Apache Superset Information Disclosure Vulnerability (CNVD-2024-0681549)

Apache Superset is a data visualization and data exploration platform from the Apache USA Foundation. An information disclosure vulnerability exists in Apache Superset versions prior to 2.1.2, which can be exploited by an authenticated attacker to read configured CSS templates and comments...

Apache Superset Input Validation Error Vulnerability (CNVD-2023-9666130)

Apache Superset is a data visualization and data exploration platform from the Apache USA Foundation. An input validation error vulnerability exists in Apache Superset versions prior to 3.0.0. The vulnerability stems from the presence of improper input validation, which can be exploited by an...

Apache Superset Information Disclosure Vulnerability (CNVD-2023-9666229)

Apache Superset is a data visualization and data exploration platform from the Apache USA Foundation. An information disclosure vulnerability exists in Apache Superset versions prior to 3.0.0, which stems from the application's inadequate protection of sensitive information and can be exploited b...

File Upload Vulnerability in Yonghong BI of Beijing Yonghong Business Intelligence Technology Co.

Beijing Yonghong Business Intelligence Technology Co., Ltd. is committed to providing global enterprises with big data technology products and services, relying on independent intellectual property rights of the one-stop big data platform to form a perfect product and service system, with...

Apache Superset Data Visualization Probe

The vulnerability of the application software interface for data visualization in Apache Superset is related to deficiencies in the authentication mechanism. Exploiting this vulnerability allows a malicious actor to remotely check database connections...

Why Cool Dashboards Don’t Equal Effective Security Analytics

Mark Twain once said, “Data is like garbage. You’d better know what you are going to do with it before you collect it.” This statement rings true in todays cybersecurity landscape. Security professionals are inundated with a flood of data, and often, they dont know how to make sense of it. To add...

Siemens SINEMA Server V14 Cross-Site Scripting Vulnerability

Siemens SINEMA Server is a software from Siemens, Germany, developed specifically for industrial applications. It enables you to fully visualize and monitor your network. A cross-site scripting vulnerability exists in Siemens SINEMA Server V14 due to an affected application incorrectly clearing...

Parasolid 3D geometric modeling tool Heap Buffer Overflow DoS

The vulnerability of Parasolid’s 3D geometric modeling tool and the Teamcenter Visualization product lifecycle management system lies in the reading of data beyond the buffer in memory. Exploiting this vulnerability can allow attackers to execute arbitrary code using a specially created XT file...

Parasolid 3D geometric modeling Tool Heap Buffer Overflow

The vulnerability of Parasolid’s 3D geometric modeling tool, as well as the Teamcenter Visualization product lifecycle management system, relates to reading beyond the buffer in memory. Exploiting this vulnerability could allow attackers to execute arbitrary code using specially created XT files...

Parasolid 3D geometric modeling tool Heap Buffer Overflow DoS

The vulnerability of Parasolid’s 3D geometric modeling tool, as well as the Teamcenter Visualization product lifecycle management system, relates to reading beyond the buffer in memory. Exploiting this vulnerability could allow attackers to execute arbitrary code using specially created XT files...

Parasolid 3D geometric modeling tool Teamcenter Visualization Code Execution

The vulnerability of Parasolid’s 3D geometric modeling tool and the Teamcenter Visualization product lifecycle management system lies in the reading of data outside the buffer in memory. Exploiting this vulnerability can allow attackers to execute arbitrary code...

Parasolid 3D geometric modeling tool Teamcenter Visualization Code Execution

The vulnerability of Parasolid’s 3D geometric modeling tool and the Teamcenter Visualization lifecycle management system lies in the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow attackers to execute arbitrary code...

Parasolid 3D geometric modeling tool Teamcenter Visualization Code Execution

The vulnerability of Parasolid’s 3D geometric modeling tool and the Teamcenter Visualization product lifecycle management system lies in the reading of data outside the buffer in memory. Exploiting this vulnerability can allow attackers to execute arbitrary code...

FUXA Security Breach

FUXA is an open source web-based process visualization SCADA/HMI/Dashboard software. A security vulnerability exists in FUXA that stems from vulnerability to a local attack contained via /api/download...

FUXA Security Breach

FUXA is an open source web-based process visualization SCADA/HMI/Dashboard software. A security vulnerability exists in FUXA that stems from the presence of a local file inclusion vulnerability...

FUXA SQL Injection Vulnerability

FUXA is an open source web-based process visualization SCADA/HMI/Dashboard software. A security vulnerability exists in FUXA that stems from the presence of a SQL injection vulnerability...

Apache Superset Authentication Bypass Read Access

The vulnerability of the Apache Superset data visualization software is related to authentication errors. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain read access to the database...

JT Teamcenter Visualization Buffer Overflow

The vulnerability of the 3D viewing tool JT and the Teamcenter Visualization product lifecycle management system is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to execute arbitrary code using a specially created WRL file...

JT Teamcenter Visualization Buffer Overflow

The vulnerability of the 3D viewing tool JT and the Teamcenter Visualization lifecycle management system lies in buffer overflow in dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created WRL file...

JT Teamcenter Visualization Heap Buffer Overflow

The vulnerability of the 3D viewing tool JT and the Teamcenter Visualization lifecycle management system lies in the execution of operations beyond the buffer in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code using a specially created WRL file...