CVE-2024-32726: Exposure of Sensitive Information to an Unauthorized Actor

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in vinoth06. Frontend Dashboard.This issue affects Frontend Dashboard: from n/a through 2.2.2...

CVE-2024-28963: Exposure of Sensitive Information to an Unauthorized Actor

Telemetry Dashboard v1.0.0.7 for Dell ThinOS 2402 contains a sensitive information disclosure vulnerability. An unauthenticated user with local access to the device could exploit this vulnerability to read sensitive proxy settings information...

Security Bulletin: IBM Datapower Operations Dashboard could be vulnerable to a denial of service CVE-2023-51074

Summary json-path is used by the IBM Datapower Operations Dashboard to query JSON documents. Vulnerability Details CVEID:CVE-2023-51074 DESCRIPTION: json-path is vulnerable to a denial of service, caused by a stack-based buffer overflow in the Criteria.parse method. By sending a specially crafted...

WordPress Frontend Dashboard plugin <= 2.2.2 - Sensitive Data Exposure on PII vulnerability

Sensitive Data Exposure on PII vulnerability discovered by Emili Castells Patchstack Alliance in WordPress Plugin Frontend Dashboard versions = 2.2.2...

WordPress Frontend Dashboard Plugin <= 2.2.2 is vulnerable to Sensitive Data Exposure

Software Frontend Dashboard Type Plugin Vulnerable versions = 2.2.2 Fixed in 2.2.4 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2024-32726 Patch priority High CVSS severity High 7.5 Developer Claim ownership PSID f88db22e1e34 Credits Emili Castells...

Ray Dashboard Detection

Binary data raydashboarddetect.nbin...

Ray Dashboard Job RCE (CVE-2023-48022)

Binary data rayCVE-2023-48022.nbin...

CVE-2023-38511

iTop is an IT service management platform. Dashboard editor : can load multiple files and URL, and full path disclosure on dashboard config file. This vulnerability is fixed in 3.0.4 and 3.1.1...

CVE-2023-38511 iTop Dashboard editor vulnerable dashboard config file parameter

iTop is an IT service management platform. Dashboard editor : can load multiple files and URL, and full path disclosure on dashboard config file. This vulnerability is fixed in 3.0.4 and 3.1.1...

CVE-2023-38511

The CVE-2023-38511 entry concerns iTop, an IT service management platform. Affected component: the dashboard editor, which can load multiple files/URLs and previously disclosed full paths in the dashboard config file. Connected sources describe concrete issues including path disclosure and a sepa...

CVE-2023-38511

iTop is an IT service management platform. Dashboard editor : can load multiple files and URL, and full path disclosure on dashboard config file. This vulnerability is fixed in 3.0.4 and 3.1.1...

CVE-2023-38511 iTop Dashboard editor vulnerable dashboard config file parameter

iTop is an IT service management platform. Dashboard editor : can load multiple files and URL, and full path disclosure on dashboard config file. This vulnerability is fixed in 3.0.4 and 3.1.1...

CVE-2024-31376

Cross-Site Request Forgery CSRF vulnerability in Andrew Dashboard To-Do List dashboard-to-do-list.This issue affects Dashboard To-Do List: from n/a through = 1.3.1...

CVE-2024-31376 WordPress Dashboard To-Do List plugin <= 1.3.1 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Andrew Dashboard To-Do List dashboard-to-do-list.This issue affects Dashboard To-Do List: from n/a through = 1.3.1...

CVE-2024-31376 WordPress Dashboard To-Do List plugin <= 1.3.1 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Andrew Dashboard To-Do List dashboard-to-do-list.This issue affects Dashboard To-Do List: from n/a through = 1.3.1...

CVE-2024-31376

CVE-2024-31376 is a CSRF flaw in the WordPress plugin Dashboard To-Do List by Andrew Rapps, affecting the plugin up to version 1.3.1. The RedHat/Wordfence entries indicate the vulnerability path involves ardtdw_widgetupdate() and allows Cross-Site Request Forgery to perform actions on behalf of a...

Cross Site Scripting (XSS)

mautic/core is vulnerable to Cross Site Scripting XSS. The vulnerability is due to to insufficient input validation within the notification feature when saving Dashboards, allowing users to inject and execute JavaScript code...

CVE-2024-31376: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Andrew Dashboard To-Do List dashboard-to-do-list.This issue affects Dashboard To-Do List: from n/a through = 1.3.1...

PT-2024-24022

Name of the Vulnerable Software and Affected Versions Andrew Rapps Dashboard To-Do List versions 1.3.1 and earlier Description A Cross-Site Request Forgery CSRF issue affects the Dashboard To-Do List, allowing unauthorized actions to be performed on behalf of a user without their knowledge...

iTop 路径遍历漏洞

iTop is a platform that provides all the resources needed to optimize iTop. A security vulnerability exists in iTop versions 3.0.4 and 3.1.1 that stems from a flaw in the dashboard editor. An attacker exploiting this vulnerability could load multiple files and URLs, as well as expose the full pat...