2557 matches found
CVE-2026-76262 Exposure of Sensitive Information to an Unauthorized Actor through the REST API in Splunk Enterprise
In Splunk Enterprise 10.4 versions below 10.4.2, an unauthenticated user could read Prometheus service metrics from the Edge Processor SPL2 Preview sidecar, including service details that expose relevant runtime and build metadata for the sidecar. The vulnerability does not affect Splunk Enterpri...
CVE-2026-76262 Exposure of Sensitive Information to an Unauthorized Actor through the REST API in Splunk Enterprise
In Splunk Enterprise 10.4 versions below 10.4.2, an unauthenticated user could read Prometheus service metrics from the Edge Processor SPL2 Preview sidecar, including service details that expose relevant runtime and build metadata for the sidecar. The vulnerability does not affect Splunk Enterpri...
CVE-2026-76262
CVE-2026-76262 affects Splunk Enterprise 10.4 versions below 10.4.2 . The Edge Processor SPL2 Preview sidecar exposes its Prometheus metrics endpoint without authentication, allowing any unauthenticated network client to retrieve runtime and build metadata for the sidecar. The vulnerability is li...
Exploit for Cross-site Scripting in Prometheus
CVE-2026-40179 — Prometheus stored XSS via remotewrite A m...
PT-2026-78734
In Splunk Enterprise 10.4 versions below 10.4.2, an unauthenticated user could read Prometheus service metrics from the Edge Processor SPL2 Preview sidecar, including service details that expose relevant runtime and build metadata for the sidecar. The vulnerability does not affect Splunk Enterpri...
CVE-2026-76262: Exposure of Sensitive Information to an Unauthorized Actor
In Splunk Enterprise 10.4 versions below 10.4.2, an unauthenticated user could read Prometheus service metrics from the Edge Processor SPL2 Preview sidecar, including service details that expose relevant runtime and build metadata for the sidecar. The vulnerability does not affect Splunk Enterpri...
GO-2025-3777 vulnerabilities
Vulnerabilities for packages: prometheus-podman-exporter-fips, prometheus-podman-exporter...
GO-2023-2044 vulnerabilities
Vulnerabilities for packages: metrics-server...
GO-2023-2045 vulnerabilities
Vulnerabilities for packages: metrics-server...
GO-2023-2042 vulnerabilities
Vulnerabilities for packages: metrics-server...
GO-2022-0619 vulnerabilities
Vulnerabilities for packages: kubeflow, kube-state-metrics, kubeflow-fips...
GO-2023-2041 vulnerabilities
Vulnerabilities for packages: metrics-server, kubeflow-katib, kind...
GO-2022-1130 vulnerabilities
Vulnerabilities for packages: kube-state-metrics, prometheus-pushgateway-fips, prometheus-pushgateway...
GO-2023-2043 vulnerabilities
Vulnerabilities for packages: metrics-server, kubeflow-katib, kind...
GO-2024-3205 vulnerabilities
Vulnerabilities for packages: kube-metrics-adapter, fq...
GO-2026-5208 vulnerabilities
Vulnerabilities for packages: gotenberg, kube-metrics-adapter, temporal-ui-server-fips, temporal, kube-metrics-adapter-fips, snyk-cli, temporal-ui-server, fq, temporal-fips...
GO-2022-0969 vulnerabilities
Vulnerabilities for packages: kubeflow, terraform-provider-sendgrid, grpcurl, kube-state-metrics, hey, terraform-provider-sendgrid-fips, wireguard-go, kubeflow-katib, dynamic-localpv-provisioner-fips, dynamic-localpv-provisioner, kubeflow-fips, k3d...
GO-2023-1571 vulnerabilities
Vulnerabilities for packages: kubeflow, terraform-provider-sendgrid, grpcurl, go, kube-state-metrics, hey, restic, terraform-provider-sendgrid-fips, wireguard-go, kubeflow-katib, gke-gcloud-auth-plugin, dynamic-localpv-provisioner-fips, dynamic-localpv-provisioner, kubeflow-fips, k3d...
GO-2022-1059 vulnerabilities
Vulnerabilities for packages: kubeflow, gitleaks, terraform-provider-sendgrid, php-fpmexporter, grpcurl, kube-state-metrics, hey, terraform-provider-sendgrid-fips, dynamic-localpv-provisioner-fips, vt-cli, dynamic-localpv-provisioner, kubeflow-fips, k3d...