Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium6.6In Splunk Enterprise versions below 10.2.2, 10.0.5, 9.4.10, and 9.3.11, and Splunk Cloud Platform versions below 10.4.2603.0, 10.3.2512.6, 10.2.2510.10, 10.1.2507.20,…EPSS 0.2%Apr 15, 2026
- Medium5.4In Splunk Enterprise versions below 10.2.1 and 10.0.4, and Splunk Cloud Platform versions below 10.2.2510.5, 10.1.2507.16, and 10.0.2503.12, a low-privileged user that…EPSS 0.2%Mar 11, 2026
- Medium6.5In Splunk Enterprise versions below 10.2.1, 10.0.4, 9.4.9, and 9.3.10, and Splunk Cloud Platform versions below 10.2.2510.7, 10.1.2507.17, 10.0.2503.12, and 9.3.2411.1…EPSS 0.2%Mar 11, 2026
- Medium6.5In Splunk Enterprise versions below 10.2.0, 10.0.3, 9.4.9, and 9.3.10, and Splunk Cloud Platform versions below 10.2.2510.5, 10.1.2507.16, 10.0.2503.11, and 9.3.2411.1…EPSS 0.2%Mar 11, 2026
- High7.2In Splunk Enterprise versions below 10.2.0, 10.0.4, 9.4.9, and 9.3.10, and Splunk Cloud Platform versions below 10.2.2510.5, 10.0.2503.12, 10.1.2507.16, and 9.3.2411.1…EPSS 0.5%Mar 11, 2026
- Medium6.3In Splunk Enterprise versions below 10.2.0, 10.0.3, 9.4.9, and 9.3.9, and Splunk Cloud Platform versions below 10.2.2510.4, 10.1.2507.15, 10.0.2503.11, and 9.3.2411.12…EPSS 0.2%Mar 11, 2026
- Medium5.5An authentication bypass vulnerability exists in libcurl prior to v8.0.0 where it reuses a previously established SSH connection despite the fact that an SSH option wa…EPSS 1.5%Mar 30, 2023
- Medium5.9A double free vulnerability exists in libcurl <8.0.0 when sharing HSTS data between separate "handles".EPSS 1.9%Mar 30, 2023
- Medium5.9An authentication bypass vulnerability exists libcurl <8.0.0 in the connection reuse feature which can reuse previously established connections with incorrect user per…EPSS 1.8%Mar 30, 2023
- Medium5.9An authentication bypass vulnerability exists in libcurl <8.0.0 in the FTP connection reuse feature that can result in wrong credentials being used during subsequent transfers.EPSS 1.8%Mar 30, 2023
- High8.8A path traversal vulnerability exists in curl <8.0.0 SFTP implementation causes the tilde (~) character to be wrongly replaced when used as a prefix in the first path…EPSS 2.4%Mar 30, 2023
- High8.8A vulnerability in input validation exists in curl <8.0 during communication using the TELNET protocol may allow an attacker to pass on maliciously crafted user name a…EPSS 2.2%Mar 30, 2023
- Medium6.5An allocation of resources without limits or throttling vulnerability exists in curl <v7.88.0 based on the "chained" HTTP compression algorithms, meaning that a server…EPSS 1.7%Feb 23, 2023
- Medium6.5A cleartext transmission of sensitive information vulnerability exists in curl <v7.88.0 that could cause HSTS functionality to behave incorrectly when multiple URLs ar…EPSS 0.9%Feb 23, 2023
- Critical9.1A cleartext transmission of sensitive information vulnerability exists in curl <v7.88.0 that could cause HSTS functionality fail when multiple URLs are requested serially.EPSS 0.9%Feb 23, 2023
- Medium5.9A use after free vulnerability exists in curl <7.87.0.EPSS 2.7%Feb 9, 2023
- High7.5A vulnerability exists in curl <7.87.0 HSTS check that could be bypassed to trick it to keep using HTTP.EPSS 16.6%Dec 23, 2022
- Medium6.5curl can be told to parse a file for credentials.EPSS 2.7%Dec 5, 2022
- Critical9.8When doing HTTP(S) transfers, libcurl might erroneously use the read callback ( ) to ask for data to send, even when the option has been set, if the same handle previo…EPSS 5.1%Dec 5, 2022
- High8.1curl before 7.86.0 has a double free.EPSS 2.9%Oct 29, 2022
- High7.5In curl before 7.86.0, the HSTS check could be bypassed to trick it into staying with HTTP.EPSS 2.0%Oct 29, 2022
- High7.5SQLite 1.0.12 through 3.39.x before 3.39.2 sometimes allows an array-bounds overflow if billions of bytes are used in a string argument to a C API.EPSS 23.3%Aug 3, 2022
- Medium4.3Using its HSTS support, curl can be instructed to use HTTPS directly insteadof using an insecure clear-text HTTP step even when HTTP is provided in theURL.EPSS 1.4%Jun 2, 2022
- High7.5libcurl would reuse a previously created connection even when a TLS or SSHrelated option had been changed that should have prohibited reuse.libcurl keeps previously us…EPSS 3.1%Jun 2, 2022
- High7.5The curl URL parser wrongly accepts percent-encoded URL separators like '/'when decoding the host name part of a URL, making it a *different* URL usingthe wrong host n…EPSS 2.5%Jun 2, 2022