mxmap

MXmap — 自治体メールインフラストラクチャマップ !IMPORTANT MXmap には後継があります。 このプロジェクトは、ドイツ・オーストリア・スイスの全自治体をカバーするチーム研究へと成長しました: secassure2026.mxmap-project.org ソース。mxmap.ch のスイスマップは引き続きオンラインですが、データは2026年4月時点で凍結されており、更新されません。...

dataviz

OpenDNS データ可視化フレームワーク 公式ドキュメント: www.opengraphiti.com...

Mimir

Mimir OSINT脅威インテリジェンスインターフェース - 古ノルド神話の知識の神にちなんで名付けられました。 MimirはHoneyDBのCLIとして機能します。簡単に言えば、HoneyDBはOSINTの集約的な脅威インテルプールです。プログラムを起動すると、以下のオプションがあるメニューが表示されます。 1. Fetch Threat Feed 5. Visualize Top Malicious Hosts in Browser 2. Fetch Bad Host List 6. Visualize Top Targeted Services in Browser 3...

dashbuilder

Dashbuilder Dashbuilder 是一个通用的仪表盘和报告Web应用，它允许： 可视化的仪表盘配置和个性化 使用多种图表库支持不同类型的可视化 功能完整的图表可视化定义编辑器 定义交互式报表表格 通过不同协议从外部系统提取数据 同时支持分析型和实时仪表盘 采用 Apache License 2.0 许可 更多信息，请访问项目网站 dashbuilder.org 即将推出的功能 基于 D3 JS、Lienzo GWT 和 Chart JS 的新渲染器 层次化（嵌套分组）展示器类型：树图和饼图 支持多个动态数据系列 丰富的移动端支持 告警和SLA配置 RESTful API 架...

detectree

Detectree Detectree 是一款面向蓝队的数据可视化工具。它提供检测数据的图形化表示，使分析人员能够几乎即时地对底层活动的性质形成判断，并理解数据点之间的复杂关系。最终，这有助于缩短响应时间、减少告警疲劳，并促进团队内分析人员之间的沟通。 Detectree 使用 svelte 编写，基于 force-graph JavaScript 库。 快速开始 为了在您的环境中使用 Detectree，检测数据需要满足一组最低属性要求。在下表中，您可以查看每条检测必须包含哪些字段，以及哪些字段是可选的。 字段| 是否必需 ---|--- 端点 ID| 是 类别| 是 严重级别| 是...

EUVD-2026-46987

Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware component: Data Visualization Tools. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

EUVD-2026-46768

Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware component: Data Visualization Tools. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2026-60354

Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware component: Data Visualization Tools. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2026-60629: Improper Access Control

Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware component: Data Visualization Tools. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2026-60354: Exposure of Sensitive Information to an Unauthorized Actor

Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware component: Data Visualization Tools. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

PT-2026-62667

Name of the Vulnerable Software and Affected Versions Oracle JDeveloper versions 12.2.1.4.0 Oracle JDeveloper versions 14.1.2.0.0 Description A flaw in the Data Visualization Tools component of Oracle Fusion Middleware allows an unauthenticated attacker with network access via HTTP to compromise...

PT-2026-62448

Name of the Vulnerable Software and Affected Versions Oracle JDeveloper version 12.2.1.4.0 Oracle JDeveloper version 14.1.2.0.0 Description A flaw in the Data Visualization Tools component of Oracle Fusion Middleware allows an unauthenticated attacker with network access via HTTP to compromise th...

CVE-2026-45535

DataEase is an open source data visualization and analysis tool. Prior to 2.10.23, DataEase SQL-type datasets store attacker-controlled SQL variable defaultValue entries such as $var and SqlparserUtils.handleVariableDefaultValue inserts them with String.replace without escaping or parameterizatio...

CVE-2026-45533

DataEase is an open source data visualization and analysis tool. Prior to 2.10.23, DataEase export-center deletion can accept path traversal sequences such as ../ in the bulk delete API endpoint and pass attacker-controlled identifiers to ExportCenterManage.delete, allowing recursive deletion of...

CVE-2026-46684

CVE-2026-46684 (DataEase) : Open-source data visualization tool DataEase prior to 2.10.23 is affected by an unauthorized command execution vulnerability. The issue stems from enterprise token handling where TokenFilter#doFilter() may pass X-DE-TOKEN values to TokenUtils.validate(), which only che...

EUVD-2026-44785

DataEase is an open source data visualization and analysis tool. Prior to 2.10.23, DataEase enterprise token handling can let TokenFilterdoFilter pass X-DE-TOKEN values to TokenUtils.validate, which checks only token presence and length before userBOByTokentoken uses JWT.decode without signature...

CVE-2026-45320

DataEase is an open source data visualization and analysis tool. Prior to 2.10.23, DataEase dashboard SQL variables such as $deptId are processed by SqlparserUtils.transFilter, whose final branch returns raw user input for non-in and non-between operators before SubstitutedSql.replace"$var", valu...

CVE-2026-55647

DataEase is an open source data visualization and analysis tool. Prior to 2.10.24, dashboard text components render stored component content with Vue v-html without server-side HTML sanitization, allowing an authenticated user who can edit dashboard component data to inject HTML with executable...

EUVD-2026-42099

DataEase is an open source data visualization and analysis tool. Prior to 2.10.24, the /de2api/share/proxyInfo share interface generates and returns X-DE-LINK-TOKEN before validating the share password or ticket, allowing unauthenticated attackers who know a protected share UUID to obtain a valid...

EUVD-2026-42096

DataEase is an open source data visualization and analysis tool. Prior to 2.10.24, chart quota and Y-axis filters embed attacker-controlled filter values directly into generated SQL in Quota2SQLObj.getYWheres without applying the SQL literal validation and escaping used by other filter paths,...