Lucene search
+L

7976 matches found

CNNVD
CNNVD
added 2025/02/07 12:00 a.m.6 views

WordPress plugin Infusionsoft Analytics 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

5.4CVSS8.6AI score0.00154EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/02/07 12:00 a.m.9 views

PT-2025-5954 · Infusionsoft · Infusionsoft Analytics

Name of the Vulnerable Software and Affected Versions: Infusionsoft Analytics versions n/a through 2.0 Description: A Cross-Site Request Forgery CSRF issue affects the software, allowing unauthorized requests. Recommendations: For versions n/a through 2.0, update to a version that includes a fix...

5.4CVSS9.4AI score0.00154EPSS
SaveExploits0References5
IBM Security Bulletins
IBM Security Bulletins
added 2025/02/06 8:50 p.m.24 views

Security Bulletin: Vulnerability in OpenSSH affects IBM Integrated Analytics System [CVE-2023-48795]

Summary Redhat provided OpenSSH is used by IBM Integrated Analytics System. IBM Integrated Analytics System has addressed the applicable CVE CVE-2023-48795 Vulnerability Details CVEID:CVE-2023-48795 DESCRIPTION: The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9...

5.9CVSS6.8AI score0.93305EPSS
SaveExploits4Affected Software1
RedhatCVE
RedhatCVE
added 2025/02/06 3:01 a.m.10 views

CVE-2025-21532

Vulnerability in the Oracle Analytics Desktop product of Oracle Analytics component: Install. Supported versions that are affected are Prior to 8.1.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Analytics Desktop executes to...

7.8CVSS6.7AI score0.00264EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/02/06 2:29 a.m.7 views

CVE-2025-22361

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Opentracker Opentracker Analytics opentracker-analytics allows Reflected XSS.This issue affects Opentracker Analytics: from n/a through = 1.3...

7.1CVSS7.2AI score0.00315EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/02/06 1:51 a.m.16 views

CVE-2022-43941

Hitachi Vantara Pentaho Business Analytics Server versions before 9.4.0.1 and 9.3.0.2, including 8.3.x do not correctly protect the Post Analysis service endpoint of the data access plugin against out-of-band XML External Entity Reference...

7.1CVSS6.4AI score0.0053EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/02/06 1:51 a.m.17 views

CVE-2022-43769

Hitachi Vantara Pentaho Business Analytics Server prior to versions 9.4.0.1 and 9.3.0.2, including 8.3.x allow certain web services to set property values which contain Spring templates that are interpreted downstream...

8.8CVSS6.6AI score0.9767EPSS
SaveExploits6References1
RedhatCVE
RedhatCVE
added 2025/02/06 1:47 a.m.14 views

CVE-2022-43938

Hitachi Vantara Pentaho Business Analytics Server prior to versions 9.4.0.1 and 9.3.0.2, including 8.3.x cannot allow a system administrator to disable scripting capabilities of Pentaho Reports .prpt through the JVM script manager...

8.8CVSS6.4AI score0.26436EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/02/06 1:47 a.m.15 views

CVE-2022-43773

Hitachi Vantara Pentaho Business Analytics Server prior to versions 9.4.0.1 and 9.3.0.2, including 8.3.x is installed with a sample HSQLDB data source configured with stored procedures enabled...

8.8CVSS6.5AI score0.22179EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/02/06 1:45 a.m.20 views

CVE-2022-43940

Hitachi Vantara Pentaho Business Analytics Server versions before 9.4.0.1 and 9.3.0.2, including 8.3.x do not correctly perform an authorization check in the data source management service...

8.8CVSS6.4AI score0.00555EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/02/06 1:44 a.m.13 views

CVE-2022-43939

Hitachi Vantara Pentaho Business Analytics Server versions before 9.4.0.1 and 9.3.0.2, including 8.3.x contain security restrictions using non-canonical URLs which can be circumvented...

9.8CVSS6.8AI score0.92266EPSS
SaveExploits6References1
CNVD
CNVD
added 2025/02/06 12:00 a.m.73 views

IBM Planning Analytics File Upload Vulnerability

IBM Planning Analytics is a suite of business planning analytics solutions from International Business Machines IBM. The solution supports automated execution of processes such as business planning, budgeting and analysis. A file upload vulnerability exists in IBM Planning Analytics that stems fr...

8.8CVSS7.2AI score0.00392EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2025/02/06 12:00 a.m.13 views

The software’s vulnerability regarding access to analytics and planning tools within the IBM Analytics Content Hub, due to deficiencies in the error reporting mechanism, allows a perpetrator to gain access to confidential information.

The vulnerability of the software for accessing analytics and planning tools in the IBM Analytics Content Hub is related to deficiencies in the reporting mechanism for errors. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected...

5.3CVSS5.5AI score0.00373EPSS
SaveExploits0References2Affected Software1
CNVD
CNVD
added 2025/02/06 12:00 a.m.12 views

IBM Analytics Content Hub Buffer Overflow Vulnerability

The IBM Analytics Content Hub is a clean streaming experience from International Business Machines IBM that visualizes relevant analytics content by extracting content from IBM and other analytics providers. IBM Analytics Content Hub suffers from a buffer overflow vulnerability that stems from...

8.8CVSS7.9AI score0.00713EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2025/02/06 12:00 a.m.9 views

The vulnerability of the software for accessing analytics and planning tools in the IBM Analytics Content Hub, related to operations occurring outside the buffer in memory, allows attackers to execute arbitrary code or cause service interruptions.

The vulnerability of the software for accessing analytics and planning tools in the IBM Analytics Content Hub is related to the escape from buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code or cause service interruptions...

9CVSS6.2AI score0.00713EPSS
SaveExploits0References2Affected Software1
RedhatCVE
RedhatCVE
added 2025/02/05 11:51 p.m.16 views

CVE-2022-41552

Server-Side Request Forgery SSRF vulnerability in Hitachi Infrastructure Analytics Advisor on Linux Data Center Analytics, Analytics probe components, Hitachi Ops Center Analyzer on Linux Hitachi Ops Center Analyzer detail view, Hitachi Ops Center Analyzer probe components allows Server Side...

9.8CVSS6.9AI score0.00662EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/02/05 10:26 p.m.14 views

CVE-2022-45366

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Jason Crouse, VeronaLabs Slimstat Analytics plugin = 5.0.4 versions...

7.1CVSS5.8AI score0.0041EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/02/05 8:14 p.m.13 views

CVE-2022-4815

Hitachi Vantara Pentaho Business Analytics Server versions before 9.4.0.1 and 9.3.0.3, including 8.3.x deserialize untrusted JSON data without constraining the parser to approved classes and methods...

8.8CVSS6.8AI score0.00628EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/02/05 8:14 p.m.21 views

CVE-2022-4895

Improper Certificate Validation vulnerability in Hitachi Infrastructure Analytics Advisor on Linux Analytics probe component, Hitachi Ops Center Analyzer on Linux Analyzer probe component allows Man in the Middle Attack.This issue affects Hitachi Infrastructure Analytics Advisor: from 2.0.0-00...

8.6CVSS6.8AI score0.0028EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/02/05 6:16 p.m.15 views

CVE-2017-20099

A vulnerability was found in Analytics Stats Counter Statistics Plugin 1.2.2.5 and classified as critical. This issue affects some unknown processing. The manipulation leads to code injection. The attack may be initiated remotely...

9.8CVSS7.3AI score0.0114EPSS
SaveExploits1References1
Rows per page
Query Builder