Splunk Universal Forwarder vulnerabilities

• splunk universal forwarder, splunk/universalforwarder for windows +1 more Incorrect permission assignment on Universal Forwarder for Windows during new installation or upgrade CVE-2025-20298 8.0 HighJune 2, 2025
• splunk, splunk enterprise, universal forwarder +2 more Unauthenticated Log Injection in Splunk Enterprise CVE-2023-32712 8.6 HighJune 1, 2023
• haxx libcurl, broadcom brocade fabric operating system firmware, netapp active iq unified manager +9 more +11 more A double free vulnerability exists in libcurl <8.0.0 when sharing HSTS data between separate ... CVE-2023-27537 Fix available 5.9 MediumMarch 20, 2023
• haxx libcurl, broadcom brocade fabric operating system firmware, debian linux +11 more +13 more An authentication bypass vulnerability exists in libcurl v8.0.0 where it reuses a previously... CVE-2023-27538 Fix available 5.5 MediumMarch 20, 2023
• haxx libcurl, debian linux, fedoraproject fedora +10 more +12 more An authentication bypass vulnerability exists libcurl <8.0.0 in the connection reuse feature... CVE-2023-27536 Fix available 5.9 MediumMarch 20, 2023
• haxx libcurl, debian linux, fedoraproject fedora +10 more +12 more An authentication bypass vulnerability exists in libcurl <8.0.0 in the FTP connection reuse... CVE-2023-27535 Fix available 5.9 MediumMarch 20, 2023
• haxx curl, broadcom brocade fabric operating system firmware, fedoraproject fedora +9 more +11 more A path traversal vulnerability exists in curl <8.0.0 SFTP implementation causes the tilde (~)... CVE-2023-27534 Fix available 8.8 HighMarch 20, 2023
• haxx curl, fedoraproject fedora, netapp active iq unified manager +9 more +11 more A vulnerability in input validation exists in curl <8.0 during communication using the TELNET... CVE-2023-27533 Fix available 8.8 HighMarch 20, 2023
• haxx curl, debian linux, fedoraproject fedora +9 more +11 more An allocation of resources without limits or throttling vulnerability exists in curl <v7.88.0... CVE-2023-23916 Fix available 6.5 MediumFebruary 15, 2023
• haxx curl, netapp active iq unified manager, clustered data ontap +8 more +10 more A cleartext transmission of sensitive information vulnerability exists in curl <v7.88.0 that... CVE-2023-23915 Fix available 6.5 MediumFebruary 15, 2023
• haxx curl, netapp active iq unified manager, clustered data ontap +8 more +10 more A cleartext transmission of sensitive information vulnerability exists in curl <v7.88.0 that... CVE-2023-23914 Fix available 9.1 CriticalFebruary 15, 2023
• haxx curl, apple macos, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +3 more +5 more A use after free vulnerability exists in curl <7.87.0. Curl can be asked to *tunnel* virtually... CVE-2022-43552 Fix available 5.9 MediumDecember 21, 2022
• haxx curl, fedoraproject fedora, netapp active iq unified manager +7 more +9 more A vulnerability exists in curl <7.87.0 HSTS check that could be bypassed to trick it to keep... CVE-2022-43551 Fix available EPSS 16.6% 7.5 HighDecember 21, 2022
• libarchive, debian linux, fedoraproject fedora +1 more +3 more In libarchive 3.6.1, the software does not check for an error after calling calloc function that... CVE-2022-36227 Fix available 9.8 CriticalNovember 22, 2022
• haxx curl, apple macos, netapp clustered data ontap +8 more +10 more curl can be told to parse a `.netrc` file for credentials. If that file endsin a line with 4095... CVE-2022-35260 Fix available 6.5 MediumOctober 26, 2022
• haxx curl, apple macos, fedoraproject fedora +4 more +6 more In curl before 7.86.0, the HSTS check could be bypassed to trick it into staying with HTTP. Using... CVE-2022-42916 Fix available 7.5 HighOctober 26, 2022
