6735 matches found
CVE-2026-20260
In Splunk SOAR Security Orchestration, Automation, and Response versions below 8.5.0, an unauthenticated attacker could inject American National Standards Institute ANSI escape codes into SOAR application log files through specially crafted HTTP request paths, which a terminal emulator might...
CVE-2026-20251
In Splunk Enterprise versions below 10.2.4, 10.0.7, 9.4.12, and 9.3.13, Splunk Cloud Platform versions below 10.3.2512.12, 10.2.2510.14, 10.1.2507.22, and 9.3.2411.132, and Splunk Secure Gateway versions below 3.10.6, 3.9.20, and 3.8.67, a low-privileged user that does not hold the 'admin' or...
CVE-2026-20253 Unauthenticated Arbitrary File Creation and Truncation in a PostgreSQL Sidecar Service Endpoint in Splunk Enterprise
In Splunk Enterprise 10.2 versions below 10.2.4 and 10 versions below 10.0.7, an unauthenticated user could create or truncate arbitrary files through a PostgreSQL sidecar service endpoint. The vulnerability exists because the PostgreSQL sidecar service endpoint lacks authentication controls,...
EUVD-2026-36082
In Splunk Enterprise versions below 10.2.4, 10.0.7, 9.4.12, and 9.3.13, Splunk Cloud Platform versions below 10.3.2512.12, 10.2.2510.14, 10.1.2507.22, and 9.3.2411.132, and Splunk Secure Gateway versions below 3.10.6, 3.9.20, and 3.8.67, a low-privileged user that does not hold the 'admin' or...
CVE-2026-27145 affecting package golang for versions less than 1.25.11-1
CVE-2026-27145 affecting package golang for versions less than 1.25.11-1. A patched version of the package is available...
CVE-2026-42535 affecting package httpd for versions less than 2.4.68-1
CVE-2026-42535 affecting package httpd for versions less than 2.4.68-1. A patched version of the package is available...
CVE-2026-29167 affecting package httpd for versions less than 2.4.68-1
CVE-2026-29167 affecting package httpd for versions less than 2.4.68-1. A patched version of the package is available...
CVE-2026-42507 affecting package golang for versions less than 1.25.11-1
CVE-2026-42507 affecting package golang for versions less than 1.25.11-1. A patched version of the package is available...
CVE-2026-42504 affecting package golang for versions less than 1.25.11-1
CVE-2026-42504 affecting package golang for versions less than 1.25.11-1. A patched version of the package is available...
CVE-2026-10721 Concrete CMS below 9.5.2 is vulnerable to PHP Object Injection via unserialize() calls in the in Permission, Cache, and Search components
Concrete CMS below 9.5.2 is vulnerable to PHP Object Injection via unserialize calls in the in Permission, Cache, and Search components. An unauthenticated attacker may trigger arbitrary PHP object instantiation if a malicious serialized payload has been placed in the database. Thanks XananasX7...
CVE-2026-25680 affecting package docker-buildx for versions less than 0.14.0-15
CVE-2026-25680 affecting package docker-buildx for versions less than 0.14.0-15. A patched version of the package is available...
CVE-2026-25680 affecting package docker-compose for versions less than 2.27.0-13
CVE-2026-25680 affecting package docker-compose for versions less than 2.27.0-13. A patched version of the package is available...
CVE-2026-39835 affecting package docker-compose for versions less than 2.27.0-13
CVE-2026-39835 affecting package docker-compose for versions less than 2.27.0-13. A patched version of the package is available...
CVE-2026-46598 affecting package docker-compose for versions less than 2.27.0-13
CVE-2026-46598 affecting package docker-compose for versions less than 2.27.0-13. A patched version of the package is available...
CVE-2026-39835 affecting package docker-buildx for versions less than 0.14.0-15
CVE-2026-39835 affecting package docker-buildx for versions less than 0.14.0-15. A patched version of the package is available...
CVE-2026-46598 affecting package docker-buildx for versions less than 0.14.0-15
CVE-2026-46598 affecting package docker-buildx for versions less than 0.14.0-15. A patched version of the package is available...
CVE-2026-39827 affecting package docker-buildx for versions less than 0.14.0-15
CVE-2026-39827 affecting package docker-buildx for versions less than 0.14.0-15. A patched version of the package is available...
CVE-2026-50031 affecting package freeipmi for versions less than 1.6.18-1
CVE-2026-50031 affecting package freeipmi for versions less than 1.6.18-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-42790 affecting package erlang for versions less than 26.2.5.21-1
CVE-2026-42790 affecting package erlang for versions less than 26.2.5.21-1. An upgraded version of the package is available that resolves this issue...