983 matches found
GHSA-2JCG-QQMG-46Q6 vulnerabilities
Vulnerabilities for packages: kubeflow-katib...
GHSA-2JCG-QQMG-46Q6 vulnerabilities
Vulnerabilities for packages: opensearch-dashboards, opensearch-dashboards-fips, kubeflow-katib...
CVE-2024-5706
CVE-2024-5706 affects Hitachi Vantara Pentaho Data Integration & Analytics. Versions before 10.2.0.0 and 9.3.0.9, including 8.3.x, do not restrict JNDI identifiers when creating Community Dashboards, allowing control of system-level data sources and potentially enabling access to or modification ...
CVE-2024-5706 Hitachi Vantara Pentaho Data Integration & Analytics - Improper Control of Resource Identifiers ('Resource Injection')
The product receives input from an upstream component, but it does not restrict or incorrectly restricts the input before it is used as an identifier for a resource that may be outside the intended sphere of control. CWE-99 Hitachi Vantara Pentaho Data Integration & Analytics versions before...
CVE-2024-54160
dashboards-reporting aka Dashboards Reports before 2.19.0.0, as shipped in OpenSearch before 2.19, allows XSS because Markdown is not sanitized when previewing a header or footer...
CVE-2024-54160
dashboards-reporting aka Dashboards Reports before 2.19.0.0, as shipped in OpenSearch before 2.19, allows XSS because Markdown is not sanitized when previewing a header or footer...
CVE-2025-26360
A CWE-306 "Missing Authentication for Critical Function" in maxprofile/persistance/routes.lua in Q-Free MaxTime less than or equal to version 2.11.0 allows an unauthenticated remote attacker to delete dashboards via crafted HTTP requests...
CVE-2025-26360
A CWE-306 "Missing Authentication for Critical Function" in maxprofile/persistance/routes.lua in Q-Free MaxTime less than or equal to version 2.11.0 allows an unauthenticated remote attacker to delete dashboards via crafted HTTP requests...
CVE-2025-26360
CVE-2025-26360 describes a CWE-306 vulnerability: Missing Authentication for Critical Function in the Q-Free MaxTime product. The flaw resides in maxprofile/persistance/routes.lua and affects MaxTime versions less than or equal to 2.11.0, enabling an unauthenticated remote attacker to delete dash...
CVE-2025-26360
A CWE-306 "Missing Authentication for Critical Function" in maxprofile/persistance/routes.lua in Q-Free MaxTime less than or equal to version 2.11.0 allows an unauthenticated remote attacker to delete dashboards via crafted HTTP requests...
CVE-2024-54160
CVE-2024-54160 affects OpenSearch Dashboards Reports (dashboards-reporting) prior to version 2.19.0.0 (shipped in OpenSearch
CVE-2024-54160
dashboards-reporting aka Dashboards Reports before 2.19.0.0, as shipped in OpenSearch before 2.19, allows XSS because Markdown is not sanitized when previewing a header or footer...
OpenSearch Dashboards Reports 安全漏洞
OpenSearch Dashboards Reports is an OpenSearch open source application. It is used to export and automate PNG, PDF and CSV reports in OpenSearch Dashboard. A security vulnerability exists in OpenSearch Dashboards Reports version 2.19, which stems from the Dashboards Reports module containing a...
PT-2025-6715 · Unknown +2 · Opensearch +3
Name of the Vulnerable Software and Affected Versions: dashboards-reporting versions prior to 2.19.0.0 OpenSearch versions prior to 2.19 Description: The issue allows cross-site scripting XSS because Markdown is not sanitized when previewing a header or footer. This occurs in dashboards-reporting...
CVE-2024-54160
dashboards-reporting aka Dashboards Reports before 2.19.0.0, as shipped in OpenSearch before 2.19, allows XSS because Markdown is not sanitized when previewing a header or footer...
CVE-2024-54160
dashboards-reporting aka Dashboards Reports before 2.19.0.0, as shipped in OpenSearch before 2.19, allows XSS because Markdown is not sanitized when previewing a header or footer...
GHSA-76P7-773F-R4Q5 vulnerabilities
Vulnerabilities for packages: arangodb, opensearch-dashboards-fips, opensearch-dashboards, drupal...
CVE-2024-11831 vulnerabilities
Vulnerabilities for packages: arangodb, opensearch-dashboards-fips, opensearch-dashboards, drupal...
The vulnerability of the software for managing business processes in IBM Cognos Dashboards in Cloud Pak for Data lies in an uncontrolled element of the search process, allowing a perpetrator to increase their privileges.
The vulnerability of the IBM Cognos Dashboards management software in Cloud Pak for Data is related to an uncontrollable element in the search process. Exploiting this vulnerability could allow a malicious actor to increase their privileges...