Lucene search
+L

8201 matches found

Citrix
Citrix
added 2024/09/05 12:00 a.m.17 views

SSL Dashboard in ADM does not show TLS Information of SDX

Don't see TLS details of SDX NetScaler in ADM SSL Dashboard. We can see TLS details of all ADC's in the SSL Dashboard but for SDX it is missing...

7.1AI score
SaveExploits0
OSV
OSV
added 2024/09/03 8:15 p.m.13 views

CVE-2024-45180

SquaredUp DS for SCOM 6.2.1.11104 allows XSS...

5.4CVSS5.8AI score0.00245EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2024/09/03 12:00 a.m.12 views

Nginx+ Dashboard Unrestricted Access

Nginx Plus is a proprietary solution from F5 built on top of Nginx and featuring a dashboard called "Live Activity Monitoring". When accessible without authentication it may contain sensitives information that can be used by an attacker. No source data...

6.9AI score
SaveExploits0References1
CNNVD
CNNVD
added 2024/09/03 12:00 a.m.12 views

SquaredUp DS for SCOM 安全漏洞

SquaredUp DS for SCOM is a SquaredUp Dashboard Server for SCOM from SquaredUp, Inc. A security vulnerability exists in SquaredUp DS for SCOM version 6.2.1.11104 that stems from vulnerability to cross-site scripting attacks...

5.4CVSS6.1AI score0.00245EPSS
SaveExploits0References3
OSV
OSV
added 2024/09/02 12:15 p.m.18 views

CVE-2024-7938

A stored Cross-site Scripting XSS vulnerability affecting 3DDashboard in 3DSwymer from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser session...

5.4CVSS6AI score0.00313EPSS
SaveExploits0References1
OSV
OSV
added 2024/09/02 12:15 p.m.16 views

CVE-2024-7932

A stored Cross-site Scripting XSS vulnerability affecting 3DDashboard in 3DSwymer on Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser session...

5.4CVSS6.1AI score0.00313EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/09/02 12:00 a.m.9 views

PT-2024-38697 · 3Dswymer +1 · 3Dswymer +1

Name of the Vulnerable Software and Affected Versions: 3DSwymer version 3DEXPERIENCE R2024x Description: A stored Cross-site Scripting XSS vulnerability affecting 3DDashboard in 3DSwymer on Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in a user's browser session...

8.7CVSS6.3AI score0.00313EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
added 2024/09/02 12:00 a.m.10 views

PT-2024-38703 · 3Dswymer +1 · 3Dswymer +1

Name of the Vulnerable Software and Affected Versions: 3DSwymer versions 3DEXPERIENCE R2023x through 3DEXPERIENCE R2024x Description: A stored Cross-site Scripting XSS vulnerability affects 3DDashboard in 3DSwymer, allowing an attacker to execute arbitrary script code in a user's browser session...

8.7CVSS6.4AI score0.00313EPSS
SaveExploits0References8
NVD
NVD
added 2024/08/30 11:15 p.m.62 views

CVE-2024-6586

Lightdash version 0.1024.6 allows users with the necessary permissions, such as Administrator or Editor, to create and share dashboards. A dashboard that contains HTML elements which point to a threat actor controlled source can trigger an SSRF request when exported, via a POST request to...

7.3CVSS0.01933EPSS
SaveExploits0References6
OSV
OSV
added 2024/08/30 10:25 p.m.10 views

CVE-2024-6586

Lightdash version 0.1024.6 allows users with the necessary permissions, such as Administrator or Editor, to create and share dashboards. A dashboard that contains HTML elements which point to a threat actor controlled source can trigger an SSRF request when exported, via a POST request to...

7.3CVSS6.8AI score
SaveExploits0References8
Vulnrichment
Vulnrichment
added 2024/08/30 10:25 p.m.10 views

CVE-2024-6586

Lightdash version 0.1024.6 allows users with the necessary permissions, such as Administrator or Editor, to create and share dashboards. A dashboard that contains HTML elements which point to a threat actor controlled source can trigger an SSRF request when exported, via a POST request to...