• haxx curl, apple macos, fedoraproject fedora +9 more +11 more curl before 7.86.0 has a double free. If curl is told to use an HTTP proxy for a transfer with a... CVE-2022-42915 Fix available 8.1 HighOctober 26, 2022
• haxx curl, apple macos, debian linux +9 more +11 more When doing HTTP(S) transfers, libcurl might erroneously use the read callback (... CVE-2022-32221 Fix available 9.8 CriticalOctober 26, 2022
• haxx curl, apple macos, debian linux +14 more +16 more When curl is used to retrieve and parse cookies from a HTTP(S) server, itaccepts cookies using... CVE-2022-35252 Fix available 3.7 LowAugust 31, 2022
• splunk, splunk enterprise, universal forwarders +1 more +3 more Malformed ZIP file crashes Universal Forwarders and Splunk Enterprise through file monitoring input CVE-2022-37439 5.5 MediumAugust 16, 2022
• sqlite, netapp ontap select deploy administration utility, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +3 more +5 more `libsqlite3-sys` via C SQLite improperly validates array index CVE-2022-35737 Public exploitFix available EPSS 23.6% 7.5 HighAugust 3, 2022
• haxx curl, apple macos, debian linux +15 more +17 more When curl < 7.84.0 does FTP transfers secured by krb5, it handles message verification failures... CVE-2022-32208 Fix available 5.9 MediumJune 27, 2022
• haxx curl, apple macos, debian linux +15 more +17 more When curl < 7.84.0 saves cookies, alt-svc and hsts data to local files, it makes the operation... CVE-2022-32207 Fix available EPSS 12.3% 9.8 CriticalJune 27, 2022
• haxx curl, debian linux, fedoraproject fedora +20 more +22 more curl < 7.84.0 supports "chained" HTTP compression algorithms, meaning that a serverresponse can... CVE-2022-32206 Fix available EPSS 36.3% 6.5 MediumJune 27, 2022
• haxx curl, apple macos, debian linux +20 more +22 more A malicious server can serve excessive amounts of `Set-Cookie:` headers in a HTTP response to... CVE-2022-32205 Fix available EPSS 31.5% 4.3 MediumJune 27, 2022
• splunk, splunk enterprise, universal forwarder +2 more Splunk Enterprise and Universal Forwarder CLI connections lacked TLS cert validation CVE-2022-32156 7.4 HighJune 14, 2022
• haxx curl, netapp clustered data ontap, h300s firmware +10 more +12 more Using its HSTS support, curl can be instructed to use HTTPS directly insteadof using an insecure... CVE-2022-30115 Fix available 4.3 MediumMay 11, 2022
• haxx curl, netapp clustered data ontap, h300s firmware +11 more +13 more libcurl wrongly allows cookies to be set for Top Level Domains (TLDs) if thehost name is provided... CVE-2022-27779 Fix available 5.3 MediumMay 11, 2022
• haxx curl, netapp active iq unified manager, bh500s firmware +14 more +16 more A use of incorrectly resolved name vulnerability fixed in 7.83.1 might remove the wrong file when... CVE-2022-27778 Fix available 8.1 HighMay 11, 2022
• haxx curl, debian linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +3 more +5 more libcurl would reuse a previously created connection even when a TLS or SSHrelated option had been... CVE-2022-27782 Fix available 7.5 HighMay 11, 2022
• haxx curl, debian linux, netapp clustered data ontap +12 more +14 more libcurl provides the `CURLOPT_CERTINFO` option to allow applications torequest details to be... CVE-2022-27781 Fix available 7.5 HighMay 11, 2022
• haxx curl, netapp clustered data ontap, h300s firmware +12 more +14 more The curl URL parser wrongly accepts percent-encoded URL separators like '/'when decoding the host... CVE-2022-27780 Fix available 7.5 HighMay 11, 2022
• haxx curl, broadcom fabric operating system, debian linux +13 more +15 more A insufficiently protected credentials vulnerability in fixed in curl 7.83.0 might leak... CVE-2022-27776 Fix available 6.5 MediumApril 27, 2022
