SUSE CVE-2018-18623

Grafana 5.3.1 has XSS via the "Dashboard Text Panel" screen. NOTE: this issue exists because of an incomplete fix for CVE-2018-12099...

SUSE CVE-2018-18624

Grafana 5.3.1 has XSS via a column style on the "Dashboard Table Panel" screen. NOTE: this issue exists because of an incomplete fix for CVE-2018-12099...

SUSE CVE-2019-13068

public/app/features/panel/panelctrl.ts in Grafana before 6.2.5 allows HTML Injection in panel drilldown links via the Title or url field...

SUSE CVE-2020-11987

Apache Batik 1.13 is vulnerable to server-side request forgery, caused by improper input validation by the NodePickerPanel. By using a specially-crafted argument, an attacker could exploit this vulnerability to cause the underlying server to make arbitrary GET requests...

SUSE CVE-2020-12245

Grafana before 6.7.3 allows table-panel XSS via column.title or cellLinkTooltip...

SUSE CVE-2020-13429

legend.ts in the piechart-panel aka Pie Chart Panel plugin before 1.5.0 for Grafana allows XSS via the Values Header aka legend header option...

SUSE CVE-2021-29987

After requesting multiple permissions, and closing the first permission panel, subsequent permission panels will be displayed in a different position but still record a click in the default location, making it possible to trick a user into accepting a permission they did not want to. This bug onl...

CVE-2023-23464 Media CP Media Control Panel – Information Disclosure

Media CP Media Control Panel latest version. A Permissive Flash Cross-domain Policy may allow information disclosure...

CVE-2023-23465

The CVE-2023-23465 entry concerns Media CP Media Control Panel with a CSRF vulnerability via an unspecified endpoint. Affected: Media CP Media Control Panel (no product/version details provided in the documents). Root cause: CSRF without details on the vulnerable endpoint or parameters. Impact: h...

CVE-2021-34117

SQL Injection vulnerability in SEO Panel 4.9.0 in api/user.api.php in function getUserName in the username parameter, allows attackers to gain sensitive information...

Media CP Media Control Panel 跨站请求伪造漏洞

MEDIA CONTROL PANEL Media CP Media Control Panel is an application from MEDIA CONTROL PANEL, Inc. A security vulnerability exists in Media CP Media Control Panel, which can be exploited by an attacker to conduct cross-site request forgery CSRF via an unspecified endpoint...

CVE-2021-34117

CVE-2021-34117 concerns a SQL injection in SEO Panel 4.9.0. The vulnerability resides in api/user.api.php, in the getUserName function via the username parameter, potentially allowing an attacker to access sensitive information. Connected documents confirm the affected software/version and the vu...

CVE-2023-23466 Media CP Media Control Panel – insufficiently protected credential change

Media CP Media Control Panel latest version. Insufficiently protected credential change...

CVE-2023-23467 Media CP Media Control Panel – Reflected XSS

Media CP Media Control Panel latest version. Reflected XSS possible through unspecified endpoint...

CVE-2023-23467 Media CP Media Control Panel – Reflected XSS

Media CP Media Control Panel latest version. Reflected XSS possible through unspecified endpoint...

CVE-2023-23465 Media CP Media Control Panel – CSRF

Media CP Media Control Panel latest version. CSRF possible through unspecified endpoint...

PT-2023-18974 · Unknown · Media Cp Media Control Panel

Name of the Vulnerable Software and Affected Versions: Media CP Media Control Panel latest version Description: The issue allows for CSRF, which is possible through an unspecified endpoint. Recommendations: For the latest version of Media CP Media Control Panel, at the moment, there is no...

MediaCP Media Control Panel 跨站脚本漏洞

MediaCP Media Control Panel is an innovative audio and video web control panel for streaming media service providers from MediaCP, Inc. A security vulnerability exists in MediaCP Media Control Panel, which can be exploited by an attacker to conduct cross-site scripting XSS attacks via unspecified...

UBUNTU-CVE-2023-25731

Due to URL previews in the network panel of developer tools improperly storing URLs, query parameters could potentially be used to overwrite global objects in privileged code. This vulnerability affects Firefox 110...

Media CP Media Control Panel 安全漏洞

MEDIA CONTROL PANEL Media CP Media Control Panel is an application from MEDIA CONTROL PANEL, Inc. A security vulnerability exists in Media CP Media Control Panel that stems from inadequate credential change protection...