1373 matches found
CVE-2026-101912 vulnerabilities
Vulnerabilities for packages: unleash, sqlpad, langfuse, actions-runner, kibana, unleash-proxy, renovate, lerna, opensearch-dashboards-fips, prism, commercial-gitlab-rails-ee, librechat, commercial-gitlab-rails-ee-fips, graalvm, code-server, langfuse-fips, wazuh-dashboard-fips, homepage,...
GHSA-H3MG-XC3C-68PW vulnerabilities
Vulnerabilities for packages: unleash, sqlpad, langfuse, actions-runner, kibana, unleash-proxy, renovate, lerna, opensearch-dashboards-fips, prism, commercial-gitlab-rails-ee, librechat, commercial-gitlab-rails-ee-fips, graalvm, code-server, langfuse-fips, wazuh-dashboard-fips, homepage,...
CVE-2026-102277 vulnerabilities
Vulnerabilities for packages: unleash, sqlpad, nextcloud-server, tensorflow-gpu-jupyter, langfuse, lambda-nodejs, dotstatsuite-supercore, arangodb, actions-runner, opentelemetry-auto-instrumentations-node, kibana, unleash-proxy, renovate, lerna, opensearch-dashboards-fips, jupyter-base-notebook,...
GHSA-J6R3-76F7-8JCV vulnerabilities
Vulnerabilities for packages: unleash, sqlpad, langfuse, actions-runner, kibana, unleash-proxy, renovate, lerna, opensearch-dashboards-fips, prism, commercial-gitlab-rails-ee, librechat, commercial-gitlab-rails-ee-fips, graalvm, code-server, langfuse-fips, wazuh-dashboard-fips, homepage,...
GHSA-Q2HR-2G5M-VWHR vulnerabilities
Vulnerabilities for packages: unleash, sqlpad, nextcloud-server, tensorflow-gpu-jupyter, langfuse, lambda-nodejs, dotstatsuite-supercore, arangodb, actions-runner, opentelemetry-auto-instrumentations-node, kibana, unleash-proxy, renovate, lerna, opensearch-dashboards-fips, jupyter-base-notebook,...
GHSA-QHR7-859C-M2P7 vulnerabilities
Vulnerabilities for packages: unleash, sqlpad, nextcloud-server, tensorflow-gpu-jupyter, langfuse, lambda-nodejs, dotstatsuite-supercore, arangodb, actions-runner, opentelemetry-auto-instrumentations-node, kibana, unleash-proxy, renovate, lerna, opensearch-dashboards-fips, jupyter-base-notebook,...
CVE-2026-102278 vulnerabilities
Vulnerabilities for packages: unleash, sqlpad, nextcloud-server, tensorflow-gpu-jupyter, langfuse, lambda-nodejs, dotstatsuite-supercore, arangodb, actions-runner, opentelemetry-auto-instrumentations-node, kibana, unleash-proxy, renovate, lerna, opensearch-dashboards-fips, jupyter-base-notebook,...
Rocky Linux 9 [CIQ] Security Update: grafana / grafana-debuginfo / grafana-debugsource / grafana-selinux (crlsa-2026_10226)
The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202610226 advisory. grafana: Grafana: Information disclosure of data-source passwords via public dashboards CVE-2026-27877 Tenable has extracted the preceding description block direct...
Rocky Linux 10.1 [CIQ] Security Update: grafana / grafana-debuginfo / grafana-debugsource / grafana-selinux (crlsa-2026_10223)
The Rocky Linux 10.1 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202610223 advisory. grafana: Grafana: Information disclosure of data-source passwords via public dashboards CVE-2026-27877 Tenable has extracted the preceding description block...
grafana: grafana: Information disclosure via unrevoked access tokens in paused shared dashboards
A flaw was found in Grafana. This vulnerability allows information disclosure because pausing a shared dashboard fails to revoke access tokens for endpoints serving initialization data. An unauthenticated remote attacker possessing the link to a paused dashboard can exploit this flaw to retrieve...
Rocky Linux 9.6 [TuxCare] Security Update: grafana / grafana-selinux (ALMALINUX9.6:CLSA-2026:1777944610)
The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1777944610 advisory. - When using public dashboards and direct data-sources, all direct data-sources' passwords are exposed despite not being used in dashboards...
AlmaLinux 9.6 [TuxCare] Security Update: grafana / grafana-selinux (ALMALINUX9.6:CLSA-2026:1777944610)
The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1777944610 advisory. - When using public dashboards and direct data-sources, all direct data-sources' passwords are exposed despite not being used in dashboards. ...
CVE-2026-56762 vulnerabilities
Vulnerabilities for packages: gemini-cli, opensearch-dashboards-fips, librechat, opensearch-dashboards, langfuse, langfuse-fips, kibana...
GHSA-55CM-P4WW-685G vulnerabilities
Vulnerabilities for packages: gemini-cli, opensearch-dashboards-fips, librechat, opensearch-dashboards, langfuse, langfuse-fips, kibana...
CVE-2026-53610 GLPI: Reflected XSS in dashboards
GLPI is a free asset and IT management software package. From 11.0.0 until 11.0.8, an attacker can craft a URL for a dashboard that reflects attacker-controlled markup without sufficient output encoding. A user who opens the crafted URL triggers reflected cross-site scripting in the dashboard. Th...
CVE-2026-53610 GLPI: Reflected XSS in dashboards
GLPI is a free asset and IT management software package. From 11.0.0 until 11.0.8, an attacker can craft a URL for a dashboard that reflects attacker-controlled markup without sufficient output encoding. A user who opens the crafted URL triggers reflected cross-site scripting in the dashboard. Th...
CVE-2026-53610 GLPI: Reflected XSS in dashboards
GLPI is a free asset and IT management software package. From 11.0.0 until 11.0.8, an attacker can craft a URL for a dashboard that reflects attacker-controlled markup without sufficient output encoding. A user who opens the crafted URL triggers reflected cross-site scripting in the dashboard. Th...
Graylog: Manager-to-Owner privilege escalation on saved searches and dashboards
Impact A vulnerability was found in Graylog's API endpoint for updating saved searches and dashboards. A user with edit permissions on a dashboard or saved search could grant owner permissions to an arbitrary account, which could then be used to delete the respective saved search or dashboard or ...
Missing Authorization
Overview org.graylog2:graylog2-server is a log management platform. Affected versions of this package are vulnerable to Missing Authorization through the update flow in ViewsResource for saved searches and dashboards. An attacker can gain owner-level control over a view by sending an update reque...
GHSA-M9C2-85GV-8XR5 Graylog: Manager-to-Owner privilege escalation on saved searches and dashboards
Impact A vulnerability was found in Graylog's API endpoint for updating saved searches and dashboards. A user with edit permissions on a dashboard or saved search could grant owner permissions to an arbitrary account, which could then be used to delete the respective saved search or dashboard or ...