85097 matches found
CVE-2026-76347: Server-Side Request Forgery (SSRF)
In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, and Splunk Secure Gateway versions below 3.10.9, 3.9.23, and 3.8.70, a user who does not hold the "admin" or "power" Splunk roles could use Server-Side Request Forgery SSRF in report notifications to send system-authenticated...
PT-2026-78738
Name of the Vulnerable Software and Affected Versions Splunk Enterprise versions prior to 10.4.2 Splunk Enterprise versions prior to 10.2.6 Splunk Enterprise versions prior to 10.0.9 Splunk Enterprise versions prior to 9.4.14 Description An unauthenticated user possessing an embedded report token...
CVE-2026-76311: Improper Access Control
In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, an unauthenticated user who has an embedded report token could download the dispatch archive for an embedded report search job and use exposed session material to access all relevant data and affect system integrity on the...
PT-2026-78774
Name of the Vulnerable Software and Affected Versions Splunk Enterprise versions prior to 10.4.2 Splunk Enterprise versions prior to 10.2.6 Splunk Enterprise versions prior to 10.0.9 Splunk Enterprise versions prior to 9.4.14 Splunk Secure Gateway versions prior to 3.10.9 Splunk Secure Gateway...
CVE-2026-60958
creationtimestamp| type| source ---|---|--- 2026-08-18 22:11:52+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtfadgo37323 2026-08-19 01:00:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtfjqb3fu22t 2026-08-19 17:16:05+00:00| seen|...
CVE-2026-60702
creationtimestamp| type| source ---|---|--- 2026-08-18 22:09:12+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtfa6pevow25 2026-08-18 23:30:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtfepcqxnr2u 2026-08-19 02:41:57+00:00| seen|...
CVE-2026-70877
A CVSS 8.8 HIGH-severity flaw in Oracle Hyperion Data Relationship Management 11.2.25.0.000 (Access and security component) allows low-privileged, network-authenticated attackers via HTTP to fully compromise the application (C/H/I/A all High). Oracle's August 2026 CPU advisory is the patch refere...
CVE-2026-61696 Forem: Stored XSS in Admin Abuse Report Rendering
Forem is open source software for building communities. In versions before commit 92eacd16a82cf9007ba8e16a2258b42e3b53ca9c, a malicious value submitted through feedbackmessagemessage is stored without sanitization and rendered in app/views/admin/feedbackmessages/feedbackmessage.html.erb through...
CVE-2026-61696
Forem versions before commit 92eacd16a82cf9007ba8e16a2258b42e3b53ca9c render unsanitized feedback_message[message] via raw() in app/views/admin/feedback_messages/_feedback_message.html.erb, enabling stored XSS when an admin views an abuse report. The unauthenticated FeedbackMessagesController acc...
CVE-2026-61696 Forem: Stored XSS in Admin Abuse Report Rendering
Forem is open source software for building communities. In versions before commit 92eacd16a82cf9007ba8e16a2258b42e3b53ca9c, a malicious value submitted through feedbackmessagemessage is stored without sanitization and rendered in app/views/admin/feedbackmessages/feedbackmessage.html.erb through...
CVE-2026-13242
creationtimestamp| type| source ---|---|--- 2026-08-18 16:39:14+00:00| seen| https://bsky.app/profile/cyfar.ca/post/3mtenqor7h222...
CVE-2026-45124
MyBB is free and open source forum software. Prior to 1.8.40, the Mod CP Report Center does not check permissions consistently, allowing moderators without report-management permission to mark reports as resolved. The modcp.php?action=doreports Mark Selected as Read handler is reachable with...
EUVD-2026-61018
MyBB is free and open source forum software. Prior to 1.8.40, the Mod CP Report Center does not check permissions consistently, allowing moderators without report-management permission to mark reports as resolved. The modcp.php?action=doreports Mark Selected as Read handler is reachable with...
CVE-2026-45124 MyBB: Mod CP report resolution missing authorization
MyBB is free and open source forum software. Prior to 1.8.40, the Mod CP Report Center does not check permissions consistently, allowing moderators without report-management permission to mark reports as resolved. The modcp.php?action=doreports Mark Selected as Read handler is reachable with...
CVE-2026-45124
MyBB (open-source forum software) prior to 1.8.40 contains an authorization flaw in the Mod CP Report Center . The modcp.php?action=do_reports "Mark Selected as Read" handler is reachable with only the canmodcp permission, even when the moderator lacks canmanagereportedcontent or canmanagereporte...
CVE-2026-45124
MyBB is free and open source forum software. Prior to 1.8.40, the Mod CP Report Center does not check permissions consistently, allowing moderators without report-management permission to mark reports as resolved. The modcp.php?action=doreports Mark Selected as Read handler is reachable with...
CVE-2026-73381
creationtimestamp| type| source ---|---|--- 2026-08-18 15:40:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtekgvdegp2j 2026-08-18 16:10:31+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtem5ds6v52e...
MINI-6VHP-QJHR-W7HM
Bulletin has no description...