PT-2019-7242

Name of the Vulnerable Software and Affected Versions Grafana Pie Chart Panel plugin versions prior to 2019-01-02 Description The issue allows an attacker to gain remote unauthenticated access to a Grafana dashboard when a chart is included. This is possible due to XSS via legend data or tooltip...

CVE-2015-9282: Improper Neutralization of Input During Web Page Generation

The Pie Chart Panel plugin through 2019-01-02 for Grafana is vulnerable to XSS via legend data or tooltip data. When a chart is included in a Grafana dashboard, this vulnerability could allow an attacker to gain remote unauthenticated access to the dashboard...

CVE-2019-1000009

Helm ChartMuseum version =0.1.0 and 0.8.1 contains a CWE-22: Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in HTTP API to save charts that can result in a specially crafted chart could be uploaded and saved outside the intended location. This attack...

CVE-2019-1000008

All versions of Helm between Helm =2.0.0 and 2.12.2 contains a CWE-22: Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in The commands "helm fetch --untar" and "helm lint some.tgz" that can result when chart archive files are unpacked a file may be...

Helm -- client unpacking chart that contains malicious content

Helm security notice A specially crafted chart may be able to unpack content into locations on the filesystem outside of the chart's path, potentially overwriting existing files...

SUSE SLED12 Security Update : libreoffice (SUSE-SU-2018:2485-2)

This update for libreoffice to 6.0.5.2 fixes the following issues : Security issues fixed : CVE-2018-10583: An information disclosure vulnerability occurs during automatic processing and initiating an SMB connection embedded in a malicious file, as demonstrated by...

foreman: Stored XSS in fact name or value

An attacker submitting facts to the Foreman server containing HTML can cause a stored XSS on certain pages: 1 Facts page, when clicking on the "chart" button and hovering over the chart; 2 Trends page, when checking the graph for a trend based on a such fact; 3 Statistics page, for facts that are...

horoscopes.astro-seek.com XSS vulnerability

Open Bug Bounty ID: OBB-680795 Description| Value ---|--- Affected Website:| horoscopes.astro-seek.com Open Bug Bounty Program:| View Open Bug Bounty Program Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Description of the security update for SharePoint Enterprise Server 2016: September 11, 2018

None None...

September 4, 2018, update for Office 2016 (KB3114853)

None None...

openSUSE Security Update : libreoffice (openSUSE-2018-941)

This update for libreoffice to 6.0.5.2 fixes the following issues : Security issues fixed : - CVE-2018-10583: An information disclosure vulnerability occurs during automatic processing and initiating an SMB connection embedded in a malicious file, as demonstrated by...

SUSE SLED12 Security Update : libreoffice (SUSE-SU-2018:2485-1)

This update for libreoffice to 6.0.5.2 fixes the following issues: Security issues fixed : - CVE-2018-10583: An information disclosure vulnerability occurs during automatic processing and initiating an SMB connection embedded in a malicious file, as demonstrated by...

stalrzeszow2006.pl XSS vulnerability

Open Bug Bounty ID: OBB-657318 Description| Value ---|--- Affected Website:| stalrzeszow2006.pl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

christianelapeyre.fr XSS vulnerability

Open Bug Bounty ID: OBB-657305 Description| Value ---|--- Affected Website:| christianelapeyre.fr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

hp124.com XSS vulnerability

Open Bug Bounty ID: OBB-657303 Description| Value ---|--- Affected Website:| hp124.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

rappens.se XSS vulnerability

Open Bug Bounty ID: OBB-657298 Description| Value ---|--- Affected Website:| rappens.se Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

hacker.org XSS vulnerability

Open Bug Bounty ID: OBB-657245 Description| Value ---|--- Affected Website:| hacker.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

noveauto.sk XSS vulnerability

Open Bug Bounty ID: OBB-657231 Description| Value ---|--- Affected Website:| noveauto.sk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

stratford.govt.nz XSS vulnerability

Open Bug Bounty ID: OBB-657219 Description| Value ---|--- Affected Website:| stratford.govt.nz Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

fullhair.co.il XSS vulnerability

Open Bug Bounty ID: OBB-657205 Description| Value ---|--- Affected Website:| fullhair.co.il Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...