CVE-2026-35565 Apache Storm UI: Stored Cross-Site Scripting (XSS) via Unsanitized Topology Metadata in Storm UI

Stored Cross-Site Scripting XSS via Unsanitized Topology Metadata in Apache Storm UI Versions Affected: before 2.8.6 Description: The Storm UI visualization component interpolates topology metadata including component IDs, stream names, and grouping values directly into HTML via innerHTML in...

CVE-2026-35565 Apache Storm UI: Stored Cross-Site Scripting (XSS) via Unsanitized Topology Metadata in Storm UI

Stored Cross-Site Scripting XSS via Unsanitized Topology Metadata in Apache Storm UI Versions Affected: before 2.8.6 Description: The Storm UI visualization component interpolates topology metadata including component IDs, stream names, and grouping values directly into HTML via innerHTML in...

CVE-2026-39892 vulnerabilities

Vulnerabilities for packages: ggshield, kserve, k8s-sidecar, py3-cassandra-medusa, semgrep, datadog-agent, mlflow, mycli, kubeflow-volumes-web-app, in-toto, mitmproxy, dask-kubernetes, airflow, kubeflow-jupyter-web-app, kubeflow-pipelines-visualization-server, superset, open-webui,...

GHSA-P423-J2CM-9VMQ vulnerabilities

Vulnerabilities for packages: ggshield, kserve, k8s-sidecar, py3-cassandra-medusa, semgrep, datadog-agent, mlflow, mycli, kubeflow-volumes-web-app, in-toto, mitmproxy, dask-kubernetes, airflow, kubeflow-jupyter-web-app, kubeflow-pipelines-visualization-server, superset, open-webui,...

GHSA-P423-J2CM-9VMQ vulnerabilities

Vulnerabilities for packages: label-studio, airflow-core, openstack-kolla-toolbox-2025.2, apache-beam-python-3.13-sdk, py3-cassandra-medusa, gitlab-cng-fips, k8s-sidecar, tritonserver-backend-vllm-cuda-13.0, vllm-openai-cuda-12.9, ggshield, barman, in-toto, kubeflow-jupyter-web-app, mitmproxy,...

CVE-2026-39892 vulnerabilities

Vulnerabilities for packages: label-studio, airflow-core, openstack-kolla-toolbox-2025.2, apache-beam-python-3.13-sdk, py3-cassandra-medusa, gitlab-cng-fips, k8s-sidecar, tritonserver-backend-vllm-cuda-13.0, vllm-openai-cuda-12.9, ggshield, barman, in-toto, kubeflow-jupyter-web-app, mitmproxy,...

SentinelSphere: Integrating AI-Powered Real-Time Threat Detection with Cybersecurity Awareness Training

The field of cybersecurity is confronted with two interrelated challenges: a worldwide deficit of qualified practitioners and ongoing human-factor weaknesses that account for the bulk of security incidents. To tackle these issues, we present SentinelSphere, a platform driven by artificial...

[SECURITY] Fedora 43 Update: vtk-9.2.6-44.fc43

VTK is an open-source software system for image processing, 3D graphics, volume rendering and visualization. VTK includes many advanced algorithms e.g., surface reconstruction, implicit modeling, decimation and rendering techniques e.g., hardware-accelerated volume rendering, LOD control. NOTE: T...

[SECURITY] Fedora 42 Update: vtk-9.2.6-38.fc42

VTK is an open-source software system for image processing, 3D graphics, volume rendering and visualization. VTK includes many advanced algorithms e.g., surface reconstruction, implicit modeling, decimation and rendering techniques e.g., hardware-accelerated volume rendering, LOD control. NOTE: T...

CVE-2026-26940: Improper Validation of Specified Quantity in Input

Improper Validation of Specified Quantity in Input CWE-1284 in the Timelion visualization plugin in Kibana can lead Denial of Service via Excessive Allocation CAPEC-130. The vulnerability allows an authenticated user to send a specially crafted Timelion expression that overwrites internal series...

EUVD-2026-12665

Vulnerability in the Oracle Edge Cloud Infrastructure Designer and Visualisation Toolkit product of Oracle Open Source Projects component: Desktop. The supported version that is affected is 0.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2026-21994

Vulnerability in the Oracle Edge Cloud Infrastructure Designer and Visualisation Toolkit product of Oracle Open Source Projects component: Desktop. The supported version that is affected is 0.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2026-32137

Dataease is an open source data visualization analysis tool. Prior to 2.10.20, The table parameter for /de2api/datasource/previewData is directly concatenated into the SQL statement without any filtering or parameterization. Since tableName is a user-controllable string, attackers can inject...

Vertex AI SDK 1.131.0 Cross Site Scripting Scanner

This script is a defensive behavioral security scanner designed to test whether HTML reports generated by the internal visualization module of the google-cloud-aiplatform part of Google Cloud improperly render unescaped user-controlled input...

Apache Superset Security Bypass Vulnerability

Apache Superset is a data visualization and data exploration platform from the Apache USA Foundation. A security bypass vulnerability exists in Apache Superset, which can be exploited by an attacker to execute sensitive SQL functions...

SmartGraphical: A Human-In-The-Loop Framework for Detecting Smart Contract Logical Vulnerabilities Via Pattern-Driven Static Analysis and Visual Abstraction

Smart contracts are fundamental components of blockchain ecosystems; however, their security remains a critical concern due to inherent vulnerabilities. While existing detection methodologies are predominantly syntax-oriented, targeting reentrancy and arithmetic errors, they often overlook logica...

Exploit for CVE-2026-2472

Unauthenticated Stored Cross-Site Scripting XSS in genai/e...

Google Cloud Vertex AI SDK affected by Stored Cross-Site Scripting (XSS)

Stored Cross-Site Scripting XSS in the genai/evalsvisualization component of Google Cloud Vertex AI SDK google-cloud-aiplatform versions from 1.98.0 up to but not including 1.131.0 allows an unauthenticated remote attacker to execute arbitrary JavaScript in a victim's Jupyter or Colab environment...

CVE-2026-2472

Stored Cross-Site Scripting XSS in the genai/evalsvisualization component of Google Cloud Vertex AI SDK google-cloud-aiplatform versions from 1.98.0 up to but not including 1.131.0 allows an unauthenticated remote attacker to execute arbitrary JavaScript in a victim's Jupyter or Colab environment...

CVE-2026-2472

CVE-2026-2472 concerns Google Cloud Vertex AI SDK (google-cloud-aiplatform). The vulnerability resides in the _genai/_evals_visualization component and affects versions from 1.98.0 up to, but not including, 1.131.0. It enables a stored XSS where an unauthenticated remote attacker can inject scrip...