CVE-2025-24565

creationtimestamp| type| source ---|---|--- 2025-02-14 13:17:58+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li5c2gpp2s2s 2025-02-14 15:23:53+00:00| seen| https://infosec.exchange/users/cve/statuses/114002928037634148 2025-02-14 15:45:42+00:00| seen|...

IBM Cognos Controller Error Report Unauthorized Access

The vulnerabilities of the software solutions that support the closing, consolidation, and reporting processes of IBM Cognos Controller and IBM Controller are related to deficiencies in the mechanism for generating error reports. Exploiting these vulnerabilities can allow unauthorized actors to...

Progress Telerik Reporting < 2025 Q1 (19.0.25.211) Information Disclosure

The version of Progress Telerik Reporting installed on the remote Windows host is prior or equal to 2025 QA 19.0.25.211. It is, therefore, affected by an information disclosure vulnerability. Information disclosure is possible by a local threat actor through an absolute path vulnerability. Note...

CVE-2025-25387

creationtimestamp| type| source ---|---|--- 2025-02-13 17:11:57+00:00| seen| https://infosec.exchange/users/cve/statuses/113997690740314430 2025-02-13 17:17:32+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li36xv4jcz2a 2025-02-13 18:50:22+00:00| seen|...

CVE-2024-36285

creationtimestamp| type| source ---|---|--- 2025-02-12 22:17:31+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhz7beveoz2d 2025-02-12 23:28:14+00:00| seen| https://infosec.exchange/users/cve/statuses/113993508042620382...

CVE-2025-0995

creationtimestamp| type| source ---|---|--- 2025-02-12 19:07:27+00:00| seen| https://infosec.exchange/users/screaminggoat/statuses/113992482587961618 2025-02-13 08:06:04+00:00| seen| https://infosec.exchange/users/vuldb/statuses/113995544258025325 2025-02-14 23:26:24+00:00| seen|...

CVE-2024-6097

In Progress® Telerik® Reporting versions prior to 2025 Q1 19.0.25.211, information disclosure is possible by a local threat actor through an absolute path vulnerability...

CVE-2024-6097

In Progress® Telerik® Reporting versions prior to 2025 Q1 19.0.25.211, information disclosure is possible by a local threat actor through an absolute path vulnerability...

CVE-2024-6097

Progress Telerik Reporting (Progress) is affected in versions prior to 2025 Q1 (19.0.25.211). The vulnerability is an information disclosure via an absolute path traversal that can be exploited by a local threat actor, as described in multiple sources. The CVE-2024-6097 entry confirms the impact ...

CVE-2024-6097 Absolute Path Traversal Vulnerability

In Progress® Telerik® Reporting versions prior to 2025 Q1 19.0.25.211, information disclosure is possible by a local threat actor through an absolute path vulnerability...

CVE-2024-6097 Absolute Path Traversal Vulnerability

In Progress® Telerik® Reporting versions prior to 2025 Q1 19.0.25.211, information disclosure is possible by a local threat actor through an absolute path vulnerability...

CVE-2025-1206

creationtimestamp| type| source ---|---|--- 2025-02-12 15:16:38+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhyhqsj5ui2s 2025-02-12 18:33:37+00:00| seen| https://t.me/cvedetector/17897 2025-02-20 23:27:06+00:00| seen|...

Cloud Software Group Security Advisory for CVE-2024-6387

Advisory for 3rd party CVE-2024-6387 Cloud Software Group is aware of the vulnerability CVE-2024-6387 impacting OpenSSH. Qualys has discovered a remote unauthenticated code execution vulnerability in OpenSSH’s server sshd in glibc-based Linux systems. Because this vulnerability is a regression of...

CVE-2024-13421

creationtimestamp| type| source ---|---|--- 2025-02-12 04:30:12+00:00| seen| https://infosec.exchange/users/cve/statuses/113989033114600468 2025-02-12 05:15:44+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhxg6bzjxd2z 2025-02-12 06:48:39+00:00| seen|...

PT-2025-6766 · Progress · Telerik Reporting

Name of the Vulnerable Software and Affected Versions: Progress® Telerik® Reporting versions prior to 2025 Q1 19.0.25.211 Description: Information disclosure is possible by a local threat actor through an absolute path vulnerability. This issue allows a local threat actor to potentially disclose...

CVE-2024-54160

dashboards-reporting aka Dashboards Reports before 2.19.0.0, as shipped in OpenSearch before 2.19, allows XSS because Markdown is not sanitized when previewing a header or footer...

Progress Telerik Reporting security vulnerabilities

Progress Telerik Reporting is a .NET report embedding tool from Progress, Inc. that enables the creation, design, export, and integration of reports in cloud-based, web and applications. A security vulnerability exists in Progress Telerik Reporting prior to version 2025 Q1, which stems from a loc...

CVE-2024-54160: Improper Neutralization of Input During Web Page Generation

dashboards-reporting aka Dashboards Reports before 2.19.0.0, as shipped in OpenSearch before 2.19, allows XSS because Markdown is not sanitized when previewing a header or footer...

CVE-2024-54160

dashboards-reporting aka Dashboards Reports before 2.19.0.0, as shipped in OpenSearch before 2.19, allows XSS because Markdown is not sanitized when previewing a header or footer...

PT-2025-6715 · Unknown +2 · Opensearch +3

Name of the Vulnerable Software and Affected Versions: dashboards-reporting versions prior to 2.19.0.0 OpenSearch versions prior to 2.19 Description: The issue allows cross-site scripting XSS because Markdown is not sanitized when previewing a header or footer. This occurs in dashboards-reporting...