1162946 matches found
CVE-2026-76334
creationtimestamp| type| source ---|---|--- 2026-08-20 04:46:32+00:00| seen| https://www.hkcert.org/security-bulletin/splunk-products-multiple-vulnerabilities20260820...
CVE-2026-76323
creationtimestamp| type| source ---|---|--- 2026-08-20 04:46:07+00:00| seen| https://www.hkcert.org/security-bulletin/splunk-products-multiple-vulnerabilities20260820...
CVE-2026-76314
creationtimestamp| type| source ---|---|--- 2026-08-20 04:45:46+00:00| seen| https://www.hkcert.org/security-bulletin/splunk-products-multiple-vulnerabilities20260820 2026-08-21 22:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mtmt5dzkjz2y...
CVE-2026-44979 vulnerabilities
Vulnerabilities for packages: opensearch-dashboards...
EUVD-2026-62937
In Nmap Scanner versions below 3.0.15, a user who holds a role that can edit, create, or run playbooks in Splunk SOAR could run the scan network action in a Safe Mode playbook while that action is listed as read-only, which could allow for command execution or other changes on a target system...
EUVD-2026-62897
In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, an unauthenticated user could trick an authenticated user into opening a crafted link to Analytics Workspace. When the authenticated user opens the link, Splunk Enterprise runs attacker-controlled Search Processing Language S...
EUVD-2026-63133
In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who does not hold the "admin" or "power" Splunk roles could store a dashboard view that runs JavaScript in the browser of another user who opens it and hovers over a sparkline table cell, allowing for access to all...
EUVD-2026-63131
In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who holds the "power" Splunk role could create a malicious Splunk Web tour and cause arbitrary JavaScript to run in the browser of another user when that user opens a crafted tour link. The JavaScript runs in the brows...
PT-2026-78967
Name of the Vulnerable Software and Affected Versions Advance Product Search versions prior to 1.4.9 Description An unauthenticated Cross Site Scripting XSS issue exists, which allows an attacker to execute malicious scripts in the browser of a user by injecting code into a web page...
PT-2026-78966
Unauthenticated Cross Site Scripting XSS in SmartSMTP = 1.2.0 versions...
PT-2026-78964
Unauthenticated Cross Site Scripting XSS in GeoDirectory = 2.8.173 versions...
PT-2026-78955
Unauthenticated Cross Site Scripting XSS in Tagembed = 7.4 versions...
PT-2026-78970
Unauthenticated Cross Site Scripting XSS in Aora = 1.3.19 versions...
PT-2026-78972
Unauthenticated Cross Site Scripting XSS in Podlove Podcast Publisher = 4.5.4 versions...
PT-2026-78961
Unauthenticated Cross Site Scripting XSS in B2BKing Premium = 5.6.07 versions...
PT-2026-78963
Subscriber Cross Site Scripting XSS in Media LIbrary Assistant = 3.39 versions...
PT-2026-78951
Unauthenticated Cross Site Scripting XSS in JetEngine = 3.8.14.1 versions...
PT-2026-78971
Unauthenticated Cross Site Scripting XSS in SEO Plugin by Squirrly SEO = 14.2.2 versions...