https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 10:29:24 +0000 https://cve.radiocsirt.org/vuln/bdu:2024-08791 bdu:2024-08791 https://cve.radiocsirt.org/vuln/bdu:2024-08791 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0878 certfr-2024-avi-0878 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0878 https://cve.radiocsirt.org/vuln/euvd-2026-219861 EUVD-2026-219861 https://cve.radiocsirt.org/vuln/euvd-2026-219861 https://cve.radiocsirt.org/vuln/fkie_cve-2024-45736 <p>In Splunk Enterprise versions below 9.3.1, 9.2.3, and 9.1.6 and Splunk Cloud Platform versions below 9.2.2403.107, 9.1.2312.204, and 9.1.2312.111, a low-privileged user that does not hold the &#34;admin&#34; or &#34;power&#34; Splunk roles could craft a search query with an improperly formatted &#34;INGEST_EVAL&#34; parameter as part of a [Field Transformation](https://docs.splunk.com/Documentation/Splunk/latest/Knowledge/Managefieldtransforms) which could crash the Splunk daemon (splunkd).</p> <p>In Splunk Enterprise versions below 9.3.1, 9.2.3, and 9.1.6 and Splunk Cloud Platform versions below 9.2.2403.107, 9.1.2312.204, and 9.1.2312.111, a low-privileged user that does not hold the &#34;admin&#34; or &#34;power&#34; Splunk roles could craft a search query with an improperly formatted &#34;INGEST_EVAL&#34; parameter as part of a [Field Transformation](https://docs.splunk.com/Documentation/Splunk/latest/Knowledge/Managefieldtransforms) which could crash the Splunk daemon (splunkd).</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-45736 https://cve.radiocsirt.org/vuln/ghsa-wf7c-j44x-2379 <p>In Splunk Enterprise versions below 9.3.1, 9.2.3, and 9.1.6 and Splunk Cloud Platform versions below 9.2.2403.107, 9.1.2312.204, and 9.1.2312.111, a low-privileged user that does not hold the &#34;admin&#34; or &#34;power&#34; Splunk roles could craft a search query with an improperly formatted &#34;INGEST_EVAL&#34; parameter as part of a [Field Transformation](https://docs.splunk.com/Documentation/Splunk/latest/Knowledge/Managefieldtransforms) which could crash the Splunk daemon (splunkd).</p> <p>In Splunk Enterprise versions below 9.3.1, 9.2.3, and 9.1.6 and Splunk Cloud Platform versions below 9.2.2403.107, 9.1.2312.204, and 9.1.2312.111, a low-privileged user that does not hold the &#34;admin&#34; or &#34;power&#34; Splunk roles could craft a search query with an improperly formatted &#34;INGEST_EVAL&#34; parameter as part of a [Field Transformation](https://docs.splunk.com/Documentation/Splunk/latest/Knowledge/Managefieldtransforms) which could crash the Splunk daemon (splunkd).</p> https://cve.radiocsirt.org/vuln/ghsa-wf7c-j44x-2379 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3168 <p>Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Splunk Splunk Enterprise ausnutzen, um beliebigen Code auszuführen, einen Cross-Site-Scripting-Angriff durchzuführen, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand zu erzeugen.</p> <p>Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Splunk Splunk Enterprise ausnutzen, um beliebigen Code auszuführen, einen Cross-Site-Scripting-Angriff durchzuführen, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand zu erzeugen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3168