CVE-2024-52338 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server...

GHSA-M5XW-HWXW-FQ3J vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server...

GHSA-M5XW-HWXW-FQ3J vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server, airflow...

CVE-2024-52338 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server, airflow...

GHSA-F2MF-Q878-GH58 Parsl Monitoring Visualization Vulnerable to SQL Injection

Affected Product: Parsl Python Parallel Scripting Library Component: parsl.monitoring.visualization Vulnerability Type: SQL Injection CWE-89 Severity: High CVSS Rating Recommended: 7.5 - 8.6 URL: https://github.com/Parsl/parsl/blob/master/parsl/monitoring/visualization/views.py Summary A SQL...

Parsl Monitoring Visualization Vulnerable to SQL Injection

Affected Product: Parsl Python Parallel Scripting Library Component: parsl.monitoring.visualization Vulnerability Type: SQL Injection CWE-89 Severity: High CVSS Rating Recommended: 7.5 - 8.6 URL: https://github.com/Parsl/parsl/blob/master/parsl/monitoring/visualization/views.py Summary A SQL...

chartify (>=3.0.4, <=3.1.0), choochoo (>=0.37.0, <=0.38.1) +18 more potentially affected by CVE-2026-21883 via bokeh (2.2.3)

bokeh PYPI version 2.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on bokeh and may be impacted: - chartify =3.0.4, =0.37.0, =1.0.1a1, =0.1.11, =1.0.0, =0.0.1, =4.3.1, =0.16.0, =0.0.2, =0.0.8, =1.5.1, =0.17.3rc6, =2.0.1, =2.7.7 and more Source cves:...

autotrader (>=0.12.0, <=0.12.1), biosmoother (>=0.3.3, <=1.6.1) +2 more potentially affected by CVE-2026-21883 via bokeh (2.3.2)

bokeh PYPI version 2.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on bokeh and may be impacted: - autotrader =0.12.0, =0.3.3, =1.0.1b2, =1.0.8 - futon 1.0.0 Source cves: CVE-2026-21883 Source advisory: OSV:GHSA-793V-589G-574V...

CVE-2025-65110

Vega is a visualization grammar, a declarative format for creating, saving, and sharing interactive visualization designs. Prior to versions 6.1.2 and 5.6.3, applications meeting two conditions are at risk of arbitrary JavaScript code execution, even if "safe mode" expressionInterpreter is used...

Kibana Privilege Escalation

The vulnerability of the Kibana data visualization service is related to authentication errors. Exploiting this vulnerability allows a malicious actor to gain elevated privileges...

Exploit for Deserialization of Untrusted Data in Facebook React

🎨 react2shellexploitvisualized - Visualize Vulnerabilities wit...

[SECURITY] Fedora 43 Update: duc-1.4.6-1.fc43

Duc is a collection of tools for indexing, inspecting and visualizing disk usage. Duc maintains a database of accumulated sizes of directories of the file system, and allows you to query this database with some tools, or create fancy graphs showing you where your bytes are...

CVE-2024-58335

OpenXRechnungToolbox through 2024-10-05-3.0.0 before 6c50e89 allows XXE because the disallow-doctype-decl feature is not enabled in visualization/VisualizerImpl.java...

CVE-2024-58335: Improper Restriction of XML External Entity Reference

OpenXRechnungToolbox through 2024-10-05-3.0.0 before 6c50e89 allows XXE because the disallow-doctype-decl feature is not enabled in visualization/VisualizerImpl.java...

CVE-2024-58335

OpenXRechnungToolbox: AXXE vulnerability exists in versions through 2024-10-05-3.0.0 up to commit 6c50e89, caused by the disallow-doctype-decl feature not being enabled in visualization/VisualizerImpl.java. The issue enables external entity processing and is supported by multiple sources; exploit...

CVE-2024-58335

OpenXRechnungToolbox through 2024-10-05-3.0.0 before 6c50e89 allows XXE because the disallow-doctype-decl feature is not enabled in visualization/VisualizerImpl.java...

Visualisation for the CIS Benchmark Scanning Results

In this paper, we introduce GraphSecure, a web application that provides advanced analysis and visualisation of security scanning results. GraphSecure enables users to initiate scans for their AWS account, validate them against specific Center for Internet Security CIS Benchmarks and return...

CVE-2025-41738

An unauthenticated remote attacker may cause the visualisation server of the CODESYS Control runtime system to access a resource with a pointer of wrong type, potentially leading to a denial-of-service DoS condition...

CVE-2025-41738

An unauthenticated remote attacker may cause the visualisation server of the CODESYS Control runtime system to access a resource with a pointer of wrong type, potentially leading to a denial-of-service DoS condition...

CVE-2025-41738 CODESYS Control - Invalid type usage in visualization

An unauthenticated remote attacker may cause the visualisation server of the CODESYS Control runtime system to access a resource with a pointer of wrong type, potentially leading to a denial-of-service DoS condition...