Lucene search
K

8 matches found

RedhatCVE
RedhatCVE
added 2026/05/29 8:13 p.m.7 views

CVE-2026-33462

A path traversal vulnerability was identified in Kibana's dashboard management functionality. An authenticated user with limited permissions could create a dashboard with a specially crafted identifier. When an administrator subsequently attempts to delete this dashboard through the Kibana...

7.3CVSS5.8AI score0.00026EPSS
Exploits0References1
CVE
CVE
added 2025/10/30 9:25 p.m.10 views

CVE-2025-34277

CVE-2025-34277 affects Nagios Log Server versions prior to 2024R1.3.1, where a code injection vulnerability arises from inadequate validation of dashboard ID values forwarded to an internal API. An attacker able to supply crafted dashboard ID values can cause the system to execute attacker-contro...

9.8CVSS8AI score0.00422EPSS
Exploits0References3Affected Software1
CNNVD
CNNVD
added 2025/10/30 12:0 a.m.1 views

Nagios Log Server 安全漏洞

Nagios Log Server is a suite of centralized log management, monitoring, and analysis software from Nagios Corporation. A security vulnerability exists in Nagios Log Server versions prior to 2024R1.3.1, which stems from not properly validating dashboard ID values and could lead to the execution of...

9.8CVSS6.8AI score0.00422EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2021-16250

Malware in sbrugna...

4.3CVSS4.7AI score0.00311EPSS
Exploits0References3
OSV
OSV
added 2022/04/27 4:15 p.m.1 views

CVE-2021-29776

IBM QRadar SIEM 7.3, 7.4, and 7.5 could allow an authenticated user to obtain sensitive information from another user's dashboard providing the dashboard ID of that user. IBM X-Force ID: 203030...

4.3CVSS6.2AI score
Exploits0References2
CNVD
CNVD
added 2020/06/08 12:0 a.m.3 views

Combodo iTop Cross-Site Scripting Vulnerability (CNVD-2020-35968)

Combodo iTop is a French company Combodo ITIL-based development and for the daily operation of the IT environment of open source Web applications. The program provides incident management, configuration management and problem management. A cross-site scripting vulnerability exists in the id of th...

6.1CVSS6.3AI score0.00359EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2019/10/07 12:0 a.m.2 views

PT-2019-5822 · Zabbix +1 · Zabbix +1

Name of the Vulnerable Software and Affected Versions: Zabbix versions prior to 4.4 Description: An issue was discovered in "zabbix.php?action=dashboard.view&dashboardid=1" that allows an attacker to bypass the login page and access the dashboard page anonymously. The attacker can then create a...

9.8CVSS6.5AI score0.93689EPSS
Exploits6References50
CNVD
CNVD
added 2018/04/08 12:0 a.m.3 views

Foreman SQL Injection Vulnerability

Foreman is a complete lifecycle management tool for physical and virtual servers. A SQL injection vulnerability exists in Foreman versions prior to 1.16.1. The vulnerability arises due to an input validation flaw in the id field in Foreman's dashboard controller. An attacker can exploit the...

6.5CVSS7.7AI score0.00315EPSS
Exploits0References1
Rows per page
Query Builder