Skip to contentSplunk vulnerabilities
Newest
- haxx libcurl, broadcom brocade fabric operating system firmware, debian linux +11 more +13 moreAn authentication bypass vulnerability exists in libcurl v8.0.0 where it reuses a previously...CVE-2023-27538Fix available5.5 Medium
- haxx libcurl, debian linux, fedoraproject fedora +10 more +12 moreAn authentication bypass vulnerability exists libcurl <8.0.0 in the connection reuse feature...CVE-2023-27536Fix available5.9 Medium
- haxx libcurl, debian linux, fedoraproject fedora +10 more +12 moreAn authentication bypass vulnerability exists in libcurl <8.0.0 in the FTP connection reuse...CVE-2023-27535Fix available5.9 Medium
- haxx curl, broadcom brocade fabric operating system firmware, fedoraproject fedora +9 more +11 moreA path traversal vulnerability exists in curl <8.0.0 SFTP implementation causes the tilde (~)...CVE-2023-27534Fix available8.8 High
- haxx curl, fedoraproject fedora, netapp active iq unified manager +9 more +11 moreA vulnerability in input validation exists in curl <8.0 during communication using the TELNET...CVE-2023-27533Fix available8.8 High
- haxx curl, debian linux, fedoraproject fedora +9 more +11 moreAn allocation of resources without limits or throttling vulnerability exists in curl <v7.88.0...CVE-2023-23916Fix available6.5 Medium
- haxx curl, netapp active iq unified manager, clustered data ontap +8 more +10 moreA cleartext transmission of sensitive information vulnerability exists in curl <v7.88.0 that...CVE-2023-23915Fix available6.5 Medium
- haxx curl, netapp active iq unified manager, clustered data ontap +8 more +10 moreA cleartext transmission of sensitive information vulnerability exists in curl <v7.88.0 that...CVE-2023-23914Fix available9.1 Critical
- splunk, splunk enterprise, cloud platform +2 moreSPL Command Safeguards Bypass via the ‘map’ SPL Command in Splunk EnterpriseCVE-2023-229398.1 High
- splunk, splunk enterprise, cloud platform +2 morePermissions Validation Failure in the ‘sendemail’ REST API Endpoint in Splunk EnterpriseCVE-2023-229384.3 Medium
- splunk, splunk enterprise, cloud platform +2 moreUnnecessary File Extensions Allowed by Lookup Table Uploads in Splunk EnterpriseCVE-2023-229374.3 Medium
- splunk add-on builder, cloudconnect sdk, cloudconnect software development kit +2 moreModular Input REST API Requests Connect via HTTP after Certificate Validation Failure in Splunk Add-on Builder and Splunk CloudConnect SDKCVE-2023-229434.8 Medium
- splunk, splunk enterprise, cloud platform +2 morePersistent Cross-Site Scripting through the ‘module’ Tag in a View in Splunk EnterpriseCVE-2023-229338.0 High
- splunk, splunk enterprise +1 moreCross-Site Request Forgery in the ‘ssg/kvstore_client’ REST Endpoint in Splunk EnterpriseCVE-2023-229425.4 Medium
- splunk, splunk enterprise, cloud platform +2 moreAuthenticated Blind Server Side Request Forgery via the ‘search_listener’ Search Parameter in Splunk EnterpriseCVE-2023-229366.3 Medium
- splunk, splunk enterprise, cloud platform +2 morePersistent Cross-Site Scripting through a Base64-encoded Image in a View in Splunk EnterpriseCVE-2023-229328.0 High
- splunk, splunk enterprise, cloud platform +2 moreImproperly Formatted ‘INGEST_EVAL’ Parameter Crashes Splunk DaemonCVE-2023-22941Public exploit6.5 Medium
- splunk, splunk enterprise, cloud platform +2 moreSPL Command Safeguards Bypass via the ‘display.page.search.patterns.sensitivity’ Search Parameter in Splunk EnterpriseCVE-2023-229358.1 High
- splunk, splunk enterprise, cloud platform +2 more‘createrss’ External Search Command Overwrites Existing RSS Feeds in Splunk EnterpriseCVE-2023-229314.3 Medium
- splunk, splunk enterprise, cloud platform +2 moreSPL Command Safeguards Bypass via the ‘pivot’ SPL Command in Splunk EnterpriseCVE-2023-229347.3 High
- splunk, splunk enterprise, cloud platform +2 moreSPL Command Safeguards Bypass via the ‘collect’ SPL Command Aliases in Splunk EnterpriseCVE-2023-229406.3 Medium
- haxx curl, apple macos, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +3 more +5 moreA use after free vulnerability exists in curl <7.87.0. Curl can be asked to *tunnel* virtually...CVE-2022-43552Fix available5.9 Medium
- haxx curl, fedoraproject fedora, netapp active iq unified manager +7 more +9 moreA vulnerability exists in curl <7.87.0 HSTS check that could be bypassed to trick it to keep...CVE-2022-43551Fix availableEPSS 16.6%7.5 High
- libarchive, debian linux, fedoraproject fedora +1 more +3 moreIn libarchive 3.6.1, the software does not check for an error after calling calloc function that...CVE-2022-36227Fix available9.8 Critical
