Checkmk 安全漏洞

Checkmk is an IT monitoring platform developed by Checkmk Corporation. Vulnerabilities exist in versions of Checkmk prior to 2.2.0, 2.3.0p46, 2.4.0p25, and 2.5.0b3. These vulnerabilities stem from insufficient cleanup of title links in dashboard widgets. An attacker with permission to create...

CVE-2026-22643

In Grafana, an excessively long dashboard title or panel name will cause Chromium browsers to become unresponsive due to Improper Input Validation vulnerability in Grafana. This issue affects Grafana: before 11.6.2 and is fixed in 11.6.2 and higher...

CVE-2026-22643

...

CVE-2026-22643

Grafana contains an Improper Input Validation vulnerability where excessively long dashboard titles or panel names can render Chromium browsers unresponsive. Affects Grafana versions before 11.6.2; fixed in 11.6.2 and newer. Remediation: update to Grafana 11.6.2+.

EUVD-2025-18570

Malicious code in bioql PyPI...

GO-2025-3766 Grafana long dashboard title or panel name causes unresponsives in github.com/grafana/grafana

Grafana long dashboard title or panel name causes unresponsives in github.com/grafana/grafana. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive reports from vulnerability...

BIT-GRAFANA-2025-1088 Very long unicode dashboard title or panel name can hang the frontend

In Grafana, an excessively long dashboard title or panel name will cause Chromium browsers to become unresponsive due to Improper Input Validation vulnerability in Grafana. This issue affects Grafana: before 11.6.2 and is fixed in 11.6.2 and higher...

CVE-2023-34637

A stored cross-site scripting XSS vulnerability in IsarNet AG IsarFlow v5.23 allows authenticated attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the dashboard title parameter in the IsarFlow Portal...

CVE-2023-34637

A stored cross-site scripting XSS vulnerability in IsarNet AG IsarFlow v5.23 allows authenticated attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the dashboard title parameter in the IsarFlow Portal...

CVE-2023-34637

A stored cross-site scripting XSS vulnerability in IsarNet AG IsarFlow v5.23 allows authenticated attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the dashboard title parameter in the IsarFlow Portal...

CVE-2023-34637

A stored cross-site scripting XSS vulnerability in IsarNet AG IsarFlow v5.23 allows authenticated attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the dashboard title parameter in the IsarFlow Portal...

PT-2023-24961 · Isarnet Ag · Isarflow

Name of the Vulnerable Software and Affected Versions: IsarNet AG IsarFlow version 5.23 Description: A stored cross-site scripting XSS vulnerability allows authenticated attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the dashboard title parameter in the...