CVE-2026-13068

creationtimestamp| type| source ---|---|--- 2026-07-24 04:45:40+00:00| seen| https://www.hkcert.org/security-bulletin/mongodb-multiple-vulnerabilities20260724...

CVE-2025-13068

creationtimestamp| type| source ---|---|--- 2025-11-25 08:16:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6gvmxo4gw2a...

CVE-2024-13068

creationtimestamp| type| source ---|---|--- 2025-09-03 13:26:45+00:00| seen| Telegram/RqsTorzXigejvwkfSer8vjwe6FFBg2cwveP6-M4LO2Rmb0s...

CVE-2019-13068

public/app/features/panel/panelctrl.ts in Grafana before 6.2.5 allows HTML Injection in panel drilldown links via the Title or url field...

CVE-2019-13068

creationtimestamp| type| source ---|---|--- 2023-03-27 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/51073...

Grafana <=6.2.4 - HTML Injection

Exploit Title: Grafana Hello...

Grafana 6.2.4 HTML Injection

Exploit Title: Grafana Hello Best Regards, SimranJeet...

SUSE CVE-2019-13068

public/app/features/panel/panelctrl.ts in Grafana before 6.2.5 allows HTML Injection in panel drilldown links via the Title or url field...

CVE-2020-13068

CVE-2020-13068 is rejected and does not represent an active vulnerability entry.

CVE-2020-13068

...

CVE-2019-13068

public/app/features/panel/panelctrl.ts in Grafana before 6.2.5 allows HTML Injection in panel drilldown links via the Title or url field...

CVE-2019-13068

public/app/features/panel/panelctrl.ts in Grafana before 6.2.5 allows HTML Injection in panel drilldown links via the Title or url field...

CVE-2019-13068

CVE-2019-13068 affects Grafana prior to 6.2.5, where public/app/features/panel/panel_ctrl.ts allows HTML Injection in panel drilldown links via the Title or url field. Root cause is a flaw in the panel_ctrl.ts handling of link fields. The impact is HTML injection in dashboards that render drilldo...

CVE-2019-13068

public/app/features/panel/panelctrl.ts in Grafana before 6.2.5 allows HTML Injection in panel drilldown links via the Title or url field...

CVE-2018-13068

The CVE-2018-13068 issue affects the AzurionToken (AZU) Ethereum smart contract. A vulnerability in the mintToken function causes an integer overflow, letting the contract owner set any user’s balance to an arbitrary value. This is the core root cause and stated impact. Exploitation details or in...

QNAP HelpDesk SQL Injection(CVE-2017-13068)

Vulnerability Summary The following advisory describes a SQL injection found in QTS Helpdesk versions 1.1.12 and earlier. QNAP helpdesk: “Starting from QTS 4.2.2 you can use the built-in Helpdesk app to directly submit help requests to QNAP from your NAS. To do so, ensure your NAS can reach the...

CVE-2017-13068

QNAP has already patched this vulnerability. This security concern allows a remote attacker to perform an SQL injection on the application and obtain Helpdesk application information. A remote attacker does not require any privileges to successfully execute this attack...

CVE-2017-13068

CVE-2017-13068 affects QNAP QTS Helpdesk (versions 1.1.12 and earlier). The vulnerability arises from insufficient input sanitization in the Helpdesk’s SupportUtils code path, enabling a remote attacker to perform an SQL injection via a crafted request to www/App/Controllers/Cli/SupportUtils.php ...