Lucene search
+L

8 matches found

Vulnrichment
Vulnrichment
•added 2026/08/11 7:38 a.m.•10 views

CVE-2026-73156 cti-transmute Sunburst and Treemap Tooltips Allow Cross-Site Scripting via Crafted Conversion Data

Affected versions of cti-transmute fail to HTML-escape attacker-controlled values used in ECharts Sunburst and Treemap tooltip formatters. Slice names may originate directly from STIX or MISP data, including STIX types, relationshiptype, pattern prefixes, and MISP category/type values. Since...

5.3CVSS5.3AI score0.00444EPSS
SaveExploits0References1
OSV
OSV
•added 2026/08/11 7:38 a.m.•37 views

CVE-2026-73156 cti-transmute Sunburst and Treemap Tooltips Allow Cross-Site Scripting via Crafted Conversion Data

Affected versions of cti-transmute fail to HTML-escape attacker-controlled values used in ECharts Sunburst and Treemap tooltip formatters. Slice names may originate directly from STIX or MISP data, including STIX types, relationshiptype, pattern prefixes, and MISP category/type values. Since...

5.3CVSS5.3AI score
SaveExploits0References4
Cvelist
Cvelist
•added 2026/08/11 7:38 a.m.•52 views

CVE-2026-73156 cti-transmute Sunburst and Treemap Tooltips Allow Cross-Site Scripting via Crafted Conversion Data

Affected versions of cti-transmute fail to HTML-escape attacker-controlled values used in ECharts Sunburst and Treemap tooltip formatters. Slice names may originate directly from STIX or MISP data, including STIX types, relationshiptype, pattern prefixes, and MISP category/type values. Since...

5.3CVSS0.00444EPSS
SaveExploits0References1
Microsoft KB
Microsoft KB
•added 2019/10/01 12:00 a.m.•94 views

October 1, 2019, update for Office 2016 (KB4475585)

None None...

6.1AI score
SaveExploits0
Openbugbounty
Openbugbounty
•added 2015/10/10 5:58 p.m.•12 views

app.nos.nl XSS vulnerability

Vulnerable URL: http://app.nos.nl/treemap/index.php?source=Europa staatssteun.csv=EuropaInstellingen.csv=EuropaKleuren.csv= Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 18:17 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

6.3AI score
SaveExploits0
NVD
NVD
•added 2014/07/11 8:55 p.m.•24 views

CVE-2014-4940

Multiple directory traversal vulnerabilities in Tera Charts tera-charts plugin 0.1 for WordPress allow remote attackers to read arbitrary files via a .. dot dot in the fn parameter to 1 charts/treemap.php or 2 charts/zoomabletreemap.php...

5CVSS6.9AI score0.1927EPSS
SaveExploits4References2
Cvelist
Cvelist
•added 2014/07/11 8:00 p.m.•39 views

CVE-2014-4940

Multiple directory traversal vulnerabilities in Tera Charts tera-charts plugin 0.1 for WordPress allow remote attackers to read arbitrary files via a .. dot dot in the fn parameter to 1 charts/treemap.php or 2 charts/zoomabletreemap.php...

9.5AI score0.1927EPSS
SaveExploits4References2
exploitpack
exploitpack
•added 2014/05/28 12:00 a.m.•20 views

WordPress Plugin Tera Charts (tera-charts) - chartstreemap.php?fn Directory Traversal

WordPress Plugin Tera Charts tera-charts - chartstreemap.php?fn Directory Traversal source: https://www.securityfocus.com/bid/68662/info Tera Charts plugin for WordPress is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker...

0.5AI score
SaveExploits0
Rows per page
Query Builder