https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 15 Oct 2026 17:09:00 +0000 https://cve.radiocsirt.org/vuln/certfr-2022-avi-986 certfr-2022-avi-986 https://cve.radiocsirt.org/vuln/certfr-2022-avi-986 https://cve.radiocsirt.org/vuln/euvd-2026-237719 EUVD-2026-237719 https://cve.radiocsirt.org/vuln/euvd-2026-237719 https://cve.radiocsirt.org/vuln/fkie_cve-2022-43565 <p>In Splunk Enterprise versions below 8.2.9 and 8.1.12, the way that the ‘tstats command handles Javascript Object Notation (JSON) lets an attacker bypass SPL safeguards for risky commands https://docs.splunk.com/Documentation/SplunkCloud/latest/Security/SPLsafeguards . The vulnerability requires the attacker to phish the victim by tricking them into initiating a request within their browser.</p> <p>In Splunk Enterprise versions below 8.2.9 and 8.1.12, the way that the ‘tstats command handles Javascript Object Notation (JSON) lets an attacker bypass SPL safeguards for risky commands https://docs.splunk.com/Documentation/SplunkCloud/latest/Security/SPLsafeguards . The vulnerability requires the attacker to phish the victim by tricking them into initiating a request within their browser.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-43565 https://cve.radiocsirt.org/vuln/ghsa-fw8m-f5g8-v52m <p>In Splunk Enterprise versions below 8.2.9 and 8.1.12, the way that the ‘tstats command handles Javascript Object Notation (JSON) lets an attacker bypass SPL safeguards for risky commands https://docs.splunk.com/Documentation/SplunkCloud/latest/Security/SPLsafeguards . The vulnerability requires the attacker to phish the victim by tricking them into initiating a request within their browser.</p> <p>In Splunk Enterprise versions below 8.2.9 and 8.1.12, the way that the ‘tstats command handles Javascript Object Notation (JSON) lets an attacker bypass SPL safeguards for risky commands https://docs.splunk.com/Documentation/SplunkCloud/latest/Security/SPLsafeguards . The vulnerability requires the attacker to phish the victim by tricking them into initiating a request within their browser.</p> https://cve.radiocsirt.org/vuln/ghsa-fw8m-f5g8-v52m https://cve.radiocsirt.org/vuln/gsd-2022-43565 gsd-2022-43565 https://cve.radiocsirt.org/vuln/gsd-2022-43565 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1950 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Splunk Enterprise ausnutzen, um Code zur Ausführung zu bringen, Sicherheitsvorkehrungen zu umgehen, Informationen offenzulegen, Daten zu manipulieren oder einen Denial of Service zu verursachen. Zur Ausnutzung einiger Schwachstellen ist eine Interaktion des Opfers notwendig.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Splunk Enterprise ausnutzen, um Code zur Ausführung zu bringen, Sicherheitsvorkehrungen zu umgehen, Informationen offenzulegen, Daten zu manipulieren oder einen Denial of Service zu verursachen. Zur Ausnutzung einiger Schwachstellen ist eine Interaktion des Opfers notwendig.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1950