apache__dolphinscheduler_CVE-2023-51770_3_2_1_fixed

Apache Dolphinscheduler 关于 一个分布式易扩展的可视化 DAG 工作流任务调度系统。致力于解决数据处理流程中错综复杂的依赖关系，使调度系统在数据处理流程中开箱即用。 DolphinScheduler 的主要特性如下： 易于部署，提供四种部署方式，包括Standalone、Cluster、Docker和Kubernetes 易于使用，可以通过四种方式创建和管理工作流，包括Web UI、Python SDK、Yaml文件和Open API 高可靠高可用，多主多从的去中心化架构，原生支持横向扩展 高性能，性能比其他编排平台快N倍，每天可支持千万级任务 Cloud...

EUVD-2026-62908

In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who does not hold the "admin" or "power" Splunk roles could execute attacker-chosen Structured Query Language SQL queries through the Data Orchestration jobs endpoint, allowing for access to substantially all data stor...

CVE-2026-76343

In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who does not hold the "admin" or "power" Splunk roles could execute attacker-chosen Structured Query Language SQL queries through the Data Orchestration jobs endpoint, allowing for access to substantially all data stor...

CVE-2026-76343 Structured Query Language (SQL) Injection through the REST API in Splunk Enterprise

In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who does not hold the "admin" or "power" Splunk roles could execute attacker-chosen Structured Query Language SQL queries through the Data Orchestration jobs endpoint, allowing for access to substantially all data stor...

CVE-2026-76343

In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, the Data Orchestration jobs endpoint builds SQL queries from user-controlled job filter values without parameterized queries. A non-admin user can inject SQL, accessing all Data Orchestration data and stored credentials (CVSS...

PT-2026-78770

Name of the Vulnerable Software and Affected Versions Splunk Enterprise versions prior to 10.4.2 Splunk Enterprise versions prior to 10.2.6 Splunk Enterprise versions prior to 10.0.9 Splunk Enterprise versions prior to 9.4.14 Description Users without admin or power roles can execute arbitrary...

Unspecified Information Disclosure Vulnerability in SAP Netweaver Data Orchestration Engine

SAP NetWeaver is the German SAP SAP company's set of service-oriented integrated application platform. The platform provides a development and runtime environment for SAP applications. An unspecified information disclosure vulnerability exists in SAP Netweaver Data Orchestration Engine. An attack...