PT-2025-6766 · Progress · Telerik Reporting

Name of the Vulnerable Software and Affected Versions: Progress® Telerik® Reporting versions prior to 2025 Q1 19.0.25.211 Description: Information disclosure is possible by a local threat actor through an absolute path vulnerability. This issue allows a local threat actor to potentially disclose...

CVE-2024-54160: Improper Neutralization of Input During Web Page Generation

dashboards-reporting aka Dashboards Reports before 2.19.0.0, as shipped in OpenSearch before 2.19, allows XSS because Markdown is not sanitized when previewing a header or footer...

PT-2025-6715 · Unknown +2 · Opensearch +3

Name of the Vulnerable Software and Affected Versions: dashboards-reporting versions prior to 2.19.0.0 OpenSearch versions prior to 2.19 Description: The issue allows cross-site scripting XSS because Markdown is not sanitized when previewing a header or footer. This occurs in dashboards-reporting...

Progress Telerik Reporting 安全漏洞

Progress Telerik Reporting is a .NET report embedding tool from Progress, Inc. that enables the creation, design, export, and integration of reports in cloud-based, web and applications. A security vulnerability exists in Progress Telerik Reporting prior to version 2025 Q1, which stems from a loc...

CVE-2024-54160

dashboards-reporting aka Dashboards Reports before 2.19.0.0, as shipped in OpenSearch before 2.19, allows XSS because Markdown is not sanitized when previewing a header or footer...

CVE-2024-6097: Absolute Path Traversal

In Progress® Telerik® Reporting versions prior to 2025 Q1 19.0.25.211, information disclosure is possible by a local threat actor through an absolute path vulnerability...

CVE-2024-55212

creationtimestamp| type| source ---|---|--- 2025-02-11 21:58:17+00:00| seen| https://infosec.exchange/users/cve/statuses/113987492046596809 2025-02-11 22:15:58+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhwopoxjbd2x 2025-02-12 01:10:52+00:00|...

CVE-2025-21322

creationtimestamp| type| source ---|---|--- 2025-02-11 18:08:38+00:00| seen| https://www.thezdi.com/blog/2025/2/11/the-february-2025-security-update-review 2025-02-11 18:17:10+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhwbeothr52x 2025-02-11 19:04:16+00:00| seen|...

CVE-2025-21198

creationtimestamp| type| source ---|---|--- 2025-02-11 18:08:38+00:00| seen| https://www.thezdi.com/blog/2025/2/11/the-february-2025-security-update-review 2025-02-11 18:16:45+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhwbdxekhb2a 2025-02-11 18:17:03+00:00| seen|...

CVE-2025-24470

creationtimestamp| type| source ---|---|--- 2025-02-11 17:06:31+00:00| seen| https://infosec.exchange/users/cve/statuses/113986344759068128 2025-02-11 17:17:11+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhw5zgrcc52a 2025-02-11 17:45:29+00:00| seen|...

CVE-2024-36508

creationtimestamp| type| source ---|---|--- 2025-02-11 16:36:29+00:00| seen| https://infosec.exchange/users/cve/statuses/113986226670304919 2025-02-11 17:16:25+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhw5y2uyry2d 2025-02-11 17:45:29+00:00| seen|...

CVE-2025-24868

creationtimestamp| type| source ---|---|--- 2025-02-11 01:16:06+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhuicv755i23 2025-02-11 01:26:18+00:00| seen| https://infosec.exchange/users/cve/statuses/113982647697373406 2025-02-11 03:01:32+00:00| seen|...

编号撤回

Siemens Opcenter Intelligence is a software from Siemens Germany. It is used to provide flexible reporting and analysis tools that enable companies to present data to the right people with appropriate visualizations. This CVE number has been withdrawn...

编号撤回

Siemens Opcenter Intelligence is a software from Siemens Germany. It is used to provide flexible reporting and analysis tools that enable companies to present data to the right people with appropriate visualizations. This CVE number has been withdrawn...

Fortinet FortiAnalyzer 信息泄露漏洞

Fortinet FortiAnalyzer is a centralized network security reporting solution from Fiat Fortinet. The product is mainly used to collect network log data and analyze, report, and archive operations on security events, network traffic, and Web content in the logs through the reporting suite. An...

CVE-2025-25189

creationtimestamp| type| source ---|---|--- 2025-02-10 22:15:09+00:00| seen| https://infosec.exchange/users/cve/statuses/113981896093771933 2025-02-10 22:16:05+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhu6ayiqzt2z 2025-02-11 00:14:21+00:00| seen|...

Security update for cloud-regionsrv-client

This update for cloud-regionsrv-client contains the following fixes: Update to 10.3.11 bsc1234050 Send registration code for the extensions, not only base product Update to 10.3.9: bsc1234050 Send registration code for the extensions, not only base product Update to 10.3.8: bsc1233333 Fix the...

Azure Linux 3.0 Security Update: cmake / curl / mysql / rust (CVE-2024-9681)

The version of cmake / curl / mysql / rust installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-9681 advisory. - When curl is asked to use HSTS, the expiry time for a subdomain might overwrite a parent...

MAL-2025-191917 Malicious code in updateuuid4 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 2c45f904631a26aae94cafeeac5ea0f7efe0fc5d4f46dea48da17dcb766111d5 The package, with an innocent looking name, has as the only functionality reporting to a Telegram channel given username and password. The functionality is in...

CVE-2025-24371

CometBFT is a distributed, Byzantine fault-tolerant, deterministic state machine replication engine. In the blocksync protocol peers send their base and latest heights when they connect to a new node A, which is syncing to the tip of a network. base acts as a lower ground and informs A that the...