940 matches found
CVE-2024-5706 Hitachi Vantara Pentaho Data Integration & Analytics - Improper Control of Resource Identifiers ('Resource Injection')
The product receives input from an upstream component, but it does not restrict or incorrectly restricts the input before it is used as an identifier for a resource that may be outside the intended sphere of control. CWE-99 Hitachi Vantara Pentaho Data Integration & Analytics versions before...
CVE-2024-54160
dashboards-reporting aka Dashboards Reports before 2.19.0.0, as shipped in OpenSearch before 2.19, allows XSS because Markdown is not sanitized when previewing a header or footer...
CVE-2024-54160
dashboards-reporting aka Dashboards Reports before 2.19.0.0, as shipped in OpenSearch before 2.19, allows XSS because Markdown is not sanitized when previewing a header or footer...
CVE-2025-26360
A CWE-306 "Missing Authentication for Critical Function" in maxprofile/persistance/routes.lua in Q-Free MaxTime less than or equal to version 2.11.0 allows an unauthenticated remote attacker to delete dashboards via crafted HTTP requests...
CVE-2025-26360
A CWE-306 "Missing Authentication for Critical Function" in maxprofile/persistance/routes.lua in Q-Free MaxTime less than or equal to version 2.11.0 allows an unauthenticated remote attacker to delete dashboards via crafted HTTP requests...
CVE-2025-26360
CVE-2025-26360 describes a CWE-306 vulnerability: Missing Authentication for Critical Function in the Q-Free MaxTime product. The flaw resides in maxprofile/persistance/routes.lua and affects MaxTime versions less than or equal to 2.11.0, enabling an unauthenticated remote attacker to delete dash...
CVE-2025-26360
A CWE-306 "Missing Authentication for Critical Function" in maxprofile/persistance/routes.lua in Q-Free MaxTime less than or equal to version 2.11.0 allows an unauthenticated remote attacker to delete dashboards via crafted HTTP requests...
CVE-2024-54160
CVE-2024-54160 affects OpenSearch Dashboards Reports (dashboards-reporting) prior to version 2.19.0.0 (shipped in OpenSearch
OpenSearch Dashboards Reports 安全漏洞
OpenSearch Dashboards Reports is an OpenSearch open source application. It is used to export and automate PNG, PDF and CSV reports in OpenSearch Dashboard. A security vulnerability exists in OpenSearch Dashboards Reports version 2.19, which stems from the Dashboards Reports module containing a...
CVE-2024-54160
dashboards-reporting aka Dashboards Reports before 2.19.0.0, as shipped in OpenSearch before 2.19, allows XSS because Markdown is not sanitized when previewing a header or footer...
PT-2025-6715 · Unknown +2 · Opensearch +3
Name of the Vulnerable Software and Affected Versions: dashboards-reporting versions prior to 2.19.0.0 OpenSearch versions prior to 2.19 Description: The issue allows cross-site scripting XSS because Markdown is not sanitized when previewing a header or footer. This occurs in dashboards-reporting...
CVE-2024-54160
dashboards-reporting aka Dashboards Reports before 2.19.0.0, as shipped in OpenSearch before 2.19, allows XSS because Markdown is not sanitized when previewing a header or footer...
CVE-2024-54160
dashboards-reporting aka Dashboards Reports before 2.19.0.0, as shipped in OpenSearch before 2.19, allows XSS because Markdown is not sanitized when previewing a header or footer...
GHSA-76P7-773F-R4Q5 vulnerabilities
Vulnerabilities for packages: opensearch-dashboards, arangodb, opensearch-dashboards-fips, drupal...
CVE-2024-11831 vulnerabilities
Vulnerabilities for packages: opensearch-dashboards, arangodb, opensearch-dashboards-fips, drupal...
The vulnerability of the software for managing business processes in IBM Cognos Dashboards in Cloud Pak for Data lies in an uncontrolled element of the search process, allowing a perpetrator to increase their privileges.
The vulnerability of the IBM Cognos Dashboards management software in Cloud Pak for Data is related to an uncontrollable element in the search process. Exploiting this vulnerability could allow a malicious actor to increase their privileges...
CVE-2024-41739
IBM Cognos Dashboards 4.0.7 and 5.0.0 on Cloud Pak for Data could allow a remote attacker to perform unauthorized actions due to dependency confusion...
PT-2025-5268 · Unknown · Tuleap Community Edition +1
Name of the Vulnerable Software and Affected Versions: Tuleap Community Edition versions prior to 16.3.99.1737562605 Tuleap Enterprise Edition versions prior to 16.3-5 Tuleap Enterprise Edition versions prior to 16.2-7 Description: Tuleap is an Open Source Suite to improve management of software...