https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T09:53:19.991209+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2023-avi-0428 certfr-2023-avi-0428 — De multiples vulnérabilités ont été découvertes dans les produits <span class="textit">Splunk</span>. Certaines d'entre… 2026-10-03T09:53:20.080197+00:00 certfr-2023-avi-0428 https://cve.radiocsirt.org/vuln/cnvd-2018-24664 cnvd-2018-24664 2026-10-03T09:53:20.080240+00:00 cnvd-2018-24664 https://cve.radiocsirt.org/vuln/euvd-2026-165333 EUVD-2026-165333 2026-10-03T09:53:20.080256+00:00 EUVD-2026-165333 https://cve.radiocsirt.org/vuln/fkie_cve-2017-16042 fkie_cve-2017-16042 2026-10-03T09:53:20.080276+00:00

Growl adds growl notification support to nodejs. Growl before 1.10.2 does not properly sanitize input before passing it to exec, allowing for arbitrary command execution.

 https://cve.radiocsirt.org/vuln/ghsa-qh2h-chj9-jffq GHSA-qh2h-chj9-jffq — Growl before 1.10.0 vulnerable to Command Injection 2026-10-03T09:53:20.080305+00:00

Affected: npm: growl

Affected versions of `growl` do not properly sanitize input prior to passing it into a shell command, allowing for arbitrary command execution.

## Recommendation

Update to version 1.10.0 or later.

 https://cve.radiocsirt.org/vuln/gsd-2017-16042 gsd-2017-16042 2026-10-03T09:53:20.080330+00:00 gsd-2017-16042 https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-16042 UBUNTU-CVE-2017-16042 2026-10-03T09:53:20.080342+00:00

Affected: Ubuntu:16.04:LTS: node-growl, Ubuntu:18.04:LTS: node-growl

Growl adds growl notification support to nodejs. Growl before 1.10.2 does not properly sanitize input before passing it to exec, allowing for arbitrary command execution.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1350 WID-SEC-W-2023-1350 — Splunk Splunk Enterprise: Mehrere Schwachstellen in Komponenten von Drittanbietern 2026-10-03T09:53:20.080362+00:00

Ein Angreifer kann mehrere Schwachstellen in Splunk Splunk Enterprise in diversen Komponenten von Drittanbietern ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.