304156 matches found
CVE-2026-76316 Stored SPL Injection through Deployment Server Broker Registration in Splunk Enterprise
In Splunk Enterprise versions below 10.4.1, 10.2.5, 10.0.9, and 9.4.14, an unauthenticated user who can reach the Splunk management port could store a Search Processing Language SPL pipeline that runs when an administrator opens the Add Data forwarder workflow. The SPL pipeline could access all...
CVE-2026-76316
An unauthenticated remote attacker who can reach the Splunk management port can register a crafted Deployment Server client identifier, which is then inserted into dispatched searches without special-character sanitization. When an administrator opens the Add Data forwarder workflow, the injected...
CVE-2026-53549
Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. Prior to 2.3.2, the POST /host/db/proxy/test endpoint accepts the singleProxy, proxyChain, and testTarget request fields without validating their destination addresses. The...
Moderate: Red Hat Security Advisory: java-17-openjdk security update
An update for java-17-openjdk is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.6 Telecommunications Update Service, Red Hat Enterprise Linux 8.4 Advanced Mission...
OpenJDK: Enhance TLS server (2026-08 Security Update)
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JSSE. Supported versions that are affected are Oracle Java SE: 8u501, 11.0.32, 17.0.20, 21.0.12, 25.0.4, 26.0.2; Oracle GraalVM for JDK: 17.0.20 and 21.0.12; Oracle...
CVE-2026-68555
Coturn is a free open source implementation of TURN and STUN Server. In 4.15.0, an authenticated TURN user can repeatedly resume one allocation from fresh UDP 5-tuples without completing a handoff when the server enables --mobility. mobilebegintransition in src/server/nsturnserver.c disarms each...
CVE-2026-53957
creationtimestamp| type| source ---|---|--- 2026-08-19 20:35:15+00:00| published-proof-of-concept| https://github.com/contentful/contentful-mcp-server/security/advisories/GHSA-2xhg-73j7-rrgx...
CVE-2026-54689
creationtimestamp| type| source ---|---|--- 2026-08-19 20:35:08+00:00| published-proof-of-concept| https://github.com/ihor-sokoliuk/mcp-searxng/security/advisories/GHSA-wppf-h75h-6pm6...
EUVD-2026-62855
Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. Prior to 2.3.2, the POST /host/db/proxy/test endpoint accepts the singleProxy, proxyChain, and testTarget request fields without validating their destination addresses. The...
CVE-2026-61634 vulnerabilities
Vulnerabilities for packages: conductor-fips, nuxeo, zipkin, druid, traccar, conductor, logstash-fips, cassandra-reaper, thingsboard, logstash, traccar-fips...
CVE-2026-63335 vulnerabilities
Vulnerabilities for packages: conductor-fips, nuxeo, zipkin, druid, conductor, logstash-fips, cassandra-reaper, thingsboard, logstash...
GHSA-5M9F-RPHJ-C435 vulnerabilities
Vulnerabilities for packages: conductor-fips, nuxeo, zipkin, druid, traccar, conductor, logstash-fips, cassandra-reaper, thingsboard, logstash, traccar-fips...
CVE-2026-63337 vulnerabilities
Vulnerabilities for packages: conductor-fips, nuxeo, zipkin, druid, traccar, conductor, logstash-fips, cassandra-reaper, thingsboard, logstash, traccar-fips...
CVE-2026-69219 vulnerabilities
Vulnerabilities for packages: conductor-fips, nuxeo, zipkin, druid, traccar, conductor, logstash-fips, cassandra-reaper, thingsboard, logstash, traccar-fips...
GHSA-6G32-PXV4-2WFJ vulnerabilities
Vulnerabilities for packages: conductor-fips, nuxeo, zipkin, druid, traccar, conductor, logstash-fips, cassandra-reaper, thingsboard, logstash, traccar-fips...
GHSA-PCW8-M77R-2528 vulnerabilities
Vulnerabilities for packages: nextcloud-server...
GHSA-6G32-PXV4-2WFJ vulnerabilities
Vulnerabilities for packages: druid, thingsboard, cassandra-reaper, logstash, zipkin...
GHSA-5XWG-CFVJ-GFF5 vulnerabilities
Vulnerabilities for packages: druid, thingsboard, cassandra-reaper, logstash, zipkin...