AperiSolve v3.7.10

Aperi'Solve Try it now: https://www.aperisolve.com Support Aperi'Solve: Aperi'Solve is an open-source steganalysis web platform that performs automated analysis on images to detect and extract hidden data using common steganography tools and techniques. Key features Visualize each bit layer LSB a...

GHSA-WWV5-G3V4-889X vulnerabilities

Vulnerabilities for packages: litellm, dask-kubernetes, tensorflow-gpu-jupyter, mitmproxy, kubeflow-pipelines-visualization-server...

GHSA-8423-8FGW-73VQ vulnerabilities

Vulnerabilities for packages: litellm, dask-kubernetes, tensorflow-gpu-jupyter, mitmproxy, kubeflow-pipelines-visualization-server...

CVE-2026-82397 vulnerabilities

Vulnerabilities for packages: litellm, dask-kubernetes, tensorflow-gpu-jupyter, mitmproxy, kubeflow-pipelines-visualization-server...

GHSA-MPF4-983Q-P7J4 vulnerabilities

Vulnerabilities for packages: litellm, dask-kubernetes, tensorflow-gpu-jupyter, mitmproxy, kubeflow-pipelines-visualization-server...

CVE-2026-82397 vulnerabilities

Vulnerabilities for packages: mitmproxy, kubeflow-pipelines-visualization-server, dask-kubernetes...

GHSA-MPF4-983Q-P7J4 vulnerabilities

Vulnerabilities for packages: mitmproxy, kubeflow-pipelines-visualization-server, dask-kubernetes...

GHSA-8423-8FGW-73VQ vulnerabilities

Vulnerabilities for packages: mitmproxy, kubeflow-pipelines-visualization-server, dask-kubernetes...

GHSA-CV2G-M8RR-888C vulnerabilities

Vulnerabilities for packages: open-webui, kubeflow-pipelines-visualization-server, py3-nltk...

thingsboard v4.3.1.4

Open-source IoT platform for data collection, processing, visualization, and device management. 💡 Get started • 🌐 Website • 📚 Documentation • 📔 Blog • 🔗 LinkedIn 🚀 Installation options Install ThingsBoard on-premises or use ThingsBoard Cloud. 💡 Getting started with ThingsBoard Check out our Getti...

Kibana 8.19.x < 8.19.20 / 9.x < 9.4.5 Cross-Site Request Forgery (ESA-2026-99)

The version of Kibana installed on the remote host is 8.19.x prior to 8.19.20, or 9.x prior to 9.4.5. It is, therefore, affected by a vulnerability as referenced in the ESA-2026-99 advisory. - Cross-Site Request Forgery CWE-352 in Kibana can lead to privilege escalation via Cross Site Request...

CVE-2026-18420

Improper input validation in the Time Series Visual Builder TSVB plugin in OpenSearch Dashboards allows an authenticated remote user to execute arbitrary code on the server via a crafted JSON payload to the metrics visualization API endpoint. This issue is a form of prototype pollution that enabl...

CVE-2026-18420: Improperly Controlled Modification of Object Prototype Attributes

Improper input validation in the Time Series Visual Builder TSVB plugin in OpenSearch Dashboards allows an authenticated remote user to execute arbitrary code on the server via a crafted JSON payload to the metrics visualization API endpoint. This issue is a form of prototype pollution that enabl...

BIT-KIBANA-2026-72663 Inefficient Algorithmic Complexity in Kibana Leading to Denial of Service

Inefficient Algorithmic Complexity CWE-407 in Kibana can lead to denial of service via Input Data Manipulation CAPEC-153. A specially crafted, deeply nested expression submitted to a Kibana TSVB visualization is evaluated with a worst-case cost that grows disproportionately with the size of the...

BIT-KIBANA-2026-72658 Cross-Site Request Forgery in Kibana Leading to Privilege Escalation

Cross-Site Request Forgery CWE-352 in Kibana can lead to privilege escalation via Cross Site Request Forgery CAPEC-62. A user who is permitted to create visualizations can save a specially crafted Vega visualization that, when it is opened by another user, causes authenticated requests to be issu...

BIT-ELK-2026-72663 Inefficient Algorithmic Complexity in Kibana Leading to Denial of Service

Inefficient Algorithmic Complexity CWE-407 in Kibana can lead to denial of service via Input Data Manipulation CAPEC-153. A specially crafted, deeply nested expression submitted to a Kibana TSVB visualization is evaluated with a worst-case cost that grows disproportionately with the size of the...

BIT-ELK-2026-72658 Cross-Site Request Forgery in Kibana Leading to Privilege Escalation

Cross-Site Request Forgery CWE-352 in Kibana can lead to privilege escalation via Cross Site Request Forgery CAPEC-62. A user who is permitted to create visualizations can save a specially crafted Vega visualization that, when it is opened by another user, causes authenticated requests to be issu...

PT-2026-79883

Cross-Site Request Forgery CWE-352 in Kibana can lead to privilege escalation via Cross Site Request Forgery CAPEC-62. A user who is permitted to create visualizations can save a specially crafted Vega visualization that, when it is opened by another user, causes authenticated requests to be issu...

PT-2026-79884

Allocation of Resources Without Limits or Throttling CWE-770 in Kibana can lead to denial of service via Excessive Allocation CAPEC-130. A specially crafted, malformed payload submitted to a Kibana visualization feature by an authenticated user holding only low-privileged access is not correctly...

PT-2026-79943

Allocation of Resources Without Limits or Throttling CWE-770 in Kibana can lead to denial of service via Excessive Allocation CAPEC-130. A specially crafted, malformed payload submitted to a Kibana visualization feature by an authenticated user holding only low-privileged access is not correctly...