7.1AI score0.01933EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2024/08/30 10:25 p.m.281 views

CVE-2024-6586

Lightdash version 0.1024.6 allows users with the necessary permissions, such as Administrator or Editor, to create and share dashboards. A dashboard that contains HTML elements which point to a threat actor controlled source can trigger an SSRF request when exported, via a POST request to...

0.01933EPSS
SaveExploits0References6
CVE
CVE
added 2024/08/30 10:17 p.m.59 views

CVE-2024-6585

CVE-2024-6585 affects Lightdash v0.1024.6, with multiple stored XSS vulnerabilities in the markdown dashboard and dashboard comment functionality. The flaws allow remote authenticated threat actors to store and execute malicious JavaScript in the context of a user session. The PT-2024-37737 advis...

5.4CVSS5.9AI score0.00575EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2024/08/30 12:00 a.m.12 views

PT-2024-37737 · Lightdash · Lightdash

Name of the Vulnerable Software and Affected Versions: Lightdash version 0.1024.6 Description: Multiple stored cross-site scripting XSS vulnerabilities in the markdown dashboard and dashboard comment functionality allow remote authenticated threat actors to inject malicious scripts into vulnerabl...

5.4CVSS5.6AI score0.00575EPSS
SaveExploits0References15
CNNVD
CNNVD
added 2024/08/30 12:00 a.m.8 views

Lightdash 跨站脚本漏洞

Lightdash is a visual data analysis tool from Lightdash open source. A cross-site scripting vulnerability exists in Lightdash version 0.1024.6, which stems from a vulnerability in its markdown dashboard and dashboard commenting functionality that is susceptible to stored cross-site scripting XSS...

5.4CVSS5.6AI score0.00575EPSS
SaveExploits0References10
CNNVD
CNNVD
added 2024/08/30 12:00 a.m.10 views

Lightdash 安全漏洞

Lightdash is a visual data analysis tool from Lightdash open source. A security vulnerability exists in Lightdash version 0.1024.6, which stems from a server-side request forgery SSRF issue that could allow a threat participant to obtain a user's session token when the user exports a dashboard th...

7.3CVSS6.6AI score0.01933EPSS
SaveExploits0References8
OSV
OSV
added 2024/08/26 9:15 p.m.12 views

CVE-2024-43325

Cross-Site Request Forgery CSRF vulnerability in Naiche Dark Mode for WP Dashboard.This issue affects Dark Mode for WP Dashboard: from n/a through 1.2.3...

8.8CVSS5.8AI score0.00208EPSS
SaveExploits0References1
NVD
NVD
added 2024/08/26 9:15 p.m.37 views

CVE-2024-43325

Cross-Site Request Forgery CSRF vulnerability in Naiche Dark Mode for WP Dashboard.This issue affects Dark Mode for WP Dashboard: from n/a through 1.2.3...

8.8CVSS0.00208EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/08/26 8:35 p.m.25 views

CVE-2024-43325 WordPress Dark Mode for WP Dashboard plugin <= 1.2.3 - Cross Site Request Forgery vulnerability

Cross-Site Request Forgery CSRF vulnerability in Naiche Dark Mode for WP Dashboard.This issue affects Dark Mode for WP Dashboard: from n/a through 1.2.3...

4.3CVSS7AI score0.00208EPSS
SaveExploits0References1
CVE
CVE
added 2024/08/26 8:35 p.m.81 views

CVE-2024-43325

CVE-2024-43325 describes a CSRF vulnerability in the Dark Mode for WP Dashboard plugin for WordPress, affecting versions up to 1.2.3. The issue allows unauthorized actions to be performed byAuthenticated users via CSRF, with the plugin vulnerable to cross-site request forgery. Public references c...

8.8CVSS7AI score0.00208EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder