https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 18:14:46 +0000 https://cve.radiocsirt.org/vuln/bdu:2024-05270 bdu:2024-05270 https://cve.radiocsirt.org/vuln/bdu:2024-05270 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0535 certfr-2024-avi-0535 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0535 https://cve.radiocsirt.org/vuln/cnvd-2024-34271 cnvd-2024-34271 https://cve.radiocsirt.org/vuln/cnvd-2024-34271 https://cve.radiocsirt.org/vuln/euvd-2026-219845 EUVD-2026-219845 https://cve.radiocsirt.org/vuln/euvd-2026-219845 https://cve.radiocsirt.org/vuln/fkie_cve-2024-36997 <p>In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.1.2312, an admin user could store and execute arbitrary JavaScript code in the browser context of another Splunk user through the conf-web/settings REST endpoint. This could potentially cause a persistent cross-site scripting (XSS) exploit.</p> <p>In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.1.2312, an admin user could store and execute arbitrary JavaScript code in the browser context of another Splunk user through the conf-web/settings REST endpoint. This could potentially cause a persistent cross-site scripting (XSS) exploit.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-36997 https://cve.radiocsirt.org/vuln/ghsa-qmqh-r82r-6q87 <p>In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.1.2312, an admin user could store and execute arbitrary JavaScript code in the browser context of another Splunk user through the conf-web/settings REST endpoint. This could potentially cause a persistent cross-site scripting (XSS) exploit.</p> <p>In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.1.2312, an admin user could store and execute arbitrary JavaScript code in the browser context of another Splunk user through the conf-web/settings REST endpoint. This could potentially cause a persistent cross-site scripting (XSS) exploit.</p> https://cve.radiocsirt.org/vuln/ghsa-qmqh-r82r-6q87 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1494 <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Splunk Enterprise ausnutzen, um beliebigen Programmcode auszuführen, einen Cross-Site-Scripting-Angriff durchzuführen, mehrere Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren und vertrauliche Informationen preiszugeben</p> <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Splunk Enterprise ausnutzen, um beliebigen Programmcode auszuführen, einen Cross-Site-Scripting-Angriff durchzuführen, mehrere Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren und vertrauliche Informationen preiszugeben</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1494