13 matches found
CVE-2026-76269
Splunk Enterprise versions prior to 10.4.3, 10.2.7, 10.0.10, and 9.4.15 are vulnerable to an improper access control flaw in its REST API . The vulnerability occurs because the API fails to fully validate job ownership when processing a user-controlled job identifier. Consequently, a user without...
CVE-2026-76310: Improper Access Control
In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, an unauthenticated user who has an embedded report token could download the associated search job dispatch archive, recover session material, and use it to access all relevant data available to the report owner and affect...
CVE-2025-11584
A vulnerability has been found in code-projects Online Job Search Engine 1.0. The affected element is an unknown function of the file /searchjob.php. The manipulation of the argument txtspecialization leads to sql injection. Remote exploitation of the attack is possible. The exploit has been...
EUVD-2017-8732
Malware in sbrugna...
EUVD-2023-27036
Malicious code in bioql PyPI...
EUVD-2025-32029
Malicious code in bioql PyPI...
CVE-2025-20366
In Splunk Enterprise versions below 9.4.4, 9.3.6, and 9.2.8, and Splunk Cloud Platform versions below 9.3.2411.111, 9.3.2408.119, and 9.2.2406.122, a low-privileged user that does not hold the admin or power Splunk roles could access sensitive search results if Splunk Enterprise runs an...
Splunk Cloud Platform和Splunk Enterprise 访问控制错误漏洞
Splunk Cloud Platform and Splunk Enterprise are both products of Splunk Corporation, U.S.A. Splunk Cloud Platform is a powerful data collection, processing, and analytics service.Splunk Enterprise is a suite of data collection and analytics software. An access control error vulnerability exists i...
PT-2025-40269
Name of the Vulnerable Software and Affected Versions Splunk Enterprise versions prior to 9.4.4 Splunk Enterprise versions prior to 9.3.6 Splunk Enterprise versions prior to 9.2.8 Splunk Cloud Platform versions prior to 9.3.2411.111 Splunk Cloud Platform versions prior to 9.3.2408.119 Splunk Clou...
UBUNTU-CVE-2025-54310
qBittorrent before 5.1.2 does not prevent access to a local file that is referenced in a link URL. This affects rsswidget.cpp and searchjobwidget.cpp...
Design/Logic Flaw
In Splunk Enterprise versions below 8.1.13, 8.2.10, and 9.0.4, the ‘pivot’ search processing language SPL command lets a search bypass SPL safeguards for risky commands using a saved search job. The vulnerability requires an authenticated user to craft the saved job and a higher privileged user t...
FS Care Clone SQL Injection Vulnerability
FS Care Clone is a PHP and MySQL based online booking website script for community services. The script supports online search and booking of babysitting, senior care and housekeeping services. A SQL injection vulnerability exists in FS Care Clone version 1.0. The vulnerability can be exploited t...