nicolargo
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 15 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from March 9, 2026 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →Glances has CQL Injection in its Cassandra Export Module via Unsanitized Config Values
Glances IP Plugin has SSRF via public_api that leads to credential leakage
Glances Vulnerable to Cross-Origin Information Disclosure via Unauthenticated REST API (/api/4) due to Permissive CORS
Glances Vulnerable to Command Injection via Dynamic Configuration Values
Glances Vulnerable to Cross-Origin System Information Disclosure via XML-RPC Server CORS Wildcard
Glances Central Browser Autodiscovery Leaks Reusable Credentials to Zeroconf-Spoofed Servers
Glances's Browser API Exposes Reusable Downstream Credentials via `/api/4/serverslist`
Glances's REST/WebUI Lacks Host Validation and Remains Exposed to DNS Rebinding
Glances has a SQL Injection in DuckDB Export via Unparameterized DDL Statements
Glances's Default CORS Configuration Allows Cross-Origin Credential Theft
Monitor nicolargo in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.