Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 22:06:02 +0000 bdu:2024-08036 https://cve.radiocsirt.org/vuln/bdu:2024-08036 bdu:2024-08036 https://cve.radiocsirt.org/vuln/bdu:2024-08036 certfr-2024-avi-0878 — De multiples vulnérabilités ont été découvertes dans les produits Splunk. Certaines d'entre elles permettent à un attaq… https://cve.radiocsirt.org/vuln/certfr-2024-avi-0878 certfr-2024-avi-0878 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0878 EUVD-2026-219830 https://cve.radiocsirt.org/vuln/euvd-2026-219830 EUVD-2026-219830 https://cve.radiocsirt.org/vuln/euvd-2026-219830 fkie_cve-2024-45733 https://cve.radiocsirt.org/vuln/fkie_cve-2024-45733 <p>In Splunk Enterprise for Windows versions below 9.2.3 and 9.1.6, a low-privileged user that does not hold the &#34;admin&#34; or &#34;power&#34; Splunk roles could perform a Remote Code Execution (RCE) due to an insecure session storage configuration.</p> <p>In Splunk Enterprise for Windows versions below 9.2.3 and 9.1.6, a low-privileged user that does not hold the &#34;admin&#34; or &#34;power&#34; Splunk roles could perform a Remote Code Execution (RCE) due to an insecure session storage configuration.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-45733 GHSA-f98v-q2j5-v4qc https://cve.radiocsirt.org/vuln/ghsa-f98v-q2j5-v4qc <p>In Splunk Enterprise for Windows versions below 9.2.3 and 9.1.6, a low-privileged user that does not hold the &#34;admin&#34; or &#34;power&#34; Splunk roles could perform a Remote Code Execution (RCE) due to an insecure session storage configuration.</p> <p>In Splunk Enterprise for Windows versions below 9.2.3 and 9.1.6, a low-privileged user that does not hold the &#34;admin&#34; or &#34;power&#34; Splunk roles could perform a Remote Code Execution (RCE) due to an insecure session storage configuration.</p> https://cve.radiocsirt.org/vuln/ghsa-f98v-q2j5-v4qc WID-SEC-W-2024-3168 — Splunk Enterprise: Mehrere Schwachstellen https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3168 <p>Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Splunk Splunk Enterprise ausnutzen, um beliebigen Code auszuführen, einen Cross-Site-Scripting-Angriff durchzuführen, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand zu erzeugen.</p> <p>Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Splunk Splunk Enterprise ausnutzen, um beliebigen Code auszuführen, einen Cross-Site-Scripting-Angriff durchzuführen, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand zu erzeugen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3168