491 matches found
Vulnerabilities fixed in Splunk Enterprise
Splunk has addressed multiple vulnerabilities in Splunk Enterprise. Various vulnerabilities exist in Splunk Enterprise versions prior to 10.4.4 and a few other specific versions. These include: - Improper validation in the Data Management REST API, allowing users with certain roles to create or...
CVE-2026-19500-poc
CVE-2026-19500 Poc and writeup Description Sureforms is vulnerable to a DOS vulnerability , when attacker can submit unlimited key-value pair, leads to resource exhaustion and the administrator can not watch entries temporary. How to reproduce Submit the Form which is made by Sureforms plugin, an...
Astra Linux – Vulnerability in Redis
Valkey is a distributed key-value database. Prior to versions 9.0.2, 8.1.6, 8.0.7, and 7.2.12, a malicious user could use scripting commands to inject arbitrary information into the response stream for a given client, potentially corrupting or returning tampered data to other users on the same...
Astra Linux – Vulnerability in Consul
The HashiCorp Consul and Consul Enterprise versions up to 1.9.4 had a key-value KV raw mode that was vulnerable to cross-site scripting attacks. This issue was fixed in versions 1.9.5, 1.8.10, and 1.7.14...
Astra Linux – vulnerability in linux-5.10, linux-6.1, linux, linux-5.15
In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: util: Avoid accessing a ringbuffer not initialized yet If the KVP or VSS daemon starts before the VMBus channel’s ringbuffer is fully initialized, we can trigger the following panic: hvutils: Registering HyperV Utili...
CVE-2026-42093 Redash: SQL Injection via Query Results parameterized query substitution
Redash is a package for data visualization and sharing. From versions after 8.0.0 until 26.9.0, the Query Results query runner in redash/queryrunner/queryresults.py accepts paramqueryNkey=value parameters and passed attacker-controlled values to replacequeryparameters for raw substitution into a...
EUVD-2026-101515
Redash is a package for data visualization and sharing. From versions after 8.0.0 until 26.9.0, the Query Results query runner in redash/queryrunner/queryresults.py accepts paramqueryNkey=value parameters and passed attacker-controlled values to replacequeryparameters for raw substitution into a...
CVE-2026-42093: Improper Neutralization of Special Elements used in an SQL Command
Redash is a package for data visualization and sharing. From versions after 8.0.0 until 26.9.0, the Query Results query runner in redash/queryrunner/queryresults.py accepts paramqueryNkey=value parameters and passed attacker-controlled values to replacequeryparameters for raw substitution into a...
CLEANSTART-2026-CG80075 etcd is a distributed key-value store for the data of a distributed system
CVE-2026-73500 affects multiple packages. etcd is a distributed key-value store for the data of a distributed system. See references for individual vulnerability details...
CVE-2026-76280: Incorrect Permission Assignment for Critical Resource
In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, and Splunk Secure Gateway versions below 3.10.11, 3.9.25, and 3.8.72, an authenticated user who does not hold the "admin" or "scadmin" Splunk roles could modify Splunk Secure Gateway alert and mobile-device recipient data in...
CLEANSTART-2026-AZ15466 etcd is a distributed key-value store for the data of a distributed system
Security vulnerability affects the cortex package. etcd is a distributed key-value store for the data of a distributed system...
CLEANSTART-2026-DG14029 etcd is a distributed key-value store for the data of a distributed system
Multiple security vulnerabilities affect the eks-distro-kube-apiserver package. etcd is a distributed key-value store for the data of a distributed system. See references for individual vulnerability details...
[SECURITY] Fedora 45 Update: valkey-9.1.2-1.fc45
Valkey is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, sets and sorted sets. You can run atomic operations on these types, like appending to a string; incrementing the value in a hash; pushing to a list; computing s...
[SECURITY] Fedora 43 Update: valkey-8.1.10-1.fc43
Valkey is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, sets and sorted sets. You can run atomic operations on these types, like appending to a string; incrementing the value in a hash; pushing to a list; computing s...
CLEANSTART-2026-PX76402 etcd is a distributed key-value store for the data of a distributed system
Multiple security vulnerabilities affect the kubernetes package. etcd is a distributed key-value store for the data of a distributed system. See references for individual vulnerability details...
Important: redis:6 security update
Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set. You can persist it either by dumping the data set to disk every once in a while, ...
[SECURITY] Fedora 44 Update: valkey-9.0.6-1.fc44
Valkey is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, sets and sorted sets. You can run atomic operations on these types, like appending to a string; incrementing the value in a hash; pushing to a list; computing s...
valkey: Valkey: Remote code execution via use-after-free in stream deserialization
A flaw was found in Valkey, a distributed key-value database. A remote attacker could exploit a use-after-free vulnerability in the RESTORE command. This occurs when a malformed data stream is processed during stream deserialization, causing a shared resource to be improperly managed. If...
CLSA-2026-1788001146 python3.11: Fix of CVE-2026-0864
CVE-2026-0864: normalize CR and CRLF line endings when configparser writes multi-line values, preventing key/value injection into the written file...
Fortigate syslog message parser can be exploited to modify or delete fields from the original message
Impact A security issue has been identified in Graylog affecting the parsing of syslog messages that use a key-value format, such as those generated by Fortigate devices. The vulnerability allows attackers to overwrite individual message fields, or to produce invalid messages which Graylog will...