generation (&#39;Cross-site Scripting&#39;) (CWE-79) allows an authenticated user to render HTML tags within a user’s browser via the integration package upload functionality. This issue is related to ESA-2025-17 (CVE-2025-25018) bypassing that fix to achieve HTML injection.</p> <p>Improper neutralization of input during web page generation (&#39;Cross-site Scripting&#39;) (CWE-79) allows an authenticated user to render HTML tags within a user’s browser via the integration package upload functionality. This issue is related to ESA-2025-17 (CVE-2025-25018) bypassing that fix to achieve HTML injection.</p> https://cve.radiocsirt.org/vuln/ghsa-97mj-r9v7-258f https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2842 <p>Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Kibana ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.</p> <p>Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Kibana ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2842