13 matches found
EUVD-2026-44737
In Splunk Enterprise versions below 10.4.1, 10.2.5, 10.0.8, and 9.4.13, and Splunk Cloud Platform versions below 10.5.2605.0, 10.4.2604.7, 10.3.2512.16, 10.2.2510.18, and 10.1.2507.24, an attacker could trick a user that holds a role with the listdeploymentserver capability into running arbitrary...
CVE-2026-20296
In Splunk Enterprise versions below 10.4.1, 10.2.5, 10.0.8, and 9.4.13, and Splunk Cloud Platform versions below 10.5.2605.0, 10.4.2604.7, 10.3.2512.16, 10.2.2510.18, and 10.1.2507.24, an attacker could trick a user that holds a role with the listdeploymentserver capability into running arbitrary...
EUVD-2023-1779
Malicious code in bioql PyPI...
CVE-2023-35783
The kesearch aka Faceted Search extension before 4.0.3, 4.1.x through 4.6.x before 4.6.6, and 5.x before 5.0.2 for TYPO3 allows XSS via indexed data...
Cross-Site Scripting (XSS)
tpwd/kesearch is vulnerable to Cross-Site Scripting XSS attacks. The library does not properly validate user input before it output to the front end, allowing an attacker to inject and execute malicious javascript on victim's browser via indexed data...
ke_search (aka Faceted Search) vulnerable to Cross-Site Scripting
The kesearch aka Faceted Search extension before 4.0.3, 4.1.x through 4.6.x before 4.6.6, and 5.x before 5.0.2 for TYPO3 allows XSS via indexed data...
GHSA-F4M6-X2XJ-JC7W ke_search (aka Faceted Search) vulnerable to Cross-Site Scripting
The kesearch aka Faceted Search extension before 4.0.3, 4.1.x through 4.6.x before 4.6.6, and 5.x before 5.0.2 for TYPO3 allows XSS via indexed data...
CVE-2023-35783
The kesearch aka Faceted Search extension before 4.0.3, 4.1.x through 4.6.x before 4.6.6, and 5.x before 5.0.2 for TYPO3 allows XSS via indexed data...
CVE-2023-35783
The kesearch aka Faceted Search extension before 4.0.3, 4.1.x through 4.6.x before 4.6.6, and 5.x before 5.0.2 for TYPO3 allows XSS via indexed data...
CVE-2023-35783
The kesearch aka Faceted Search extension before 4.0.3, 4.1.x through 4.6.x before 4.6.6, and 5.x before 5.0.2 for TYPO3 allows XSS via indexed data...
CVE-2023-35783: Improper Neutralization of Input During Web Page Generation
The kesearch aka Faceted Search extension before 4.0.3, 4.1.x through 4.6.x before 4.6.6, and 5.x before 5.0.2 for TYPO3 allows XSS via indexed data...
CVE-2023-35783
The CVE-2023-35783 vulnerability concerns the TYPO3 ke_search (Faceted Search) extension. Multiple connected sources confirm an XSS flaw via indexed data in ke_search versions prior to 4.0.3; 4.1.x through 4.6.x prior to 4.6.6; and 5.x prior to 5.0.2. Impact is cross-site scripting via the extens...
