CVE-2026-59939 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server...

GHSA-J5G9-F88F-GFJ3 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server...

DataEase <= 2.4.1 - Sensitive Information Exposure

DataEase, an open source data visualization and analysis tool, has a database configuration information exposure vulnerability prior to version 2.5.0. Visiting the /de2api/engine/getEngine;.js path via a browser reveals that the platform's database configuration is returned. id: CVE-2024-30269...

Siemens Teamcenter Visualization 2412.x < 2412.0012 / 2506.x < 2506.0009 / 2512.x < 2512.2605 Privilege Escalation (SSA-288252)

The version of Siemens Teamcenter Visualization installed on the remote host is 2412.x prior to 2412.0012, 2506.x prior to 2506.0009, or 2512.x prior to 2512.2605. It is, therefore, affected by a vulnerability: - Untrusted search path in IAM Client SDK may allow an authenticated user to potential...

EUVD-2026-49585

A stored cross-site scripting vulnerability existed in the capture tree visualization page. The application embedded the serialized capture tree directly into an inline JavaScript block using the Jinja safe filter. Because the tree data can contain values derived from captured and potentially...

CVE-2026-66824

A stored cross-site scripting vulnerability existed in the capture tree visualization page. The application embedded the serialized capture tree directly into an inline JavaScript block using the Jinja safe filter. Because the tree data can contain values derived from captured and potentially...

CVE-2026-66824

CVE-2026-66824 is a stored XSS vulnerability in the capture tree visualization page. The app embeds the serialized capture tree directly into an inline JavaScript block via the Jinja safe filter. Attackers can craft values from captured content that terminate the [removed] tag and inject arbitrar...

EUVD-2026-46987

Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware component: Data Visualization Tools. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

EUVD-2026-46768

Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware component: Data Visualization Tools. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2026-60354

Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware component: Data Visualization Tools. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

PT-2026-62667

Name of the Vulnerable Software and Affected Versions Oracle JDeveloper versions 12.2.1.4.0 Oracle JDeveloper versions 14.1.2.0.0 Description A flaw in the Data Visualization Tools component of Oracle Fusion Middleware allows an unauthenticated attacker with network access via HTTP to compromise...

CVE-2025-9906 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server...

GHSA-29GW-9793-FVW7 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server...

CVE-2023-24816 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server...

GHSA-36FQ-JGMW-4R9C vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server...

GHSA-36FQ-JGMW-4R9C vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server...

GHSA-29GW-9793-FVW7 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server...

CVE-2025-9906 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server...

CVE-2023-24816 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server...

CVE-2026-45533

DataEase is an open source data visualization and analysis tool. Prior to 2.10.23, DataEase export-center deletion can accept path traversal sequences such as ../ in the bulk delete API endpoint and pass attacker-controlled identifiers to ExportCenterManage.delete, allowing recursive deletion of...