8201 matches found
SSL Dashboard in ADM does not show TLS Information of SDX
Don't see TLS details of SDX NetScaler in ADM SSL Dashboard. We can see TLS details of all ADC's in the SSL Dashboard but for SDX it is missing...
CVE-2024-45180
SquaredUp DS for SCOM 6.2.1.11104 allows XSS...
Nginx+ Dashboard Unrestricted Access
Nginx Plus is a proprietary solution from F5 built on top of Nginx and featuring a dashboard called "Live Activity Monitoring". When accessible without authentication it may contain sensitives information that can be used by an attacker. No source data...
SquaredUp DS for SCOM 安全漏洞
SquaredUp DS for SCOM is a SquaredUp Dashboard Server for SCOM from SquaredUp, Inc. A security vulnerability exists in SquaredUp DS for SCOM version 6.2.1.11104 that stems from vulnerability to cross-site scripting attacks...
CVE-2024-7938
A stored Cross-site Scripting XSS vulnerability affecting 3DDashboard in 3DSwymer from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser session...
CVE-2024-7932
A stored Cross-site Scripting XSS vulnerability affecting 3DDashboard in 3DSwymer on Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser session...
PT-2024-38697 · 3Dswymer +1 · 3Dswymer +1
Name of the Vulnerable Software and Affected Versions: 3DSwymer version 3DEXPERIENCE R2024x Description: A stored Cross-site Scripting XSS vulnerability affecting 3DDashboard in 3DSwymer on Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in a user's browser session...
PT-2024-38703 · 3Dswymer +1 · 3Dswymer +1
Name of the Vulnerable Software and Affected Versions: 3DSwymer versions 3DEXPERIENCE R2023x through 3DEXPERIENCE R2024x Description: A stored Cross-site Scripting XSS vulnerability affects 3DDashboard in 3DSwymer, allowing an attacker to execute arbitrary script code in a user's browser session...
CVE-2024-6586
Lightdash version 0.1024.6 allows users with the necessary permissions, such as Administrator or Editor, to create and share dashboards. A dashboard that contains HTML elements which point to a threat actor controlled source can trigger an SSRF request when exported, via a POST request to...
CVE-2024-6586
Lightdash version 0.1024.6 allows users with the necessary permissions, such as Administrator or Editor, to create and share dashboards. A dashboard that contains HTML elements which point to a threat actor controlled source can trigger an SSRF request when exported, via a POST request to...
CVE-2024-6586
Lightdash version 0.1024.6 allows users with the necessary permissions, such as Administrator or Editor, to create and share dashboards. A dashboard that contains HTML elements which point to a threat actor controlled source can trigger an SSRF request when exported, via a POST request to...
CVE-2024-6586
Lightdash version 0.1024.6 allows users with the necessary permissions, such as Administrator or Editor, to create and share dashboards. A dashboard that contains HTML elements which point to a threat actor controlled source can trigger an SSRF request when exported, via a POST request to...
CVE-2024-6585
CVE-2024-6585 affects Lightdash v0.1024.6, with multiple stored XSS vulnerabilities in the markdown dashboard and dashboard comment functionality. The flaws allow remote authenticated threat actors to store and execute malicious JavaScript in the context of a user session. The PT-2024-37737 advis...
PT-2024-37737 · Lightdash · Lightdash
Name of the Vulnerable Software and Affected Versions: Lightdash version 0.1024.6 Description: Multiple stored cross-site scripting XSS vulnerabilities in the markdown dashboard and dashboard comment functionality allow remote authenticated threat actors to inject malicious scripts into vulnerabl...
Lightdash 跨站脚本漏洞
Lightdash is a visual data analysis tool from Lightdash open source. A cross-site scripting vulnerability exists in Lightdash version 0.1024.6, which stems from a vulnerability in its markdown dashboard and dashboard commenting functionality that is susceptible to stored cross-site scripting XSS...
Lightdash 安全漏洞
Lightdash is a visual data analysis tool from Lightdash open source. A security vulnerability exists in Lightdash version 0.1024.6, which stems from a server-side request forgery SSRF issue that could allow a threat participant to obtain a user's session token when the user exports a dashboard th...
CVE-2024-43325
Cross-Site Request Forgery CSRF vulnerability in Naiche Dark Mode for WP Dashboard.This issue affects Dark Mode for WP Dashboard: from n/a through 1.2.3...
CVE-2024-43325
Cross-Site Request Forgery CSRF vulnerability in Naiche Dark Mode for WP Dashboard.This issue affects Dark Mode for WP Dashboard: from n/a through 1.2.3...
CVE-2024-43325 WordPress Dark Mode for WP Dashboard plugin <= 1.2.3 - Cross Site Request Forgery vulnerability
Cross-Site Request Forgery CSRF vulnerability in Naiche Dark Mode for WP Dashboard.This issue affects Dark Mode for WP Dashboard: from n/a through 1.2.3...
CVE-2024-43325
CVE-2024-43325 describes a CSRF vulnerability in the Dark Mode for WP Dashboard plugin for WordPress, affecting versions up to 1.2.3. The issue allows unauthorized actions to be performed byAuthenticated users via CSRF, with the plugin vulnerable to cross-site request forgery. Public references c...