This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will b ...
Continue Reading
February 14, 2023
A vulnerability classified as critical has been found in EasyNAS 1.1.0. Affected is the function system of the file /backup.pl. The manipulation leads to os command injection. It is possible to launch ...
Continue Reading
February 14, 2023
In Splunk Add-on Builder (AoB) versions below 4.1.2 and the Splunk CloudConnect SDK versions below 3.1.3, requests to third-party APIs through the REST API Modular Input incorrectly revert to using HT ...
Continue Reading
February 14, 2023
In Splunk Enterprise versions below 8.1.13, 8.2.10, and 9.0.4, the âsendemailâ REST API endpoint lets any authenticated user send an email as the Splunk instance. The endpoint is now restric ...
Continue Reading
February 14, 2023
In Splunk Enterprise versions below 8.1.13, 8.2.10, and 9.0.4, a View allows for Cross-Site Scripting (XSS) in an extensible mark-up language (XML) View through the âlayoutPanelâ attribute i ...
Continue Reading
February 14, 2023
In Splunk Enterprise versions below 8.1.13, 8.2.10, and 9.0.4, the âmapâ search processing language (SPL) command lets a search [bypass SPL safeguards for risky commands](https://docs.splunk ...
Continue Reading
February 14, 2023
In Splunk Enterprise versions below 8.1.13, 8.2.10, and 9.0.4, an improperly-formatted âINGEST_EVALâ parameter in a [Field Transformation](https://docs.splunk.com/Documentation/Splunk/latest ...
Continue Reading
February 14, 2023
In Splunk Enterprise versions below 8.1.13, 8.2.10, and 9.0.4, the âsearch_listenerâ parameter in a search allows for a blind server-side request forgery (SSRF) by an authenticated user. The ...
Continue Reading
February 14, 2023
Back to Main
