Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 12:48:52 +0000 certfr-2023-avi-0142 — De multiples vulnérabilités ont été corrigées dans <span class="textit">Splunk</span>. Elles permettent à un attaquant… https://cve.radiocsirt.org/vuln/certfr-2023-avi-0142 certfr-2023-avi-0142 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0142 EUVD-2026-223754 https://cve.radiocsirt.org/vuln/euvd-2026-223754 EUVD-2026-223754 https://cve.radiocsirt.org/vuln/euvd-2026-223754 fkie_cve-2023-22938 https://cve.radiocsirt.org/vuln/fkie_cve-2023-22938 <p>In Splunk Enterprise versions below 8.1.13, 8.2.10, and 9.0.4, the ‘sendemail’ REST API endpoint lets any authenticated user send an email as the Splunk instance. The endpoint is now restricted to the ‘splunk-system-user’ account on the local instance.</p> <p>In Splunk Enterprise versions below 8.1.13, 8.2.10, and 9.0.4, the ‘sendemail’ REST API endpoint lets any authenticated user send an email as the Splunk instance. The endpoint is now restricted to the ‘splunk-system-user’ account on the local instance.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-22938 GHSA-f44g-3vj9-vwv9 https://cve.radiocsirt.org/vuln/ghsa-f44g-3vj9-vwv9 <p>In Splunk Enterprise versions below 8.1.13, 8.2.10, and 9.0.4, the ‘sendemail’ REST API endpoint lets any authenticated user send an email as the Splunk instance. The endpoint is now restricted to the ‘splunk-system-user’ account on the local instance.</p> <p>In Splunk Enterprise versions below 8.1.13, 8.2.10, and 9.0.4, the ‘sendemail’ REST API endpoint lets any authenticated user send an email as the Splunk instance. The endpoint is now restricted to the ‘splunk-system-user’ account on the local instance.</p> https://cve.radiocsirt.org/vuln/ghsa-f44g-3vj9-vwv9 gsd-2023-22938 https://cve.radiocsirt.org/vuln/gsd-2023-22938 gsd-2023-22938 https://cve.radiocsirt.org/vuln/gsd-2023-22938 WID-SEC-W-2023-0395 — Splunk Splunk Enterprise: Mehrere Schwachstellen https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0395 <p>Ein Angreifer kann mehrere Schwachstellen in Splunk Splunk Enterprise ausnutzen, um vertrauliche Informationen offenzulegen, Sicherheitsmaßnahmen zu umgehen, einen Denial-of-Service-Zustand zu verursachen, Daten zu manipulieren und einen Cross-Site-Scripting-Angriff durchzuführen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Splunk Splunk Enterprise ausnutzen, um vertrauliche Informationen offenzulegen, Sicherheitsmaßnahmen zu umgehen, einen Denial-of-Service-Zustand zu verursachen, Daten zu manipulieren und einen Cross-Site-Scripting-Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0395