Published file metadata, source observations, indicators, and research history in one bounded catalog.
Sources represented on this page. Publication and observation dates describe the content; successful batch dates describe local collection. A recent batch does not certify complete coverage or current provider availability.
1 sources: 0 stale, 0 needing attention, 0 paused, 1 unverified.
Stale means older than twice the recorded collection interval, with a minimum of one hour; without an interval, the threshold is 24 hours. Cached content remains available while a feed is stale, paused, or unverified.
Improper Neutralization. Splunk addressed multiple internally identified vulnerabilities in Splunk Enterprise versions 10.4.3, 10.2.7, 10.0.10, and 9.4.15. The vulnerabilities are grouped by Common...
First reported Oct 07, 2026 20:46 UTCCatalog metadata updated Oct 08, 2026 03:43 UTCOpen evidence recordExcelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.1.0 to 2.11.0, a Zip64 uncompressed size with the high bit set is converted from uint64 to a negative ...
First reported Oct 07, 2026 18:53 UTCCatalog metadata updated Oct 08, 2026 03:43 UTCOpen evidence recordIn Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, a user who does not hold the "admin" or "power" Splunk roles could use a user-controlled job identifier to access substantia...
First reported Oct 07, 2026 20:46 UTCCatalog metadata updated Oct 08, 2026 03:43 UTCOpen evidence recordThe AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. Prior to 3.0.13 and 2.16.1, Realm.Builder treats a Digest chall...
First reported Oct 07, 2026 21:06 UTCCatalog metadata updated Oct 08, 2026 03:43 UTCOpen evidence recordIn Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, a user who does not hold the "admin" or "power" Splunk roles could access search query text and job metadata for jobs that b...
First reported Oct 07, 2026 20:46 UTCCatalog metadata updated Oct 08, 2026 03:43 UTCOpen evidence recordMultiple OS Command Injection vulnerabilities exist in the management interface and session processing routines of Brocade Fabric OS versions before 10.0.1. Input processing flaws during remote man...
First reported Oct 08, 2026 01:01 UTCCatalog metadata updated Oct 08, 2026 03:43 UTCOpen evidence recordIn Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, a user that holds a role with the run_collect capability could use the collect Search Processing Language (SPL) command to a...
First reported Oct 07, 2026 20:46 UTCCatalog metadata updated Oct 08, 2026 03:43 UTCOpen evidence recordThe AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. Prior to 3.0.12 on 3.x and 2.16.1 on 2.x, the client infers tha...
First reported Oct 07, 2026 21:09 UTCCatalog metadata updated Oct 08, 2026 03:43 UTCOpen evidence recordIn Splunk Enterprise versions below 10.4.3, 10.2.7, and 10.0.10, a user that holds a role with the edit_spl2_module_permissions capability could use the affected Representational State Transfer (RE...
First reported Oct 07, 2026 20:46 UTCCatalog metadata updated Oct 08, 2026 03:43 UTCOpen evidence recordMultiple stack-based buffer overflow vulnerabilities exist in the REST API management component of Brocade Fabric OS versions prior to 10.0.1. When processing API request payloads (such as device c...
First reported Oct 08, 2026 01:07 UTCCatalog metadata updated Oct 08, 2026 03:43 UTCOpen evidence recordThe AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. Prior to 3.0.13 and 2.16.1, the HTTP/1.1 connection-pool key ex...
First reported Oct 07, 2026 21:19 UTCCatalog metadata updated Oct 08, 2026 03:43 UTCOpen evidence recordExcelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.3.1 to 2.11.0, agile decryption accepts an attacker-controlled spinCount and performs that many passwo...
First reported Oct 07, 2026 18:33 UTCCatalog metadata updated Oct 08, 2026 03:43 UTCOpen evidence recordIn Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, and Splunk Secure Gateway versions below 3.10.11, 3.9.25, and 3.8.72, an authenticated user who does not hold the "admin" or...
First reported Oct 07, 2026 20:46 UTCCatalog metadata updated Oct 08, 2026 03:43 UTCOpen evidence recordThe Uncanny Automator – AI + Automation for WordPress | AI Agent, AI Page Builder, Free AI Usage Included plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and inclu...
First reported Oct 08, 2026 01:26 UTCCatalog metadata updated Oct 08, 2026 03:43 UTCOpen evidence recordExcelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.7.0 to 2.11.0, conditional-format extraction indexes required child slices or dereferences an optional...
First reported Oct 07, 2026 18:45 UTCCatalog metadata updated Oct 08, 2026 03:43 UTCOpen evidence recordThe WSO2 Identity Server fails to enforce a default expiry time for SMS One-Time Passwords (OTPs) used in multi-factor authentication (MFA). This allows unused OTPs to remain valid indefinitely, pr...
First reported Oct 08, 2026 00:09 UTCCatalog metadata updated Oct 08, 2026 03:43 UTCOpen evidence recordMissing authorization checks in Amazon Athena engine version 3 request handling could have allowed an authenticated user to read limited query metadata (AWS account identifiers and SQL statement te...
First reported Oct 07, 2026 20:14 UTCCatalog metadata updated Oct 08, 2026 03:43 UTCOpen evidence recordThe AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. In 3.0.12, a peer offering only Digest qop=auth-int causes mutu...
First reported Oct 07, 2026 21:10 UTCCatalog metadata updated Oct 08, 2026 03:43 UTCOpen evidence recordExcelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.0.0 to 2.11.0, checkRow sizes its target cell slice from the last cell in XML document order and then ...
First reported Oct 07, 2026 18:41 UTCCatalog metadata updated Oct 08, 2026 03:43 UTCOpen evidence recordAn Access Control Bypass vulnerability exists in the Role-Based Access Control (RBAC) validation engine of Brocade Fabric OS versions before 10.0.1. When processing certain management protocol oper...
First reported Oct 08, 2026 00:57 UTCCatalog metadata updated Oct 08, 2026 03:43 UTCOpen evidence recordThe AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. From 2.2.0 until 3.0.14, WebSocket permessage-deflate decompres...
First reported Oct 07, 2026 20:51 UTCCatalog metadata updated Oct 08, 2026 03:43 UTCOpen evidence recordCVE-2026-97714 is a is a vulnerability in the authentication sub-system of Secure Access servers prior to version 14.60. Attackers can send a malformed response during authentication and cause a pe...
First reported Oct 07, 2026 19:20 UTCCatalog metadata updated Oct 08, 2026 03:43 UTCOpen evidence recordThe AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. From 2.16.0 until 3.0.14, ThreadSafeCookieStore incompletely va...
First reported Oct 07, 2026 20:57 UTCCatalog metadata updated Oct 08, 2026 03:43 UTCOpen evidence recordWhen Brocade Fabric OS versions before 10.0.1 processes trunk configuration operations, the application parses user-supplied list strings into dynamically allocated heap arrays without enforcing bo...
First reported Oct 08, 2026 00:44 UTCCatalog metadata updated Oct 08, 2026 03:43 UTCOpen evidence recordA filename, label, or report mention alone does not establish maliciousness. Observation dates describe cited sources; collection dates describe this local metadata catalog. No malware samples are stored, fetched, or executed by these pages.