CVE-2024-6097

Progress Telerik Reporting (Progress) is affected in versions prior to 2025 Q1 (19.0.25.211). The vulnerability is an information disclosure via an absolute path traversal that can be exploited by a local threat actor, as described in multiple sources. The CVE-2024-6097 entry confirms the impact ...

CVE-2025-1206

creationtimestamp| type| source ---|---|--- 2025-02-12 15:16:38+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhyhqsj5ui2s 2025-02-12 18:33:37+00:00| seen| https://t.me/cvedetector/17897 2025-02-20 23:27:06+00:00| seen|...

Cloud Software Group Security Advisory for CVE-2024-6387

Advisory for 3rd party CVE-2024-6387 Cloud Software Group is aware of the vulnerability CVE-2024-6387 impacting OpenSSH. Qualys has discovered a remote unauthenticated code execution vulnerability in OpenSSH’s server sshd in glibc-based Linux systems. Because this vulnerability is a regression of...

CVE-2024-13421

creationtimestamp| type| source ---|---|--- 2025-02-12 04:30:12+00:00| seen| https://infosec.exchange/users/cve/statuses/113989033114600468 2025-02-12 05:15:44+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhxg6bzjxd2z 2025-02-12 06:48:39+00:00| seen|...

CVE-2024-54160

dashboards-reporting aka Dashboards Reports before 2.19.0.0, as shipped in OpenSearch before 2.19, allows XSS because Markdown is not sanitized when previewing a header or footer...

PT-2025-6766 · Progress · Telerik Reporting

Name of the Vulnerable Software and Affected Versions: Progress® Telerik® Reporting versions prior to 2025 Q1 19.0.25.211 Description: Information disclosure is possible by a local threat actor through an absolute path vulnerability. This issue allows a local threat actor to potentially disclose...

PT-2025-6715 · Unknown +2 · Opensearch +3

Name of the Vulnerable Software and Affected Versions: dashboards-reporting versions prior to 2.19.0.0 OpenSearch versions prior to 2.19 Description: The issue allows cross-site scripting XSS because Markdown is not sanitized when previewing a header or footer. This occurs in dashboards-reporting...

Progress Telerik Reporting 安全漏洞

Progress Telerik Reporting is a .NET report embedding tool from Progress, Inc. that enables the creation, design, export, and integration of reports in cloud-based, web and applications. A security vulnerability exists in Progress Telerik Reporting prior to version 2025 Q1, which stems from a loc...

CVE-2024-6097: Absolute Path Traversal

In Progress® Telerik® Reporting versions prior to 2025 Q1 19.0.25.211, information disclosure is possible by a local threat actor through an absolute path vulnerability...

CVE-2024-54160: Improper Neutralization of Input During Web Page Generation

dashboards-reporting aka Dashboards Reports before 2.19.0.0, as shipped in OpenSearch before 2.19, allows XSS because Markdown is not sanitized when previewing a header or footer...

CVE-2024-54160

dashboards-reporting aka Dashboards Reports before 2.19.0.0, as shipped in OpenSearch before 2.19, allows XSS because Markdown is not sanitized when previewing a header or footer...

CVE-2024-55212

creationtimestamp| type| source ---|---|--- 2025-02-11 21:58:17+00:00| seen| https://infosec.exchange/users/cve/statuses/113987492046596809 2025-02-11 22:15:58+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhwopoxjbd2x 2025-02-12 01:10:52+00:00|...

CVE-2025-21322

creationtimestamp| type| source ---|---|--- 2025-02-11 18:08:38+00:00| seen| https://www.thezdi.com/blog/2025/2/11/the-february-2025-security-update-review 2025-02-11 18:17:10+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhwbeothr52x 2025-02-11 19:04:16+00:00| seen|...

CVE-2025-21198

creationtimestamp| type| source ---|---|--- 2025-02-11 18:08:38+00:00| seen| https://www.thezdi.com/blog/2025/2/11/the-february-2025-security-update-review 2025-02-11 18:16:45+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhwbdxekhb2a 2025-02-11 18:17:03+00:00| seen|...

CVE-2025-24470

creationtimestamp| type| source ---|---|--- 2025-02-11 17:06:31+00:00| seen| https://infosec.exchange/users/cve/statuses/113986344759068128 2025-02-11 17:17:11+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhw5zgrcc52a 2025-02-11 17:45:29+00:00| seen|...

CVE-2024-36508

creationtimestamp| type| source ---|---|--- 2025-02-11 16:36:29+00:00| seen| https://infosec.exchange/users/cve/statuses/113986226670304919 2025-02-11 17:16:25+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhw5y2uyry2d 2025-02-11 17:45:29+00:00| seen|...

CVE-2025-24868

creationtimestamp| type| source ---|---|--- 2025-02-11 01:16:06+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhuicv755i23 2025-02-11 01:26:18+00:00| seen| https://infosec.exchange/users/cve/statuses/113982647697373406 2025-02-11 03:01:32+00:00| seen|...

Fortinet FortiAnalyzer 信息泄露漏洞

Fortinet FortiAnalyzer is a centralized network security reporting solution from Fiat Fortinet. The product is mainly used to collect network log data and analyze, report, and archive operations on security events, network traffic, and Web content in the logs through the reporting suite. An...

编号撤回

Siemens Opcenter Intelligence is a software from Siemens Germany. It is used to provide flexible reporting and analysis tools that enable companies to present data to the right people with appropriate visualizations. This CVE number has been withdrawn...

编号撤回

Siemens Opcenter Intelligence is a software from Siemens Germany. It is used to provide flexible reporting and analysis tools that enable companies to present data to the right people with appropriate visualizations. This CVE number has been withdrawn...