Splunk

Splunk Enterprise Missing Authentication for Critical Function Vulnerability

In CISA KEV

HTTP/2 Rapid Reset Attack Vulnerability

In CISA KEV

OpenSSL Information Disclosure Vulnerability

In CISA KEV

Remote Code Execution through Deserialization of Untrusted Data in Splunk Secure Gateway

NGINX ngx_http_dav_module vulnerability

Unbounded memory growth with session handling in TLSv1.3

NGINX ngx_http_rewrite_module vulnerability

Misuse of connection.serverAuthenticate may cause authorization bypass in golang.org/x/crypto

Heap Use-After-Free in the PKCS7_verify() Function

NGINX ngx_http_rewrite_module vulnerability

‘edit_user’ Capability Privilege Escalation

Immutable-js: Prototype Pollution

Missing Authentication for Critical Function in the Patroni REST API in Splunk Enterprise

Https://github.com/curl/curl: Business Logic Errors

Reflected Cross-Site Scripting via the radio template in Splunk Enterprise

Splunk Enterprise: Improper Access Control

Remote code execution (RCE) in Splunk Enterprise through Insecure XML Parsing

gRPC-Go has an authorization bypass via missing leading slash in :path

Path Traversal in Splunk App for Lookup File Editing

Remote Code Execution through dashboard PDF generation component in Splunk Enterprise

Splunk Enterprise: Function Call With Incorrectly Specified Argument Value

Google Chrome: Use-After-Free

Pypa Setuptools: Path Traversal

Https://github.com/curl/curl: Use After Free

Https://github.com/curl/curl: Exposure of Sensitive Information to an Unauthorized Actor