CVE-2022-37438

In Splunk Enterprise versions in the following table, an authenticated user can craft a dashboard that could potentially leak information for example, username, email, and real name about Splunk users, when visited by another user through the drilldown component. The vulnerability requires user...

PT-2022-23997 · Splunk · Splunk Enterprise

Name of the Vulnerable Software and Affected Versions: Splunk Enterprise affected versions not specified Description: The issue allows an authenticated user to create a dashboard that could potentially leak information, such as username, email, and real name, about Splunk users when visited by...

Splunk 安全漏洞

Splunk is a suite of data collection and analysis software from Splunk, Inc. in the United States. The software is primarily used to collect, index, and analyze and the data it generates, including data generated by all IT systems and infrastructures physical, virtual machines, and cloud. A...

Malicious code in usaa-drilldown (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9cdd12172bde7a63c4950340b53ea0113eede4b46f1482c89eaffd27981cc031 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6838 Malicious code in usaa-drilldown (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9cdd12172bde7a63c4950340b53ea0113eede4b46f1482c89eaffd27981cc031 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GHSA-7PHR-6CC9-4M5Q Grafana Cross-site Scripting vulnerability

public/app/features/panel/panelctrl.ts in Grafana before 6.2.5 allows HTML Injection in panel drilldown links via the Title or url field...

Grafana Cross-site Scripting vulnerability

public/app/features/panel/panelctrl.ts in Grafana before 6.2.5 allows HTML Injection in panel drilldown links via the Title or url field...

MediaWiki Semantic Drilldown SQL Injection (CVE-2022-29904)

An SQL injection vulnerability exists in MediaWiki Semantic Drilldown. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

CVE-2022-29904

The SemanticDrilldown extension for MediaWiki through 1.37.2 before e688bdba6434591b5dff689a45e4d53459954773 allows SQL injection with certain '-' and '' constraints...

MediaWiki SQL注入漏洞

MediaWiki is a set of web-based wiki engines from the U.S. Wikimedia MediaWiki Foundation. The product can be used to deploy internal knowledge management and content management systems. A security vulnerability exists in MediaWiki version 1.37.2 and earlier, which stems from a SemanticDrilldown...

CVE-2019-13068

public/app/features/panel/panelctrl.ts in Grafana before 6.2.5 allows HTML Injection in panel drilldown links via the Title or url field...

Design/Logic Flaw

public/app/features/panel/panelctrl.ts in Grafana before 6.2.5 allows HTML Injection in panel drilldown links via the Title or url field...

CVE-2019-13068

public/app/features/panel/panelctrl.ts in Grafana before 6.2.5 allows HTML Injection in panel drilldown links via the Title or url field...

CVE-2019-13068

public/app/features/panel/panelctrl.ts in Grafana before 6.2.5 allows HTML Injection in panel drilldown links via the Title or url field...

PT-2019-13106 · Grafana +1 · Grafana +1

Name of the Vulnerable Software and Affected Versions: Grafana versions prior to 6.2.5 Description: The issue allows HTML Injection in panel drilldown links via the Title or url field. This is related to the public/app/features/panel/panel ctrl.ts file in Grafana. Recommendations: For versions...