2 June 2020

11 results · Clear filters · Feed

• Medium 6.1
  CVE-2018-18625

  Grafana XSS via adding a link in General feature

  Grafana 5.3.1 has XSS via a link on the "Dashboard > All Panels > General" screen. NOTE: this issue exists because of an incomplete fix for CVE-2018-12099.

  grafana github.com/grafana/grafana Ubuntu Go
  Jun 2, 2020
• Medium 6.1
  CVE-2018-18624

  Grafana XSS via a column style

  Grafana 5.3.1 has XSS via a column style on the "Dashboard > Table Panel" screen. NOTE: this issue exists because of an incomplete fix for CVE-2018-12099.

  grafana github.com/grafana/grafana Ubuntu Go
  Jun 2, 2020
• Medium 6.1
  CVE-2018-18623

  Grafana XSS in Dashboard Text Panel

  Grafana 5.3.1 has XSS via the "Dashboard > Text Panel" screen. NOTE: this issue exists because of an incomplete fix for CVE-2018-12099.

  grafana github.com/grafana/grafana Ubuntu Go
  Jun 2, 2020
• Medium 6.1
  CVE-2020-10959

  MediaWiki Open Redirect vulnerability

  resources/src/mediawiki.page.ready/ready.js in MediaWiki before 1.35 allows remote attackers to force a logout and external redirection via HTML content in a MediaWiki page.

  mediawiki/core Packagist
  Jun 2, 2020
• Medium 5.4
  CVE-2020-4431

  IBM Planning Analytics Local 2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitr…

  IBM Planning Analytics Local
  Jun 2, 2020
• Medium 6.1
  CVE-2020-4503

  IBM Planning Analytics Local 2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitr…

  IBM Planning Analytics Local
  Jun 2, 2020
• Medium 5.9
  CVE-2020-4367

  IBM Planning Analytics Local 2.0 uses weaker than expected cryptographic algorithms that could allow an attacker to dec…

  IBM Planning Analytics Local
  Jun 2, 2020
• Medium 5.4
  CVE-2020-4360

  IBM Planning Analytics Local 2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitr…

  IBM Planning Analytics Local
  Jun 2, 2020
• Medium 6.1
  CVE-2020-4366

  IBM Planning Analytics Local 2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitr…

  IBM Planning Analytics Local
  Jun 2, 2020
• Medium 6.0
  CVE-2020-13401 Public exploit

  Improper Input Validation in Docker Engine

  An issue was discovered in Docker Engine before 19.03.11. An attacker in a container, with the CAP_NET_RAW capability, can craft IPv6 router advertisements, and consequently spoof external IPv6 hosts, obtain sensitive information, or cause a denial of service.

  docker.io docker.io docker github.com/docker/docker-ce Debian Ubuntu Alpine Go
  Jun 2, 2020
• Medium 6.5
  CVE-2020-10703

  A NULL pointer dereference was found in the libvirt API responsible introduced in upstream version 3.10.0, and fixed in…

  libvirt libvirt libvirt libvirt Debian Ubuntu
  Jun 2, 2020