Lucene search
+L

1601 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/06/19 12:00 a.m.•5 views

CVE-2020-14470: Insertion of Sensitive Information into Log File

In Octopus Deploy 2018.8.0 through 2019.x before 2019.12.2, an authenticated user with could trigger a deployment that leaks the Helm Chart repository password...

6.5CVSS5.8AI score0.0085EPSS
SaveExploits0References2
CNVD
CNVD
•added 2020/06/05 12:00 a.m.•6 views

DLL Hijacking Vulnerability in Golden Ark Chart Viewer

Golden Boat Viewing King is a viewing software of Jiangxia Information Technology Huizhou Co. There is a DLL hijacking vulnerability that can be exploited by attackers to execute arbitrary code...

7.5AI score
SaveExploits0
OSV
OSV
•added 2020/06/03 1:15 p.m.•17 views

CVE-2020-2194

Jenkins ECharts API Plugin 4.7.0-3 and earlier does not escape the display name of the builds in the trend chart, resulting in a stored cross-site scripting vulnerability...

5.4CVSS6.1AI score
SaveExploits0References2
Mend
Mend
•added 2020/06/03 12:40 p.m.•3 views

CVE-2020-2194

Jenkins ECharts API Plugin 4.7.0-3 and earlier does not escape the display name of the builds in the trend chart, resulting in a stored cross-site scripting vulnerability...

5.4CVSS0.00735EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/06/03 12:00 a.m.•7 views

CVE-2020-2194: Improper Neutralization of Input During Web Page Generation

Jenkins ECharts API Plugin 4.7.0-3 and earlier does not escape the display name of the builds in the trend chart, resulting in a stored cross-site scripting vulnerability...

5.4CVSS5.7AI score0.00735EPSS
SaveExploits0References2
Jenkins Security Advisories
Jenkins Security Advisories
•added 2020/06/03 12:00 a.m.•16 views

Stored XSS vulnerability in echarts-api

echarts-api 4.7.0-3 and earlier does not escape the display name of the builds in the trend chart. This results in a stored cross-site scripting XSS vulnerability that can be exploited by users with Run/Update permission. echarts-api 4.7.0-4 escapes the display name...

5.4CVSS5.3AI score0.00735EPSS
SaveExploits0Affected Software1
Microsoft KB
Microsoft KB
•added 2020/06/02 12:00 a.m.•8 views

June 2, 2020, update for Office 2016 (KB4484171)

None None...

6.1AI score
SaveExploits0
NVD
NVD
•added 2020/05/24 6:15 p.m.•30 views

CVE-2020-13429

legend.ts in the piechart-panel aka Pie Chart Panel plugin before 1.5.0 for Grafana allows XSS via the Values Header aka legend header option...

5.4CVSS5.3AI score0.0068EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2020/05/24 5:24 p.m.•36 views

CVE-2020-13429

legend.ts in the piechart-panel aka Pie Chart Panel plugin before 1.5.0 for Grafana allows XSS via the Values Header aka legend header option...

5.2AI score0.0068EPSS
SaveExploits0References2
CVE
CVE
•added 2020/05/24 5:24 p.m.•124 views

CVE-2020-13429

The CVE-2020-13429 issue concerns the grafana-piechart-panel (Pie Chart Panel) plugin. Affected component: legend.ts in the piechart-panel plugin before version 1.5.0. Root cause: XSS via the Values Header (legend header) option. Impact: allows cross‑site scripting in Grafana deployments using vu...

5.4CVSS5.1AI score0.0068EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/05/24 12:00 a.m.•5 views

CVE-2020-13429: Improper Neutralization of Input During Web Page Generation

legend.ts in the piechart-panel aka Pie Chart Panel plugin before 1.5.0 for Grafana allows XSS via the Values Header aka legend header option...

5.4CVSS6AI score0.0068EPSS
SaveExploits0References2
OSV
OSV
•added 2020/04/15 3:15 p.m.•10 views

CVE-2020-1018

An information disclosure vulnerability exists when Microsoft Dynamics Business Central/NAV on-premise does not properly hide the value of a masked field when showing the records as a chart page.The attacker who successfully exploited the vulnerability could see the information that are in a mask...

7.5CVSS5.8AI score0.06311EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2020/04/15 3:13 p.m.•55 views

CVE-2020-1018

An information disclosure vulnerability exists when Microsoft Dynamics Business Central/NAV on-premise does not properly hide the value of a masked field when showing the records as a chart page.The attacker who successfully exploited the vulnerability could see the information that are in a mask...

7.1AI score0.06311EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/04/15 12:00 a.m.•6 views

CVE-2020-1018: Exposure of Sensitive Information to an Unauthorized Actor

An information disclosure vulnerability exists when Microsoft Dynamics Business Central/NAV on-premise does not properly hide the value of a masked field when showing the records as a chart page.The attacker who successfully exploited the vulnerability could see the information that are in a mask...

7.5CVSS7.2AI score0.06311EPSS
SaveExploits0References2
Microsoft KB
Microsoft KB
•added 2020/04/14 7:00 a.m.•59 views

Cumulative Update 41 for Microsoft Dynamics NAV 2017 (Build 30219)

Cumulative Update 41 for Microsoft Dynamics NAV 2017 Build 30219 This article applies to Microsoft Dynamics NAV 2017 for all countries and all language locales. An information disclosure vulnerability exists if Microsoft Dynamics Business Central/NAV on-premises does not correctly hide the value ...

8CVSS7.8AI score0.06831EPSS
SaveExploits0
Microsoft KB
Microsoft KB
•added 2020/04/14 7:00 a.m.•55 views

Cumulative Update 11 for Microsoft Dynamics 365 Business Central April'19 on-premises (Application Build 14.12.41935, Platform Build 14.0.41862)

None None...

8CVSS7.1AI score0.06831EPSS
SaveExploits0
Microsoft KB
Microsoft KB
•added 2020/04/14 7:00 a.m.•53 views

Description of the security update for Microsoft Dynamics NAV 2015: April 14, 2020

Description of the security update for Microsoft Dynamics NAV 2015: April 14, 2020 An information disclosure vulnerability exists if Microsoft Dynamics Business Central/NAV on-premises does not correctly hide the value of a masked field when it displays the records as a chart page. To learn more...

8CVSS7.4AI score0.06831EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2020/04/14 12:00 a.m.•1 views

PT-2020-2254

Name of the Vulnerable Software and Affected Versions Microsoft Dynamics Business Central/NAV affected versions not specified Description An information disclosure issue exists due to the improper hiding of masked field values when records are displayed as a chart page. This could allow an attack...

7.8CVSS5.8AI score0.06311EPSS
SaveExploits0References5
OpenVAS
OpenVAS
•added 2020/04/07 12:00 a.m.•41 views

Fedora: Security Advisory for swt-chart (FEDORA-2020-1d0635bd71)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.8CVSS7.8AI score0.49285EPSS
SaveExploits2References2
Fedora
Fedora
•added 2020/04/06 12:19 a.m.•46 views

[SECURITY] Fedora 32 Update: swt-chart-0.12.0-3.fc32

SWTChart is a light-weight charting component for SWT...

9.8CVSS7.7AI score0.49285EPSS
SaveExploits2
Rows per page
Query Builder