Lucene search
+L

722 matches found

CNNVD
CNNVD
added 2025/08/05 12:00 a.m.14 views

PHP-Charts 安全漏洞

PHP-Charts is an icon generation software from PHP-Charts, Inc. A security vulnerability exists in PHP-Charts v1.0, which stems from an uncleaned GET parameter and could lead to PHP code execution...

10CVSS7.4AI score0.01454EPSS
SaveExploits1References7
Snyk
Snyk
added 2025/07/28 12:42 p.m.9 views

Cross-site Scripting (XSS)

Overview @fluentui/react-charts is a React web chart controls for Microsoft fluentui v9 system. Affected versions of this package are vulnerable to Cross-site Scripting XSS via the unsecured SVG attribute spreading in the CartesianChart, Legend Shape renderer, and LineChart event annotation Textb...

6.1CVSS5.9AI score
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2025/07/26 7:26 a.m.23 views

CVE-2025-41240

Three Bitnami Helm charts mount Kubernetes Secrets under a predictable path /opt/bitnami//secrets that is located within the web server document root. In affected versions, this can lead to unauthenticated access to sensitive credentials via HTTP/S. A remote attacker could retrieve these secrets ...

10CVSS7.3AI score0.00702EPSS
SaveExploits0References1
NVD
NVD
added 2025/07/24 7:15 a.m.8 views

CVE-2025-41240

Three Bitnami Helm charts mount Kubernetes Secrets under a predictable path /opt/bitnami//secrets that is located within the web server document root. In affected versions, this can lead to unauthenticated access to sensitive credentials via HTTP/S. A remote attacker could retrieve these secrets ...

10CVSS0.00702EPSS
SaveExploits0References1
CVE
CVE
added 2025/07/24 6:42 a.m.43 views

CVE-2025-41240

CVE-2025-41240 involves Bitnami Helm charts mounting Kubernetes Secrets under a predictable path (/opt/bitnami/*/secrets) inside the web server document root. Affected deployments using the default usePasswordFiles=true may expose secrets via HTTP/S when the application is externally accessible, ...

10CVSS6.3AI score0.00702EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2025/07/24 6:42 a.m.21 views

CVE-2025-41240

Three Bitnami Helm charts mount Kubernetes Secrets under a predictable path /opt/bitnami//secrets that is located within the web server document root. In affected versions, this can lead to unauthenticated access to sensitive credentials via HTTP/S. A remote attacker could retrieve these secrets ...

10CVSS5.8AI score0.00702EPSS
SaveExploits0References2Affected Software3
OSV
OSV
added 2025/07/24 6:42 a.m.5 views

CVE-2025-41240 Mounted Kubernetes Secrets under a predictable path located within the web server document root

Three Bitnami Helm charts mount Kubernetes Secrets under a predictable path /opt/bitnami//secrets that is located within the web server document root. In affected versions, this can lead to unauthenticated access to sensitive credentials via HTTP/S. A remote attacker could retrieve these secrets ...

10CVSS6AI score
SaveExploits0References3
Cvelist
Cvelist
added 2025/07/24 6:42 a.m.15 views

CVE-2025-41240 Mounted Kubernetes Secrets under a predictable path located within the web server document root

Three Bitnami Helm charts mount Kubernetes Secrets under a predictable path /opt/bitnami//secrets that is located within the web server document root. In affected versions, this can lead to unauthenticated access to sensitive credentials via HTTP/S. A remote attacker could retrieve these secrets ...

10CVSS0.00702EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/07/24 12:00 a.m.10 views

Rucio Helm Charts 安全漏洞

Rucio Helm Charts is an open source library for Rucio by rucio. A security vulnerability exists in Rucio Helm Charts that stems from a predictable Kubernetes Secrets mount path that could lead to unauthorized access to sensitive credentials...

10CVSS6.4AI score0.00702EPSS
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/07/20 4:41 p.m.3 views

Malicious code in @toptal/picasso-charts (npm)

The package communicates with a domain associated with malicious activity...

7AI score
SaveExploits0
OSV
OSV
added 2025/07/17 2:40 p.m.12 views

CVE-2025-54064 rucio-server, rucio-ui, and rucio-webui vulnerable to insertion of X-Rucio-Auth-Token in apache access logfiles

Rucio is a software framework that provides functionality to organize, manage, and access large volumes of scientific data using customizable policies. The common Rucio helm-charts for the rucio-server, rucio-ui, and rucio-webui define the log format for the apache access log of these components...

6.9CVSS7AI score
SaveExploits0References3
CNNVD
CNNVD
added 2025/07/17 12:00 a.m.9 views

Rucio Helm Charts 日志信息泄露漏洞

Rucio Helm Charts is a library for Rucio in the rucio open source. Rucio Helm Charts suffers from a log message disclosure vulnerability that stems from logging X-Rucio-Auth-Token, which could lead to credential disclosure...

6.9CVSS6.4AI score0.00411EPSS
SaveExploits0References1
Microsoft CVE
Microsoft CVE
added 2025/07/16 7:00 a.m.7 views

Helm Chart Dependency Updating With Malicious Chart.yaml Content And Symlink Can Lead To Code Execution

...

8.6CVSS7AI score0.00364EPSS
SaveExploits1
OSV
OSV
added 2025/06/18 10:15 a.m.8 views

MAL-2025-5135 Malicious code in solana-charts (PyPI)

--- -= Per source details. Do not edit below this line.=-...

7.1AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/06/18 10:15 a.m.6 views

Malicious code in solana-charts (PyPI)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
Fedora
Fedora
added 2025/06/11 2:46 a.m.13 views

[SECURITY] Fedora 42 Update: qt6-qtcharts-6.9.1-1.fc42

Qt Charts module provides a set of easy to use chart components. It uses the Qt Graphics View Framework, therefore charts can be easily integrated to modern user interfaces. Qt Charts can be used as QWidgets, QGra phicsWidget, or QML types. Users can easily create impressive graphs by selecting o...

8.4CVSS7.2AI score0.00354EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/05/23 8:04 a.m.8 views

CVE-2024-51862

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Baptiste Wicht Google Visualization Charts google-visualization-charts allows Stored XSS.This issue affects Google Visualization Charts: from n/a through = 0.1...

6.5CVSS7.2AI score0.00302EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 6:02 a.m.6 views

CVE-2023-28114

cilium-cli is the command line interface to install, manage, and troubleshoot Kubernetes clusters running Cilium. Prior to version 0.13.2,cilium-cli, when used to configure cluster mesh functionality, can remove the enforcement of user permissions on the etcd store used to mirror local cluster...

4.8CVSS6.5AI score0.00192EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 5:24 a.m.11 views

CVE-2023-52191

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Torbjon Infogram – Add charts, maps and infographics allows Stored XSS.This issue affects Infogram – Add charts, maps and infographics: from n/a through 1.6.1...

6.5CVSS6.7AI score0.0031EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 5:03 a.m.11 views

CVE-2023-27526

A non Admin authenticated user could incorrectly create resources using the import charts feature, on Apache Superset up to and including 2.1.0...

4.3CVSS6.6AI score0.00876EPSS
SaveExploits0References1
Rows per page
Query Builder