2026

In Splunk SOAR versions below 8.7.0, a user that holds a role with the Users and Roles view permission could use the Rep

In Splunk SOAR versions below 8.7.0, a user that has the "Observer" role could use query filters in the Representational

In Splunk SOAR versions below 8.7.0, an authenticated user who does not hold a role with permission to view apps could d

In Splunk SOAR versions below 8.7.0, an authenticated user who does not hold a role with permission to edit Automation B

In Splunk SOAR versions below 8.7.0, a user that holds a role with the install_apps capability could store attacker-cont

As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive int

As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive int

As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive int

As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive int

In Splunk Enterprise versions below 10.4.4 and 10.2.8, a user who does not hold the "admin" or "power" Splunk roles coul

In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, an unauthenticated user could trick a user that

In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, a user who does not hold the "admin" or "power"

In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, and Splunk Secure Gateway versions below 3.10.1

In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, a user who does not hold the "admin" or "power"

In Splunk Enterprise versions below 10.4.3, 10.2.8, 10.0.11, and 9.4.16, a user that holds a role with the edit_manager_

In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, and Splunk Secure Gateway versions below 3.10.1

In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, a user that holds a role with the schedule_sear

In Splunk Enterprise versions below 10.4.4, 10.2.8, and 10.0.11, an unauthenticated user could send repeated requests to

In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, a user who does not hold the "admin" or "power"

In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, an unauthenticated user could send a single cra

In Splunk Enterprise versions below 10.4.4, a user that holds a role with the preview_data_management_pipeline capabilit

A weakness has been identified in oretnom23 php-travel-agency-system. This issue affects some unknown processing of the

A vulnerability was identified in oretnom23 php-travel-agency-system. This affects an unknown part of the file admin/del

A vulnerability was determined in oretnom23 php-travel-agency-system. Affected by this issue is some unknown functionali

Missing Authentication for Critical Function (CWE-306) and Insufficiently Protected Credentials (CWE-522) in the control

A sensitive information disclosure vulnerability in the cloud-client daemon of Deco BE63 allows authenticated attackers

Net::LibSSH versions before 0.004 for Perl authenticate to an unverified server because connect never checks the host ke

Rex versions through 1.16.1 for Perl accept an unknown SSH host key for remote rsync transfers because sync hardcodes St

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE

Laravel is a web application framework. Prior to 12.68.0 and 13.29.0, TokenGuard configured as a standard token-based AP

Laravel is a web application framework. From 12.45.0 until 12.68.0 and 13.27.0, crafted relationship inclusion on a read

Pillow is a Python imaging library. From 11.2.1 until 13.0.0, Arrow export assumes that an image's rows are tightly cont

A security vulnerability has been detected in itsourcecode Online Cake Ordering System 1.0. Affected is an unknown funct

A weakness has been identified in TOTOLINK EX200 5.2.3c.7200. This impacts the function setWiFiAclAddConfig of the file

A security flaw has been discovered in TOTOLINK EX200 5.2.3c.7200. This affects the function setStaticDhcpConfig of the

A vulnerability was determined in itsourcecode Online Cake Ordering System 1.0. The affected element is an unknown funct

Robots::Validate versions from 0.4.3 before 0.4.10 for Perl report clients as imposter robots when User-Agent matcher st

Pillow is a Python imaging library. From 9.4.0 until 13.0.0, ImagingJpegEncode() in src/libImaging/JpegEncode.c can call

Pillow is a Python imaging library. Prior to 13.0.0 on Windows, src/PIL/WmfImagePlugin.py passes unchecked 32-bit WMF or

Pillow is a Python imaging library. From 11.0.0 until 13.0.0, Exif.load() in src/PIL/Image.py repeatedly slices the rema

Pillow is a Python imaging library. Prior to 13.0.0, the TarIO initializer in src/PIL/TarIO.py accepts a negative octal

Pillow is a Python imaging library. Prior to 13.0.0, PILfont text-width accumulation in src/_imaging.c checks positive g

Pillow is a Python imaging library. From 5.1.0 until 13.0.0, PdfParser.linearize_page_tree() in src/PIL/PdfParser.py tre

Pillow is a Python imaging library. From 11.0.0 until 13.0.0, multi-frame loaders can retain an ImagingCore allocation c

Pillow is a Python imaging library. From 9.1.0 until 13.0.0, BmpRleDecoder.decode() in src/PIL/BmpImagePlugin.py permits

Pillow is a Python imaging library. Prior to 13.0.0, SpiderImageFile.seek() in src/PIL/SpiderImagePlugin.py reparses a l

Pillow is a Python imaging library. Prior to 13.0.0, MpoImageFile.seek() and DcxImageFile.seek() reparse later MPO or DC

There exists a screen capture endpoint in vCast media streaming service in ViewSonic ViewBoard unknown allows a remote,

TastyIgniter through 4.4.5 contain a PHP object injection vulnerability that allows authenticated administrators to achi

The system certificate authority (CA) store in Red Hat products, distributed via ca-certificates RPM packages, included