Skip to contentSplunk vulnerabilities
Newest
- splunk, splunk enterprise, splunk, inc splunk enterprise +2 moreSplunk Enterprise deployment servers allow unauthenticated forwarder bundle downloadsCVE-2022-321577.5 High
- splunk, splunk universal forwarder, cloud platform +2 moreUniversal Forwarder management services allows remote login by defaultCVE-2022-321557.5 High
- splunk, splunk enterprise, splunk, inc splunk enterprise +2 more +4 moreRisky commands warnings in Splunk Enterprise DashboardsCVE-2022-321546.8 Medium
- splunk, splunk cloud platform, enterprise +2 more +4 moreSplunk Enterprise lacked TLS host name validationCVE-2022-321538.1 High
- splunk, splunk cloud platform, enterprise +2 moreSplunk Enterprise lacked TLS cert validation for Splunk-to-Splunk communication by defaultCVE-2022-321528.1 High
- splunk, splunk cloud platform, enterprise +2 more +4 moreSplunk Enterprise disabled TLS validation using the CA certificate stores in Python 3 libraries by defaultCVE-2022-321517.4 High
- splunk, splunk enterprise, universal forwarder +2 moreSplunk Enterprise and Universal Forwarder CLI connections lacked TLS cert validationCVE-2022-321567.4 High
- haxx curl, netapp clustered data ontap, h300s firmware +10 more +12 moreUsing its HSTS support, curl can be instructed to use HTTPS directly insteadof using an insecure...CVE-2022-30115Fix available4.3 Medium
- haxx curl, netapp clustered data ontap, h300s firmware +11 more +13 morelibcurl wrongly allows cookies to be set for Top Level Domains (TLDs) if thehost name is provided...CVE-2022-27779Fix available5.3 Medium
- haxx curl, netapp active iq unified manager, bh500s firmware +14 more +16 moreA use of incorrectly resolved name vulnerability fixed in 7.83.1 might remove the wrong file when...CVE-2022-27778Fix available8.1 High
- haxx curl, debian linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +3 more +5 morelibcurl would reuse a previously created connection even when a TLS or SSHrelated option had been...CVE-2022-27782Fix available7.5 High
- haxx curl, debian linux, netapp clustered data ontap +12 more +14 morelibcurl provides the `CURLOPT_CERTINFO` option to allow applications torequest details to be...CVE-2022-27781Fix available7.5 High
- haxx curl, netapp clustered data ontap, h300s firmware +12 more +14 moreThe curl URL parser wrongly accepts percent-encoded URL separators like '/'when decoding the host...CVE-2022-27780Fix available7.5 High
- splunk, splunk enterprise +1 moreReflected XSS in a query parameter of the Monitoring ConsoleCVE-2022-271838.8 High
- splunk, splunk enterprise +1 morePath Traversal in search parameter results in external content injectionCVE-2022-268898.8 High
- splunk, splunk enterprise +1 moreError message discloses internal pathCVE-2022-260704.3 Medium
- splunk, splunk enterprise +1 moreLocal privilege escalation via a default path in Splunk Enterprise WindowsCVE-2021-427438.8 High
- splunk, splunk enterprise +1 moreUsername enumeration through lockout message in REST APICVE-2021-338455.3 Medium
- splunk, splunk enterprise +1 moreS2S TcpToken authentication bypassCVE-2021-315597.5 High
- splunk, splunk enterprise +1 moreBypass of Splunk Enterprise's implementation of DUO MFACVE-2021-262538.1 High
- haxx curl, broadcom fabric operating system, debian linux +13 more +15 moreA insufficiently protected credentials vulnerability in fixed in curl 7.83.0 might leak...CVE-2022-27776Fix available6.5 Medium
- haxx curl, broadcom fabric operating system, debian linux +12 more +14 moreAn information disclosure vulnerability exists in curl 7.65.0 to 7.82.0 are vulnerable that by...CVE-2022-27775Fix available7.5 High
- haxx curl, broadcom fabric operating system, debian linux +12 more +14 moreAn insufficiently protected credentials vulnerability exists in curl 4.9 to and include curl 7.82...CVE-2022-27774Fix available5.7 Medium
- haxx curl, broadcom fabric operating system, debian linux +12 more +14 moreAn improper authentication vulnerability exists in curl 7.33.0 to and including 7.82.0 which...CVE-2022-22576Fix available8.1 High
- splunk, splunk enterprise +1 moreIndexer denial-of-service via malformed S2S requestCVE-2021-34227.5 High
- debian linux, fedoraproject fedora, libarchive +11 more +13 moreAn improper link resolution flaw can occur while extracting an archive leading to changing modes,...CVE-2021-31566Fix available7.8 High
- haxx curl, apple macos, debian linux +26 more +28 moreWhen curl >= 7.20.0 and <= 7.78.0 connects to an IMAP or POP3 server to retrieve data using...CVE-2021-22947Fix available5.9 Medium