- splunk, splunk enterprise, cloud platform +2 moreIndexing blockage via malformed data sent through S2S or HEC protocols in Splunk EnterpriseCVE-2022-435727.5 High
- splunk, splunk enterprise, cloud platform +2 moreXML External Entity Injection through a custom View in Splunk EnterpriseCVE-2022-435708.8 High
- splunk, splunk enterprise, cloud platform +2 morePersistent Cross-Site Scripting via a Data Model object name in Splunk EnterpriseCVE-2022-435698.0 High
- splunk, splunk enterprise, cloud platform +2 moreReflected Cross-Site Scripting via the radio template in Splunk EnterpriseCVE-2022-43568EPSS 42.8%8.8 High
- splunk, splunk enterprise, cloud platform +2 moreRemote Code Execution via the Splunk Secure Gateway application Mobile Alerts featureCVE-2022-435678.8 High
- splunk, splunk enterprise, cloud platform +2 moreRisky command safeguards bypass via Search ID query in Analytics Workspace in Splunk EnterpriseCVE-2022-435667.3 High
- splunk, splunk enterprise, cloud platform +2 moreRisky command safeguards bypass via ‘tstats command JSON in Splunk EnterpriseCVE-2022-435658.1 High
- splunk, splunk enterprise, cloud platform +2 moreDenial of Service in Splunk Enterprise through search macrosCVE-2022-435644.9 Medium
- splunk, splunk enterprise, cloud platform +2 moreRisky command safeguards bypass via rex search command field names in Splunk EnterpriseCVE-2022-435638.1 High
- splunk, splunk enterprise, cloud platform +2 moreHost Header Injection in Splunk EnterpriseCVE-2022-435623.0 Low
- splunk, splunk enterprise, cloud platform +2 moreRemote Code Execution through dashboard PDF generation component in Splunk EnterpriseCVE-2022-43571Public exploitEPSS 18.6%8.8 High
- splunk, splunk enterprise, cloud platform +2 morePersistent Cross-Site Scripting in “Save Table” Dialog in Splunk EnterpriseCVE-2022-435616.4 Medium
- haxx curl, apple macos, netapp clustered data ontap +8 more +10 morecurl can be told to parse a `.netrc` file for credentials. If that file endsin a line with 4095...CVE-2022-35260Fix available6.5 Medium
- haxx curl, apple macos, fedoraproject fedora +4 more +6 moreIn curl before 7.86.0, the HSTS check could be bypassed to trick it into staying with HTTP. Using...CVE-2022-42916Fix available7.5 High
- haxx curl, apple macos, fedoraproject fedora +9 more +11 morecurl before 7.86.0 has a double free. If curl is told to use an HTTP proxy for a transfer with a...CVE-2022-42915Fix available8.1 High
- haxx curl, apple macos, debian linux +9 more +11 moreWhen doing HTTP(S) transfers, libcurl might erroneously use the read callback (...CVE-2022-32221Fix available9.8 Critical
- haxx curl, apple macos, debian linux +14 more +16 moreWhen curl is used to retrieve and parse cookies from a HTTP(S) server, itaccepts cookies using...CVE-2022-35252Fix available3.7 Low
- splunk, splunk enterprise +1 moreIngest Actions UI in Splunk Enterprise 9.0.0 disabled TLS certificate validationCVE-2022-374377.4 High
- splunk, splunk enterprise, universal forwarders +1 more +3 moreMalformed ZIP file crashes Universal Forwarders and Splunk Enterprise through file monitoring inputCVE-2022-374395.5 Medium
- splunk, splunk enterprise, cloud platform +2 moreInformation disclosure via the dashboard drilldown in Splunk EnterpriseCVE-2022-374382.6 Low
- sqlite, netapp ontap select deploy administration utility, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +3 more +5 more`libsqlite3-sys` via C SQLite improperly validates array indexCVE-2022-35737Public exploitFix availableEPSS 23.6%7.5 High
- haxx curl, apple macos, debian linux +15 more +17 moreWhen curl < 7.84.0 does FTP transfers secured by krb5, it handles message verification failures...CVE-2022-32208Fix available5.9 Medium
- haxx curl, apple macos, debian linux +15 more +17 moreWhen curl < 7.84.0 saves cookies, alt-svc and hsts data to local files, it makes the operation...CVE-2022-32207Fix availableEPSS 12.3%9.8 Critical
- haxx curl, debian linux, fedoraproject fedora +20 more +22 morecurl < 7.84.0 supports "chained" HTTP compression algorithms, meaning that a serverresponse can...CVE-2022-32206Fix availableEPSS 36.3%6.5 Medium
- haxx curl, apple macos, debian linux +20 more +22 moreA malicious server can serve excessive amounts of `Set-Cookie:` headers in a HTTP response to...CVE-2022-32205Fix availableEPSS 31.5%4.3 Medium
- splunk, splunk enterprise, splunk, inc splunk enterprise +2 moreSplunk Enterprise deployment servers allow client publishing of forwarder bundlesCVE-2022-321589.0 Critical
- Show moreLoading…