UBUNTU-CVE-2025-6197

An open redirect vulnerability has been identified in Grafana OSS organization switching functionality. Prerequisites for exploitation: - Multiple organizations must exist in the Grafana instance - Victim must be on a different organization than the one specified in the URL...

CVE-2025-6197

CVE-2025-6197 is an open redirect vulnerability in Grafana OSS organization switching functionality. The issue requires multiple organizations in a Grafana instance and a victim on a different organization from the one in the URL. Exploitation could allow redirecting users to arbitrary external d...

CVE-2025-6197

An open redirect vulnerability has been identified in Grafana OSS organization switching functionality. Prerequisites for exploitation: - Multiple organizations must exist in the Grafana instance - Victim must be on a different organization than the one specified in the URL...

CVE-2025-6197

An open redirect vulnerability has been identified in Grafana OSS organization switching functionality. Prerequisites for exploitation: - Multiple organizations must exist in the Grafana instance - Victim must be on a different organization than the one specified in the URL...

Grafana Open Redirect in Organization Switching

An open redirect vulnerability has been identified in Grafana organization switching functionality. Prerequisites for exploitation: Multiple organizations must exist in the Grafana instance Victim must be on a different organization than the one specified in the URL Fixed in versions...

Grafana OSS 安全漏洞

Grafana OSS is a visualization dashboard in Grafana open source. A security vulnerability exists in Grafana OSS that stems from an open redirect in the organization switching feature...

WeGIA 跨站脚本漏洞

WeGIA is a web manager for welfare organizations. WeGIA suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the editarpermissoes.php endpoint, no details of the vulnerability are provided at this time...

The vulnerability of the ath12k module in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the ath12k module in the Linux operating system’s kernel is related to incorrect assumptions regarding the organization of data or memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

Grafana Labs 10.4.x < 10.4.19, 11.2.x < 11.2.10, 11.3.x < 11.3.7, 11.4 < 11.4.5, 11.5 < 11.5.5, 11.6 < 11.6.2, 12.0.x < 12.0.1 Improper Access Control (CVE-2025-3580)

The version of Grafana Labs installed on the remote host is affected by an improper access control vulnerability as referenced in the CVE-2025-3580 advisory. - An access control vulnerability was discovered in Grafana OSS where an Organization administrator could permanently delete the Server...

Vivaldi 7.5: color, clarity, and control

Read this article in español, Deutsch, Français, русский, 日本語, język polski. This update brings both refinement and power. It’s a release shaped by your feedback and driven by our commitment to putting you in full control of your browser. With long-requested colored Tab Stacks, enhanced privacy...

microcode_ctl: From CVEorg collector

Incorrect behavior order for some IntelR Core™ Ultra Processors may allow an unauthenticated user to potentially enable information disclosure via physical access...

microcode_ctl: From CVEorg collector

Incorrect behavior order for some IntelR Core™ Ultra Processors may allow an unauthenticated user to potentially enable information disclosure via physical access...

CVE-2015-0849

The CVE-2015-0849 entry concerns pycode-browser before version 1.0, which is reportedly vulnerable to a predictable temporary file vulnerability. The connected data confirms multiple advisories (e.g., Red Hat, Debian OSV, Ubuntu, CIRCL, NVD, UB/CVE) referencing the same issue. According to the NV...

CVE-2014-6274

git-annex vulnerability CVE-2014-6274: when using S3/Glacier remotes with embedcreds=yes and encryption=pubkey or encryption=hybrid, AWS credentials were stored in the repository in plaintext rather than encrypted. Affected range: 3.20121126 through 5.20140919. Impact: anyone with a copy of the r...

CVE-2014-0468

CVE-2014-0468 affects FusionForge prior to 5.3+20140506, due to a misconfigured Apache setup that allows the web server to execute scripts uploaded by users in raw SCM repositories (SVN, Git, Bzr...). This mode C summary uses concrete details from connected sources: affected product/component (Fu...

Study Reveals API Security Gaps in Asia-Pacific Compliance Programs

...

CVE-2021-41691

CVE-2021-41691 affects the OS4Ed Open Source Information System Community (openSIS) v8.0. The vulnerability is a SQL injection in the POST endpoint "/TransferredOutModal.php" triggered by the parameters student_id and TRANSFER[SCHOOL] (notably in the path and parameter naming variants such as TRA...

CVE-2023-5600

Removed by vendor...

CVE-2024-4994

CVE-2024-4994 describes a CSRF vulnerability in GitLab CE/EE affecting multiple release lines: 16.1.0–16.11.4, 17.0.x before 17.0.3, and 17.1.x before 17.1.1. The issue allows execution of arbitrary GraphQL mutations via CSRF on GitLabs GraphQL API. Mitigation is to upgrade to the fixed versions...

CVE-2024-4025

CVE-2024-4025 describes a DoS in GitLab CE/EE across all versions up to fixed points: 7.10–16.11.4, 17.0 prior to 17.0.3, and 17.1 prior to 17.1.1, triggered by processing a crafted Markdown page. The issue's impact is high (availability loss) per CVSS; no exploitation details are provided in the...