https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 12:48:29 +0000 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0142 certfr-2023-avi-0142 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0142 https://cve.radiocsirt.org/vuln/euvd-2026-219843 EUVD-2026-219843 https://cve.radiocsirt.org/vuln/euvd-2026-219843 https://cve.radiocsirt.org/vuln/fkie_cve-2023-22936 <p>In Splunk Enterprise versions below 8.1.13, 8.2.10, and 9.0.4, the ‘search_listener’ parameter in a search allows for a blind server-side request forgery (SSRF) by an authenticated user. The initiator of the request cannot see the response without the presence of an additional vulnerability within the environment.</p> <p>In Splunk Enterprise versions below 8.1.13, 8.2.10, and 9.0.4, the ‘search_listener’ parameter in a search allows for a blind server-side request forgery (SSRF) by an authenticated user. The initiator of the request cannot see the response without the presence of an additional vulnerability within the environment.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-22936 https://cve.radiocsirt.org/vuln/ghsa-786j-r97c-7r7v <p>In Splunk Enterprise versions below 8.1.13, 8.2.10, and 9.0.4, the ‘search_listener’ parameter in a search allows for a blind server-side request forgery (SSRF) by an authenticated user. The initiator of the request cannot see the response without the presence of an additional vulnerability within the environment.</p> <p>In Splunk Enterprise versions below 8.1.13, 8.2.10, and 9.0.4, the ‘search_listener’ parameter in a search allows for a blind server-side request forgery (SSRF) by an authenticated user. The initiator of the request cannot see the response without the presence of an additional vulnerability within the environment.</p> https://cve.radiocsirt.org/vuln/ghsa-786j-r97c-7r7v https://cve.radiocsirt.org/vuln/gsd-2023-22936 gsd-2023-22936 https://cve.radiocsirt.org/vuln/gsd-2023-22936 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0395 <p>Ein Angreifer kann mehrere Schwachstellen in Splunk Splunk Enterprise ausnutzen, um vertrauliche Informationen offenzulegen, Sicherheitsmaßnahmen zu umgehen, einen Denial-of-Service-Zustand zu verursachen, Daten zu manipulieren und einen Cross-Site-Scripting-Angriff durchzuführen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Splunk Splunk Enterprise ausnutzen, um vertrauliche Informationen offenzulegen, Sicherheitsmaßnahmen zu umgehen, einen Denial-of-Service-Zustand zu verursachen, Daten zu manipulieren und einen Cross-Site-Scripting-Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0395