EUVD-2026-2922

Dask distributed is a distributed task scheduler for Dask. Prior to 2026.1.0, when Jupyter Lab, jupyter-server-proxy, and Dask distributed are all run together, it is possible to craft a URL which will result in code being executed by Jupyter due to a cross-side-scripting XSS bug in the Dask...

CVE-2018-10522

In CMS Made Simple CMSMS through 2.2.7, the "file view" operation in the admin dashboard contains a sensitive information disclosure vulnerability, exploitable by ordinary users, because the product exposes unrestricted access to the PHP filegetcontents function...

CVE-2018-10086

CMS Made Simple CMSMS through 2.2.7 contains an arbitrary code execution vulnerability in the admin dashboard because the implementation uses "eval'function testfunction'.rand" and it is possible to bypass certain restrictions on these "testfunction" functions...

CVE-2022-38817

Dapr Dashboard v0.1.0 through v0.10.0 is vulnerable to Incorrect Access Control that allows attackers to obtain sensitive data...

CVE-2023-25807

DataEase is an open source data visualization and analysis tool. When saving a dashboard on the DataEase platform saved data can be modified and store malicious code. This vulnerability can lead to the execution of malicious code stored by the attacker on the server side when the user accesses th...

PT-2026-3268

Name of the Vulnerable Software and Affected Versions Dask distributed versions prior to 2026.1.0 Description When Jupyter Lab, jupyter-server-proxy, and Dask distributed are used together, a crafted URL can lead to code execution by Jupyter due to a cross-site scripting XSS issue in the Dask...

College Notes Uploading System Code Issue Vulnerability

College Notes Uploading System is a college notes uploading system. College Notes Uploading System has a code issue vulnerability that stems from an unknown function in the /dashboard/userprofile.php file that mishandles the image parameter. An attacker can exploit this vulnerability to upload...

CVE-2013-10071

Nagios XI versions prior to 2012R1.6 are affected by CVE-2013-10071, a reflected cross-site scripting (XSS) vulnerability in the dashboard dashlet AJAX load functionality. The issue arises from insufficient validation/escaping of user-supplied input, potentially allowing an attacker to inject and...

Juniper Junos Space < 24.1R4 Multiple Vulnerabilities (JSA103140)

According to its self-reported version number, the remote Junos Space version is prior to 24.1R4. It is, therefore, affected by multiple vulnerabilities, including the following: - An Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Juniper...

EUVD-2014-8143

Malware in sbrugna...

EUVD-2021-11401

Malware in sbrugna...

EUVD-2020-26471

Malware in sbrugna...

EUVD-2021-11368

Malware in sbrugna...

EUVD-2005-1935

Malware in sbrugna...

EUVD-2021-11541

Malware in sbrugna...

EUVD-2018-2165

Malware in sbrugna...

EUVD-2019-8347

Malware in sbrugna...

EUVD-2021-14241

Malware in sbrugna...

EUVD-2021-11894

Malware in sbrugna...

CVE-2025-9913

CVE-2025-9913 describes a cross-site scripting issue where JavaScript can be executed from the address bar via the dashboard’s “Open in new Tab” button, enabling session hijacking. Affected product family includes SICK Enterprise Analytics and related SICK analytics dashboards (e.g., SICK Baggage...