CVE-2026-18058

The mobile Smart Connect dashboard UI (referenced via Motorola support, with CNA from Lenovo PSIRT ) was vulnerable to manipulation by third-party apps . When combined with a phishing attack , this manipulation could lead to privilege escalation for an attacker within the system. The vulnerabilit...

CVE-2026-18058: Missing Authorization

The mobile Smart Connect dashboard UI was subject to manipulation by 3rd party apps. When paired with a phishing attack, this manipulation could result in escalated privileges of an attacker within the system...

CVE-2025-34263: Improper Neutralization of Input During Web Page Generation

Advantech WISE-DeviceOn Server versions prior to 5.4 contain a stored cross-site scripting XSS vulnerability in the /rmm/v1/plugin-config/dashboards/menus endpoint. When an authenticated user adds or edits a dashboard entry, the label and path values are stored in plugin configuration data and...

EUVD-2019-14345

Malware in sbrugna...

EUVD-2020-25939

Malware in sbrugna...

EUVD-2024-24502

Malicious code in bioql PyPI...

EUVD-2022-27550

Malicious code in bioql PyPI...

Malicious code in tidb-dashboard-ui (npm)

The package tidb-dashboard-ui was found to contain malicious code...

MAL-2025-29085 Malicious code in petal-dashboard-ui (npm)

The package petal-dashboard-ui was found to contain malicious code...

Malicious code in petal-dashboard-ui (npm)

The package petal-dashboard-ui was found to contain malicious code...

Security Bulletin: IBM Sterling B2B Integrator Dashboard UI is vulnerable to sensitive information exposure (CVE-2021-39087)

Summary IBM Sterling B2B Integrator dashboard UI has addressed a sensitive information exposure security vulnerability. Vulnerability Details CVEID:CVE-2021-39087 DESCRIPTION: IBM Sterling B2B Integrator Standard Edition could allow an authenticated user to obtain sensitive information due to...

CVE-2023-5445

An open redirect vulnerability in ePolicy Orchestrator prior to 5.10.0 CP1 Update 2, allows a remote low privileged user to modify the URL parameter for the purpose of redirecting URL requests to a malicious site. This impacts the dashboard area of the user interface. A user would need to be logg...

Security Bulletin: The dashboard UI of IBM Sterling B2B Integrator is vulnerable to information disclosure (CVE-2023-22876)

Summary IBM Sterling B2B Integrator has addressed the information disclosure vulnerability. Vulnerability Details CVEID:CVE-2023-22876 DESCRIPTION: IBM Sterling B2B Integrator Standard Edition could allow a privileged user to obtain sensitive information that could aid in further attacks against...

Security Bulletin: The dasboard UI of IBM Sterling B2B Integrator is vulnerable to improper permission control (CVE-2022-40231)

Summary IBM Sterling B2B Integrator has addressed the improper permission control security vulnerability in the dashboard UI. Vulnerability Details CVEID:CVE-2022-40231 DESCRIPTION: IBM Sterling B2B Integrator Standard Edition could allow an authenticated user to perform unauthorized actions due ...

CVE-2022-22404

IBM App Connect Enterprise Certified Container Dashboard UI IBM App Connect Enterprise Certified Container 1.5, 2.0, 2.1, 3.0, and 3.1 may be vulnerable to denial of service due to excessive rate limiting...

Design/Logic Flaw

IBM App Connect Enterprise Certified Container Dashboard UI IBM App Connect Enterprise Certified Container 1.5, 2.0, 2.1, 3.0, and 3.1 may be vulnerable to denial of service due to excessive rate limiting...

CVE-2022-22404

The CVE-2022-22404 entry concerns IBM App Connect Enterprise Certified Container Dashboard UI vulnerability in the Dashboard components for versions 1.5, 2.0, 2.1, 3.0 and 3.1, caused by excessive rate limiting that can lead to denial of service. The issue has CVSS v3.0 base score 6.5 (Network, L...

CVE-2022-22404

IBM App Connect Enterprise Certified Container Dashboard UI IBM App Connect Enterprise Certified Container 1.5, 2.0, 2.1, 3.0, and 3.1 may be vulnerable to denial of service due to excessive rate limiting...

Missing Authorization with Default Settings in Dashboard UI

Dashboard UI in Hangfire.Core uses authorization filters to protect it from showing sensitive data to unauthorized users. By default when no custom authorization filters specified, LocalRequestsOnlyAuthorizationFilter filter is being used to allow only local requests and prohibit all the remote...

GHSA-7RQ6-7GV8-C37H Missing Authorization with Default Settings in Dashboard UI

Dashboard UI in Hangfire.Core uses authorization filters to protect it from showing sensitive data to unauthorized users. By default when no custom authorization filters specified, LocalRequestsOnlyAuthorizationFilter filter is being used to allow only local requests and prohibit all the remote...