https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 10:57:09 +0000 https://cve.radiocsirt.org/vuln/bdu:2024-05274 bdu:2024-05274 https://cve.radiocsirt.org/vuln/bdu:2024-05274 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0535 certfr-2024-avi-0535 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0535 https://cve.radiocsirt.org/vuln/cnvd-2024-34262 cnvd-2024-34262 https://cve.radiocsirt.org/vuln/cnvd-2024-34262 https://cve.radiocsirt.org/vuln/euvd-2026-219828 EUVD-2026-219828 https://cve.radiocsirt.org/vuln/euvd-2026-219828 https://cve.radiocsirt.org/vuln/fkie_cve-2024-36987 <p>In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.1.2312.200, an authenticated, low-privileged user who does not hold the admin or power Splunk roles could upload a file with an arbitrary extension using the indexing/preview REST endpoint.</p> <p>In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.1.2312.200, an authenticated, low-privileged user who does not hold the admin or power Splunk roles could upload a file with an arbitrary extension using the indexing/preview REST endpoint.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-36987 https://cve.radiocsirt.org/vuln/ghsa-536f-3wcm-q222 <p>In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.1.2312.200, an authenticated, low-privileged user who does not hold the admin or power Splunk roles could upload a file with an arbitrary extension using the indexing/preview REST endpoint.</p> <p>In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.1.2312.200, an authenticated, low-privileged user who does not hold the admin or power Splunk roles could upload a file with an arbitrary extension using the indexing/preview REST endpoint.</p> https://cve.radiocsirt.org/vuln/ghsa-536f-3wcm-q222 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1494 <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Splunk Enterprise ausnutzen, um beliebigen Programmcode auszuführen, einen Cross-Site-Scripting-Angriff durchzuführen, mehrere Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren und vertrauliche Informationen preiszugeben</p> <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Splunk Enterprise ausnutzen, um beliebigen Programmcode auszuführen, einen Cross-Site-Scripting-Angriff durchzuführen, mehrere Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren und vertrauliche Informationen preiszugeben</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1494