PT-2024-8626 · Cisco · Cisco Nexus Dashboard

Name of the Vulnerable Software and Affected Versions: Cisco Nexus Dashboard affected versions not specified Description: A vulnerability in the REST API endpoints of Cisco Nexus Dashboard could allow an authenticated, low-privileged, remote attacker to perform limited Administrator actions on an...

Cisco Nexus Dashboard 安全漏洞

Cisco Nexus Dashboard is a single console from Cisco, Inc. It can simplify the operation and management of data center networks. A security vulnerability exists in Cisco Nexus Dashboard that stems from insufficient validation of command parameters. It could allow an authenticated remote attacker...

PT-2024-6593 · Cisco · Cisco Nexus Dashboard Fabric Controller

Name of the Vulnerable Software and Affected Versions: Cisco Nexus Dashboard Fabric Controller versions 11.5 and earlier Description: A vulnerability in the REST API and web UI of Cisco Nexus Dashboard Fabric Controller could allow an authenticated, low-privileged, remote attacker to perform a...

Cisco Nexus Dashboard和Nexus Dashboard Fabric Controller 安全漏洞

Cisco Nexus Dashboard and Cisco Nexus Dashboard Fabric Controller are both products of Cisco, Inc.Cisco Nexus Dashboard is a single console. The Cisco Nexus Dashboard is a single console that simplifies the operation and management of data center networks.The Cisco Nexus Dashboard Fabric Controll...

Cisco Nexus Dashboard 安全漏洞

Cisco Nexus Dashboard is a single console from Cisco, Inc. It can simplify the operation and management of data center networks. A security vulnerability exists in Cisco Nexus Dashboard that stems from improper storage of sensitive information in configuration-only and full backup files. Allowing...

CVE-2024-46475

A reflected cross-site scripting XSS vulnerability on the homepage of Metronic Admin Dashboard Template v2.0 allows attackers to execute arbitrary code in the context of a user's browser via injecting a crafted payload...

Metronic Admin Dashboard Template 安全漏洞

Metronic Admin Dashboard Template is a responsive website backend administration template from Metronic based on the Bootstrap framework. A security vulnerability exists in Metronic Admin Dashboard Template version v2.0, which stems from the presence of a Reflective Cross-Site Scripting XSS...

Moderate: grafana security update

Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fixes: net/http: Denial of service due to improper 100-continue handling in net/http CVE-2024-24791 For more details about the security issues, including the impact, a CVSS score...

CVE-2024-46475

CVE-2024-46475 is a reflected XSS vulnerability affecting Metronic Admin Dashboard Template v2.0 (homepage). The issue enables an attacker to execute arbitrary code in the context of a user’s browser by injecting a crafted payload. According to the CVSS metrics, the vulnerability has a base score...

MAL-2024-8999 Malicious code in @helvetia-italia/ng-selly-lib-operator-dashboard (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1fd81a66a867d353506b97a895921b666f5831fa169eb6cef4e07ef98e259328 The OpenSSF Package Analysis project identified '@helvetia-italia/ng-selly-lib-operator-dashboard' @ 10.20.37 npm as malicious. It is considered...

RHEL 9 : grafana (RHSA-2024:7202)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2024:7202 advisory. Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fixes: encoding/gob: golang:...

Responsive Binary mlm 3.2.0 SQL Injection

==================================================================================================================================== | Title : Responsive Binary mlm 3.2.0 Auth By PAss Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefox 130.0.0 64 bits...

Important: Red Hat Security Advisory: grafana security update

An update for grafana is now available for Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

ALSA-2024:6947 Important: grafana security update

Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fixes: encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion CVE-2024-34156 For more details...

Exploit for Authentication Bypass by Spoofing in Zabbix

CVE-2022-23131 Zabbix SAML Authentication Exploit This Python...

CodeCanyon RISE Ultimate Project Manager SQL注入漏洞

CodeCanyon RISE Ultimate Project Manager is a project management and CRM software from CodeCanyon Corporation. A SQL injection vulnerability exists in CodeCanyon RISE Ultimate Project Manager version 3.7.0, which stems from the parameter id of the file /index.php/dashboard/save that can lead to S...

Emergency Ambulance Hiring Portal 1.0 SQL Injection

==================================================================================================================================== | Title : Emergency Ambulance Hiring Portal 1.0 Auth By Pass Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefox 130.0...

Auto/Taxi Stand Management System 1.0 SQL Injection

==================================================================================================================================== | Title : Auto/Taxi Stand Management System 1.0 Auth By Pass Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefox 130.0...

CVE-2024-39926

An issue was discovered in Vaultwarden formerly BitwardenRS 1.30.3. A stored cross-site scripting XSS or, due to the default CSP, HTML injection vulnerability has been discovered in the admin dashboard. This potentially allows an authenticated attacker to inject malicious code into the dashboard,...

CVE-2024-31414

CVE-2024-31414 affects Eaton Foreseer software (WebView dashboard customization). The server-side input sanitization is insufficient, allowing injection and potential execution of malicious scripts when exploited. Public references confirm the vulnerability but do not provide explicit exploit det...