45 matches found
CVE-2024-23173: Improper Neutralization of Input During Web Page Generation
An issue was discovered in the Cargo extension in MediaWiki before 1.35.14, 1.36.x through 1.39.x before 1.39.6, and 1.40.x before 1.40.2. The Special:Drilldown page allows XSS via artist, album, and position parameters because of applied filter values in drilldown/CargoAppliedFilter.php...
CVE-2024-23173
An issue was discovered in the Cargo extension in MediaWiki before 1.35.14, 1.36.x through 1.39.x before 1.39.6, and 1.40.x before 1.40.2. The Special:Drilldown page allows XSS via artist, album, and position parameters because of applied filter values in drilldown/CargoAppliedFilter.php...
PT-2024-2677
Name of the Vulnerable Software and Affected Versions MediaWiki versions prior to 1.35.14 MediaWiki versions 1.36.x through 1.39.x before 1.39.6 MediaWiki versions 1.40.x before 1.40.2 Description An issue in the Cargo extension of MediaWiki allows for XSS attacks via the artist, album, and...
SUSE CVE-2019-13068
public/app/features/panel/panelctrl.ts in Grafana before 6.2.5 allows HTML Injection in panel drilldown links via the Title or url field...
Semantic Drilldown 安全漏洞
Semantic Drilldown is a MediaWiki extension to Wikimedia open source. A security vulnerability exists in Semantic Drilldown. Attackers use this vulnerability to execute cross-site scripting attacks...
CVE-2022-37438
In Splunk Enterprise versions in the following table, an authenticated user can craft a dashboard that could potentially leak information for example, username, email, and real name about Splunk users, when visited by another user through the drilldown component. The vulnerability requires user...
CVE-2022-37438 Information disclosure via the dashboard drilldown in Splunk Enterprise
In Splunk Enterprise versions in the following table, an authenticated user can craft a dashboard that could potentially leak information for example, username, email, and real name about Splunk users, when visited by another user through the drilldown component. The vulnerability requires user...
CVE-2022-37438
In Splunk Enterprise versions in the following table, an authenticated user can craft a dashboard that could potentially leak information for example, username, email, and real name about Splunk users, when visited by another user through the drilldown component. The vulnerability requires user...
Splunk 安全漏洞
Splunk is a suite of data collection and analysis software from Splunk, Inc. in the United States. The software is primarily used to collect, index, and analyze and the data it generates, including data generated by all IT systems and infrastructures physical, virtual machines, and cloud. A...
PT-2022-23997 · Splunk · Splunk Enterprise
Name of the Vulnerable Software and Affected Versions: Splunk Enterprise affected versions not specified Description: The issue allows an authenticated user to create a dashboard that could potentially leak information, such as username, email, and real name, about Splunk users when visited by...
CVE-2022-37438: Exposure of Sensitive Information to an Unauthorized Actor
In Splunk Enterprise versions in the following table, an authenticated user can craft a dashboard that could potentially leak information for example, username, email, and real name about Splunk users, when visited by another user through the drilldown component. The vulnerability requires user...
Malicious code in usaa-drilldown (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9cdd12172bde7a63c4950340b53ea0113eede4b46f1482c89eaffd27981cc031 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-6838 Malicious code in usaa-drilldown (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9cdd12172bde7a63c4950340b53ea0113eede4b46f1482c89eaffd27981cc031 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Grafana Cross-site Scripting vulnerability
public/app/features/panel/panelctrl.ts in Grafana before 6.2.5 allows HTML Injection in panel drilldown links via the Title or url field...
GHSA-7PHR-6CC9-4M5Q Grafana Cross-site Scripting vulnerability
public/app/features/panel/panelctrl.ts in Grafana before 6.2.5 allows HTML Injection in panel drilldown links via the Title or url field...
MediaWiki Semantic Drilldown SQL Injection (CVE-2022-29904)
An SQL injection vulnerability exists in MediaWiki Semantic Drilldown. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...
CVE-2022-29904
The SemanticDrilldown extension for MediaWiki through 1.37.2 before e688bdba6434591b5dff689a45e4d53459954773 allows SQL injection with certain '-' and '' constraints...
MediaWiki SQL注入漏洞
MediaWiki is a set of web-based wiki engines from the U.S. Wikimedia MediaWiki Foundation. The product can be used to deploy internal knowledge management and content management systems. A security vulnerability exists in MediaWiki version 1.37.2 and earlier, which stems from a SemanticDrilldown...
