989 matches found
GHSA-5GFM-WPXJ-WJGQ vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines, gitlab-rails-ce-fips, kubeflow-centraldashboard, kibana, opensearch-dashboards, argo-workflows, jitsucom-jitsu, arangodb, opensearch-dashboards-fips, kubeflow-katib, gitlab-rails-ce...
CVE-2025-12816 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines, gitlab-rails-ce-fips, kubeflow-centraldashboard, kibana, opensearch-dashboards, argo-workflows, jitsucom-jitsu, arangodb, opensearch-dashboards-fips, kubeflow-katib, gitlab-rails-ce...
GHSA-554W-WPV2-VW27 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines, gitlab-rails-ce-fips, kubeflow-centraldashboard, kibana, opensearch-dashboards, argo-workflows, jitsucom-jitsu, arangodb, opensearch-dashboards-fips, kubeflow-katib, gitlab-rails-ce...
CVE-2025-66030 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines, gitlab-rails-ce-fips, kubeflow-centraldashboard, kibana, opensearch-dashboards, argo-workflows, jitsucom-jitsu, arangodb, opensearch-dashboards-fips, kubeflow-katib, gitlab-rails-ce...
GHSA-65CH-62R8-G69G vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines, gitlab-rails-ce-fips, kubeflow-centraldashboard, kibana, opensearch-dashboards, argo-workflows, jitsucom-jitsu, arangodb, opensearch-dashboards-fips, kubeflow-katib, gitlab-rails-ce...
CVE-2025-66031 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines, gitlab-rails-ce-fips, kubeflow-centraldashboard, kibana, opensearch-dashboards, argo-workflows, jitsucom-jitsu, arangodb, opensearch-dashboards-fips, kubeflow-katib, gitlab-rails-ce...
CVE-2025-40890
A Stored Cross-Site Scripting vulnerability was discovered in the Dashboards functionality due to improper validation of an input parameter. An authenticated low-privilege user can craft a malicious dashboard containing a JavaScript payload and share it with victim users, or a victim can be...
EUVD-2025-199602
A Stored Cross-Site Scripting vulnerability was discovered in the Dashboards functionality due to improper validation of an input parameter. An authenticated low-privilege user can craft a malicious dashboard containing a JavaScript payload and share it with victim users, or a victim can be...
CVE-2025-40890
A Stored Cross-Site Scripting vulnerability was discovered in the Dashboards functionality due to improper validation of an input parameter. An authenticated low-privilege user can craft a malicious dashboard containing a JavaScript payload and share it with victim users, or a victim can be...
CVE-2025-40890
CVE-2025-40890 is a stored Cross-Site Scripting (XSS) vulnerability in the Dashboards feature of Nozomi Networks Guardian/CMC. The issue stems from improper validation of input parameters, enabling an authenticated, low-privilege user to craft and share a malicious dashboard containing JavaScript...
CVE-2025-40890 Stored Cross-Site Scripting (XSS) in Dashboards in Guardian/CMC before 25.4.0
A Stored Cross-Site Scripting vulnerability was discovered in the Dashboards functionality due to improper validation of an input parameter. An authenticated low-privilege user can craft a malicious dashboard containing a JavaScript payload and share it with victim users, or a victim can be...
CVE-2025-40890 Stored Cross-Site Scripting (XSS) in Dashboards in Guardian/CMC before 25.4.0
A Stored Cross-Site Scripting vulnerability was discovered in the Dashboards functionality due to improper validation of an input parameter. An authenticated low-privilege user can craft a malicious dashboard containing a JavaScript payload and share it with victim users, or a victim can be...
PT-2025-48036
Name of the Vulnerable Software and Affected Versions Dashboards affected versions not specified Description A Stored Cross-Site Scripting issue exists in the Dashboards functionality because of inadequate validation of an input parameter. An authenticated, low-privilege user can create a malicio...
Stored Cross-Site Scripting (XSS) in Dashboards in Guardian/CMC before 25.4.0
Summary A Stored Cross-Site Scripting vulnerability was discovered in the Dashboards functionality due to improper validation of an input parameter. Impact An authenticated low-privilege user can craft a malicious dashboard containing a JavaScript payload and share it with victim users, or a vict...
CVE-2025-47932
Combodo iTop is a web based IT service management tool. Versions prior to 2.7.13 and 3.2.2 are vulnerable to cross-site scripting when a dashboard is rendered via an AJAX call. Versions 2.7.13 and 3.2.2 sanitize the var responsible for the attack...
EUVD-2025-50809
Combodo iTop is a web based IT service management tool. Versions prior to 2.7.13 and 3.2.2 are vulnerable to cross-site scripting when a dashboard is rendered via an AJAX call. Versions 2.7.13 and 3.2.2 sanitize the var responsible for the attack...
CVE-2016-15049
Nagios Log Server versions prior to 1.4.2 are vulnerable to cross-site scripting XSS in the Dashboards section when rendering log entries in the Logs table. Untrusted log content was not safely encoded for the output context, allowing attacker-controlled data present in logs to execute script in...
CVE-2025-34273
Nagios Log Server versions prior to 2024R2.0.3 contain an incorrect authorization vulnerability that allows non-administrator users to delete global dashboards. The application did not correctly enforce authorization checks for the global dashboard deletion workflow, enabling lower-privileged use...
EUVD-2025-37220
Nagios Log Server versions prior to 2024R2.0.3 contain an incorrect authorization vulnerability that allows non-administrator users to delete global dashboards. The application did not correctly enforce authorization checks for the global dashboard deletion workflow, enabling lower-privileged use...
EUVD-2016-10798
Nagios Log Server versions prior to 1.4.2 are vulnerable to cross-site scripting XSS in the Dashboards section when rendering log entries in the Logs table. Untrusted log content was not safely encoded for the output context, allowing attacker-controlled data present in logs to execute script in...