[SECURITY] Fedora 32 Update: swt-chart-0.12.0-3.fc32

SWTChart is a light-weight charting component for SWT...

Security Bulletin: WebSphere Dashboard Framework contains a vulnerability that allows file access and deletion.

Summary WebSphere Dashboard Framework contains a vulerability in a charting feature used to access and delete generated images in a temporary folder. A fix has been created that removes the vulnerability. Vulnerability Details WebSphere Dashboard Framework contains a vulnerability in a charting...

CVE-2018-17925

Multiple instances of this vulnerability Unsafe ActiveX Control Marked Safe For Scripting have been identified in the third-party ActiveX object provided to GE iFIX versions 2.0 - 5.8 by Gigasoft. Only the independent use of the Gigasoft charting package outside the iFIX product may expose users ...

PT-2018-14276

Name of the Vulnerable Software and Affected Versions GE iFIX versions 2.0 through 5.8 Description The issue is related to an Unsafe ActiveX Control Marked Safe For Scripting in a third-party ActiveX object provided by Gigasoft. This vulnerability may be exposed when the Gigasoft charting package...

TradingView Cross-Site Scripting Vulnerability

TradingView Charting Library is an open source and free K chart analysis tool, with a comprehensive API. support for ordinary json data UDF, there is also support for websocket JSAPI, most of the digital currency exchanges use this component library as a K line analysis tool. TradingView has a...

Directory traversal

Directory traversal vulnerability in the charting component in Symantec Messaging Gateway before 10.6.2 allows remote authenticated users to read arbitrary files via a .. dot dot in the sn parameter to brightmail/servlet/com.ve.kavachart.servlet.ChartStream...

CVE-2016-5312

Directory traversal vulnerability in the charting component in Symantec Messaging Gateway before 10.6.2 allows remote authenticated users to read arbitrary files via a .. dot dot in the sn parameter to brightmail/servlet/com.ve.kavachart.servlet.ChartStream...

CVE-2016-5312: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the charting component in Symantec Messaging Gateway before 10.6.2 allows remote authenticated users to read arbitrary files via a .. dot dot in the sn parameter to brightmail/servlet/com.ve.kavachart.servlet.ChartStream...

PT-2017-8706

Name of the Vulnerable Software and Affected Versions Symantec Messaging Gateway versions prior to 10.6.2 Description The issue allows remote authenticated users to read arbitrary files. This is achieved by exploiting a directory traversal vulnerability in the charting component. The vulnerabilit...

Symantec Messaging Gateway 10.6.1 - Directory Traversal

Symantec Messaging Gateway 10.6.1 - Directory Traversal Title : Symantec Messaging Gateway = 10.6.1 Directory Traversal Date : 28/09/2016 Author : R-73eN Tested on : Symantec Messaging Gateway 10.6.1 Latest Software : https://www.symantec.com/products/threat-protection/messaging-gateway Vendor :...

Symantec Messaging Gateway 10.6.1 - Directory Traversal

Exploit for java platform in category web applications Title : Symantec Messaging Gateway = 10.6.1 Directory Traversal Date : 28/09/2016 Author : R-73eN Tested on : Symantec Messaging Gateway 10.6.1 Latest Software : https://www.symantec.com/products/threat-protection/messaging-gateway Vendor :...

Symantec Messaging Gateway 10.6.1 Directory Traversal

Title : Symantec Messaging Gateway = 10.6.1 Directory Traversal Date : 28/09/2016 Author : R-73eN Tested on : Symantec Messaging Gateway 10.6.1 Latest Software : https://www.symantec.com/products/threat-protection/messaging-gateway Vendor : Symantec CVE : CVE-2016-5312 Vendor Advisory and Fix:...

Symantec Messaging Gateway 10.6.1 - Directory Traversal

Title : Symantec Messaging Gateway = 10.6.1 Directory Traversal Date : 28/09/2016 Author : R-73eN Tested on : Symantec Messaging Gateway 10.6.1 Latest Software : https://www.symantec.com/products/threat-protection/messaging-gateway Vendor : Symantec CVE : CVE-2016-5312 Vendor Advisory and Fix:...

CVE-2013-6728

The charting component in IBM WebSphere Dashboard Framework WDF 6.1.5 and 7.0.1 allows remote attackers to view or delete image files by leveraging incorrect security constraints for a temporary directory...

Directory traversal

The charting component in IBM WebSphere Dashboard Framework WDF 6.1.5 and 7.0.1 allows remote attackers to view or delete image files by leveraging incorrect security constraints for a temporary directory...

PT-2014-3178

Name of the Vulnerable Software and Affected Versions IBM WebSphere Dashboard Framework versions 6.1.5 through 7.0.1 Description The issue concerns the charting component in IBM WebSphere Dashboard Framework, which has incorrect security constraints for a temporary directory. This allows remote...

CVE-2013-6728: Undefined Security Weakness

The charting component in IBM WebSphere Dashboard Framework WDF 6.1.5 and 7.0.1 allows remote attackers to view or delete image files by leveraging incorrect security constraints for a temporary directory...

Persistent XSS in JIRA charting plugin Workload Pie Chart Report

The Workload Pie Chart Report included with the JIRA charting plugin contains a number of XSS vulnerabilities. This plugin is bundled with OnDemand. The configuration page contains an XSS vulnerability in custom field names. 1. Create a custom field with the name alert'custom field' 2. Try to...

Persistent XSS in JIRA charting plugin Workload Pie Chart Report

The Workload Pie Chart Report included with the JIRA charting plugin contains a number of XSS vulnerabilities. This plugin is bundled with OnDemand. The configuration page contains an XSS vulnerability in custom field names. 1. Create a custom field with the name alert'custom field' 2. Try to...

Persistent XSS in JIRA charting plugin Workload Pie Chart Report

The Workload Pie Chart Report included with the JIRA charting plugin contains a number of XSS vulnerabilities. This plugin is bundled with OnDemand. The configuration page contains an XSS vulnerability in custom field names. 1. Create a custom field with the name alert'custom field' 2. Try to...