• haxx curl, broadcom fabric operating system, debian linux +12 more +14 more An information disclosure vulnerability exists in curl 7.65.0 to 7.82.0 are vulnerable that by... CVE-2022-27775 Fix available 7.5 HighApril 27, 2022
• haxx curl, broadcom fabric operating system, debian linux +12 more +14 more An insufficiently protected credentials vulnerability exists in curl 4.9 to and include curl 7.82... CVE-2022-27774 Fix available 5.7 MediumApril 27, 2022
• haxx curl, broadcom fabric operating system, debian linux +12 more +14 more An improper authentication vulnerability exists in curl 7.33.0 to and including 7.82.0 which... CVE-2022-22576 Fix available 8.1 HighApril 27, 2022
• debian linux, fedoraproject fedora, libarchive +11 more +13 more An improper link resolution flaw can occur while extracting an archive leading to changing modes,... CVE-2021-31566 Fix available 7.8 HighDecember 24, 2021
• haxx curl, apple macos, debian linux +26 more +28 more When curl >= 7.20.0 and <= 7.78.0 connects to an IMAP or POP3 server to retrieve data using... CVE-2021-22947 Fix available 5.9 MediumSeptember 15, 2021
• haxx curl, apple macos, debian linux +29 more +31 more A user can tell curl >= 7.20.0 and <= 7.78.0 to require a successful upgrade to TLS when speaking... CVE-2021-22946 Fix available 7.5 HighSeptember 15, 2021
• haxx libcurl, apple macos, debian linux +17 more +19 more When sending data to an MQTT server, libcurl <= 7.73.0 and 7.78.0 could in some circumstances... CVE-2021-22945 Fix available 9.1 CriticalSeptember 15, 2021
• google chrome, xmlsoft libxslt, debian linux +1 more +3 more Nokogiri has vulnerable dependencies on libxml2 and libxslt CVE-2021-30560 Fix available EPSS 20.4% 8.8 HighJuly 21, 2021
• haxx curl, netapp active iq unified manager, clustered data ontap +19 more +21 more libcurl-using applications can ask for a specific client certificate to be used in a transfer.... CVE-2021-22926 Fix available EPSS 15.1% 7.5 HighJuly 21, 2021
• haxx curl, fedoraproject fedora, netapp cloud backup +16 more +18 more When curl is instructed to get content using the metalink feature, and a user name and password... CVE-2021-22923 Fix available 5.3 MediumJuly 21, 2021
• haxx curl, fedoraproject fedora, netapp cloud backup +16 more +18 more When curl is instructed to download content using the metalink feature, thecontents is verified... CVE-2021-22922 Fix available 6.5 MediumJuly 21, 2021
• haxx curl, apple mac os x, macos +20 more +22 more curl supports the `-t` command line option, known as `CURLOPT_TELNETOPTIONS`in libcurl. This... CVE-2021-22925 Fix available 5.3 MediumJuly 21, 2021
• haxx libcurl, debian linux, fedoraproject fedora +33 more +35 more libcurl keeps previously used connections in a connection pool for subsequenttransfers to reuse,... CVE-2021-22924 Public exploitFix available 3.7 LowJuly 21, 2021
• libarchive, apple ipados, iphone os +4 more +6 more libarchive 3.4.1 through 3.5.1 has a use-after-free in copy_string (called from... CVE-2021-36976 Fix available 6.5 MediumJuly 20, 2021
• haxx curl, netapp cloud backup, h300e firmware +22 more +24 more curl 7.61.0 through 7.76.1 suffers from exposure of data element to wrong session due to a... CVE-2021-22897 Fix available 5.3 MediumMay 26, 2021
• haxx curl, netapp active iq unified manager, cloud backup +26 more +28 more curl 7.75.0 through 7.76.1 suffers from a use-after-free vulnerability resulting in already freed... CVE-2021-22901 Fix available EPSS 63.5% 8.1 HighMay 26, 2021
• haxx curl, debian linux, fedoraproject fedora +12 more +14 more curl 7.7 through 7.76.1 suffers from an information disclosure when the `-t` command line option,... CVE-2021-22898 Fix available 3.1 LowMay 26, 2021
• Show olderLoading…