75283 matches found
CVE-2026-76392: Use of Hard-coded Credentials
In Splunk AI Toolkit versions below 6.0.0, a user who does not hold the "admin" or "power" Splunk roles could obtain predictable or default credentials for connected container services. The use of hard-coded credentials is possible because Splunk AI Toolkit generates or stores credentials for...
CVE-2026-76376: Cleartext Storage of Sensitive Information
In versions below 2.1.9 of the AWS IAM app for Splunk SOAR, a user who holds a role with permission to run actions could expose sensitive AWS credentials by invoking an action that accepts the credentials parameter, because the parameter is not masked and is shown in cleartext in the user...
CVE-2026-75920: Insecure Temporary File
phpMyFAQ before v4.1.6 writes content backup ZIP archives to the web-accessible document root at content.zip, exposing sensitive files including database credentials. Unauthenticated attackers can race concurrent requests to download the temporary ZIP file before deletion, or exploit XSS in admin...
PT-2026-79893
A lower privileged user who holds only the privilege to read agent policies can read the entire configuration of a configured Fleet proxy. This would normally require the Fleet privilege to read settings.The proxy configuration possibly contains proxy authentication credentials and private key...
PT-2026-80647
Summary Lemur's destination read endpoints -- GET /api/1/destinations and GET /api/1/destinations/ -- return the full set of stored plugin option values to any authenticated user, with no authorization check and no redaction of secret-bearing options. The sibling write endpoints POST/PUT/DELETE a...
Content Credentials SDK Path Traversal
The vulnerability of the Content Credentials SDK libraries is related to incorrect restrictions on path names to the catalog. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...
Content Credentials SDK Certificate Authentication Bypass
The vulnerability of the Content Credentials SDK libraries is related to errors in the certificate authentication process. Exploiting this vulnerability could allow attackers to circumvent existing security restrictions...
Content Credentials SDK Integer Overflow DoS
The vulnerability of the Content Credentials SDK libraries is related to a potential overflow condition. Exploiting this vulnerability could allow an attacker to cause a service failure...
Content Credentials SDK Uncontrolled Resource Consumption DoS
The vulnerability of Content Credentials SDK library libraries is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a perpetrator to cause a service failure...
Content Credentials SDK Pointer Dereferencing DoS
The vulnerability of the Content Credentials SDK libraries is related to errors in pointer assignment. Exploiting this vulnerability could allow an attacker to cause service failures...
Content Credentials SDK Countable Loss of Significance DoS
The vulnerability of the Content Credentials SDK libraries is related to a countable loss of significance. Exploiting this vulnerability could allow an attacker to cause a service failure...
Content Credentials SDK Insufficient Validation
The vulnerability of the Content Credentials SDK libraries is related to insufficient validation of incoming requests. Exploiting this vulnerability could allow a malicious actor to bypass existing security restrictions remotely...
Content Credentials SDK Insufficient Validation Privilege Escalation
The vulnerability of Content Credentials SDK library libraries is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to enhance their privileges...
Content Credentials SDK Integer Overflow DoS
The vulnerability of the Content Credentials SDK libraries is related to a potential overflow condition. Exploiting this vulnerability could allow an attacker to cause a service failure...
Content Credentials SDK Insufficient Validation Bypass
The vulnerability of the Content Credentials SDK libraries is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to bypass existing security mechanisms remotely...
Content Credentials SDK Path Traversal
The vulnerability of the Content Credentials SDK libraries is related to an incorrect limitation on the path name to the catalog. Exploiting this vulnerability could allow a attacker to write arbitrary files...
Content Credentials SDK Uncontrolled Resource Consumption DoS
The vulnerability of Content Credentials SDK libraries is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...
Content Credentials SDK Integer Overflow DoS
The vulnerability of the Content Credentials SDK libraries is related to a potential overflow condition. Exploiting this vulnerability could allow an attacker to cause a service failure...
Content Credentials SDK Uncontrolled Resource Consumption DoS
The vulnerability of Content Credentials SDK library libraries is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a perpetrator to cause a service failure...
Content Credentials SDK Countable Loss of Significance DoS
The vulnerability of the Content Credentials SDK libraries is related to a countable loss of significance. Exploiting this vulnerability could allow an attacker to cause a service failure...