3160 matches found
Apache Storm UI: Stored Cross-Site Scripting (XSS) via Unsanitized Topology Metadata
Stored Cross-Site Scripting XSS via Unsanitized Topology Metadata in Apache Storm UI Versions Affected: before 2.8.6 Description: The Storm UI visualization component interpolates topology metadata including component IDs, stream names, and grouping values directly into HTML via innerHTML in...
EUVD-2026-21904
Stored Cross-Site Scripting XSS via Unsanitized Topology Metadata in Apache Storm UI Versions Affected: before 2.8.6 Description: The Storm UI visualization component interpolates topology metadata including component IDs, stream names, and grouping values directly into HTML via innerHTML in...
CVE-2026-35565
Apache Storm versions before 2.8.6 are vulnerable to Stored Cross-Site Scripting (XSS) due to unsanitized topology metadata. The Storm UI visualization component interpolates metadata—including component IDs, stream names, and grouping values—directly into HTML via innerHTML in the parseNode() an...
CVE-2026-35565 Apache Storm UI: Stored Cross-Site Scripting (XSS) via Unsanitized Topology Metadata in Storm UI
Stored Cross-Site Scripting XSS via Unsanitized Topology Metadata in Apache Storm UI Versions Affected: before 2.8.6 Description: The Storm UI visualization component interpolates topology metadata including component IDs, stream names, and grouping values directly into HTML via innerHTML in...
CVE-2026-35565 Apache Storm UI: Stored Cross-Site Scripting (XSS) via Unsanitized Topology Metadata in Storm UI
Stored Cross-Site Scripting XSS via Unsanitized Topology Metadata in Apache Storm UI Versions Affected: before 2.8.6 Description: The Storm UI visualization component interpolates topology metadata including component IDs, stream names, and grouping values directly into HTML via innerHTML in...
CVE-2026-39892 vulnerabilities
Vulnerabilities for packages: mlflow, dask-kubernetes, mitmproxy, kserve, mycli, jupyter-base-notebook, superset, ggshield, kubeflow-pipelines-visualization-server, py3-cassandra-medusa, k8s-sidecar, kubeflow-jupyter-web-app, in-toto, open-webui, datadog-agent, kubeflow-volumes-web-app, airflow,...
GHSA-P423-J2CM-9VMQ vulnerabilities
Vulnerabilities for packages: mlflow, dask-kubernetes, mitmproxy, kserve, mycli, jupyter-base-notebook, superset, ggshield, kubeflow-pipelines-visualization-server, py3-cassandra-medusa, k8s-sidecar, kubeflow-jupyter-web-app, in-toto, open-webui, datadog-agent, kubeflow-volumes-web-app, airflow,...
GHSA-P423-J2CM-9VMQ vulnerabilities
Vulnerabilities for packages: barman, wazuh-manager, nemo, opal, ggshield, dask-kubernetes, mlflow, apache-beam-python-3.12-sdk, dbt-snowflake, localstack, jupyter-base-notebook, openstack-kolla-toolbox-2025.1, datadog-agent-fips, airflow, kubeflow-volumes-web-app, request-1276, pgadmin4, semgrep...
CVE-2026-39892 vulnerabilities
Vulnerabilities for packages: barman, wazuh-manager, nemo, opal, ggshield, dask-kubernetes, mlflow, apache-beam-python-3.12-sdk, dbt-snowflake, localstack, jupyter-base-notebook, openstack-kolla-toolbox-2025.1, datadog-agent-fips, airflow, kubeflow-volumes-web-app, request-1276, pgadmin4, semgrep...
SentinelSphere: Integrating AI-Powered Real-Time Threat Detection with Cybersecurity Awareness Training
The field of cybersecurity is confronted with two interrelated challenges: a worldwide deficit of qualified practitioners and ongoing human-factor weaknesses that account for the bulk of security incidents. To tackle these issues, we present SentinelSphere, a platform driven by artificial...
[SECURITY] Fedora 43 Update: vtk-9.2.6-44.fc43
VTK is an open-source software system for image processing, 3D graphics, volume rendering and visualization. VTK includes many advanced algorithms e.g., surface reconstruction, implicit modeling, decimation and rendering techniques e.g., hardware-accelerated volume rendering, LOD control. NOTE: T...
[SECURITY] Fedora 42 Update: vtk-9.2.6-38.fc42
VTK is an open-source software system for image processing, 3D graphics, volume rendering and visualization. VTK includes many advanced algorithms e.g., surface reconstruction, implicit modeling, decimation and rendering techniques e.g., hardware-accelerated volume rendering, LOD control. NOTE: T...
CVE-2026-26940: Improper Validation of Specified Quantity in Input
Improper Validation of Specified Quantity in Input CWE-1284 in the Timelion visualization plugin in Kibana can lead Denial of Service via Excessive Allocation CAPEC-130. The vulnerability allows an authenticated user to send a specially crafted Timelion expression that overwrites internal series...
EUVD-2026-12665
Vulnerability in the Oracle Edge Cloud Infrastructure Designer and Visualisation Toolkit product of Oracle Open Source Projects component: Desktop. The supported version that is affected is 0.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...
CVE-2026-21994
Vulnerability in the Oracle Edge Cloud Infrastructure Designer and Visualisation Toolkit product of Oracle Open Source Projects component: Desktop. The supported version that is affected is 0.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...
CVE-2026-32137
Dataease is an open source data visualization analysis tool. Prior to 2.10.20, The table parameter for /de2api/datasource/previewData is directly concatenated into the SQL statement without any filtering or parameterization. Since tableName is a user-controllable string, attackers can inject...
Vertex AI SDK 1.131.0 Cross Site Scripting Scanner
This script is a defensive behavioral security scanner designed to test whether HTML reports generated by the internal visualization module of the google-cloud-aiplatform part of Google Cloud improperly render unescaped user-controlled input...
SmartGraphical: A Human-In-The-Loop Framework for Detecting Smart Contract Logical Vulnerabilities Via Pattern-Driven Static Analysis and Visual Abstraction
Smart contracts are fundamental components of blockchain ecosystems; however, their security remains a critical concern due to inherent vulnerabilities. While existing detection methodologies are predominantly syntax-oriented, targeting reentrancy and arithmetic errors, they often overlook logica...
Apache Superset Security Bypass Vulnerability
Apache Superset is a data visualization and data exploration platform from the Apache USA Foundation. A security bypass vulnerability exists in Apache Superset, which can be exploited by an attacker to execute sensitive SQL functions...