- haxx curl, apple macos, debian linux +29 more +31 moreA user can tell curl >= 7.20.0 and <= 7.78.0 to require a successful upgrade to TLS when speaking...CVE-2021-22946Fix available7.5 High
- haxx libcurl, apple macos, debian linux +17 more +19 moreWhen sending data to an MQTT server, libcurl <= 7.73.0 and 7.78.0 could in some circumstances...CVE-2021-22945Fix available9.1 Critical
- google chrome, xmlsoft libxslt, debian linux +1 more +3 moreNokogiri has vulnerable dependencies on libxml2 and libxsltCVE-2021-30560Fix availableEPSS 20.4%8.8 High
- haxx curl, netapp active iq unified manager, clustered data ontap +19 more +21 morelibcurl-using applications can ask for a specific client certificate to be used in a transfer....CVE-2021-22926Fix availableEPSS 15.1%7.5 High
- haxx curl, fedoraproject fedora, netapp cloud backup +16 more +18 moreWhen curl is instructed to get content using the metalink feature, and a user name and password...CVE-2021-22923Fix available5.3 Medium
- haxx curl, fedoraproject fedora, netapp cloud backup +16 more +18 moreWhen curl is instructed to download content using the metalink feature, thecontents is verified...CVE-2021-22922Fix available6.5 Medium
- haxx curl, apple mac os x, macos +20 more +22 morecurl supports the `-t` command line option, known as `CURLOPT_TELNETOPTIONS`in libcurl. This...CVE-2021-22925Fix available5.3 Medium
- haxx libcurl, debian linux, fedoraproject fedora +33 more +35 morelibcurl keeps previously used connections in a connection pool for subsequenttransfers to reuse,...CVE-2021-22924Public exploitFix available3.7 Low
- libarchive, apple ipados, iphone os +4 more +6 morelibarchive 3.4.1 through 3.5.1 has a use-after-free in copy_string (called from...CVE-2021-36976Fix available6.5 Medium
- haxx curl, netapp cloud backup, h300e firmware +22 more +24 morecurl 7.61.0 through 7.76.1 suffers from exposure of data element to wrong session due to a...CVE-2021-22897Fix available5.3 Medium
- haxx curl, netapp active iq unified manager, cloud backup +26 more +28 morecurl 7.75.0 through 7.76.1 suffers from a use-after-free vulnerability resulting in already freed...CVE-2021-22901Fix availableEPSS 63.5%8.1 High
- haxx curl, debian linux, fedoraproject fedora +12 more +14 morecurl 7.7 through 7.76.1 suffers from an information disclosure when the `-t` command line option,...CVE-2021-22898Fix available3.1 Low
- lz4 project lz4, netapp active iq unified manager, cloud backup +7 more +9 moreThere's a flaw in lz4. An attacker who submits a crafted file to an application linked with lz4...CVE-2021-3520Fix available9.8 Critical
- haxx libcurl, broadcom fabric operating system, debian linux +11 more +13 morecurl 7.63.0 to and including 7.75.0 includes vulnerability that allows a malicious HTTPS proxy to...CVE-2021-22890Fix available3.7 Low
- haxx libcurl, broadcom fabric operating system, debian linux +12 more +14 morecurl 7.1.1 to and including 7.75.0 is vulnerable to an "Exposure of Private Personal Information...CVE-2021-22876Fix available5.3 Medium
- apple mac os x, macos, debian linux +22 more +24 morecurl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack...CVE-2020-8285Fix available7.5 High
- apple mac os x, macos, debian linux +17 more +19 morecurl 7.41.0 through 7.73.0 is vulnerable to an improper check for certificate revocation due to...CVE-2020-8286Fix available7.5 High
- haxx curl, apple mac os x, macos +22 more +24 moreA malicious server can use the FTP PASV response to trick curl 7.73.0 and earlier into connecting...CVE-2020-8284Fix available3.7 Low
- haxx libcurl, debian linux, oracle communications cloud native core policy +5 more +7 moreDue to use of a dangling pointer, libcurl 7.29.0 through 7.71.1 can use the wrong connection when...CVE-2020-8231Fix available7.5 High
- haxx curl, debian linux, fujitsu m10-1 firmware +10 more +12 morecurl 7.20.0 through 7.70.0 is vulnerable to improper restriction of names for files and other...CVE-2020-8177Fix available7.8 High
- haxx curl, debian linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +5 more +7 morecurl 7.62.0 through 7.70.0 is vulnerable to an information disclosure vulnerability that can lead...CVE-2020-8169Fix available7.5 High
- pcre, apple macos, splunk universal forwarder +2 morelibpcre in PCRE before 8.43 allows a subject buffer over-read in JIT when UTF is disabled, and \X...CVE-2019-20838Fix available7.5 High
- pcre, apple macos, gitlab +12 more +14 morelibpcre in PCRE before 8.44 allows an integer overflow via a large number after a (?C substring.CVE-2020-14155Fix available5.3 Medium
- Show moreLoading…