Oracle Business Intelligence Enterprise Edition 安全漏洞

Oracle Business Intelligence Enterprise Edition is an intelligent business analytics software from Oracle Corporation USA. Visualize and analyze enterprise data to support decision-making, reduce total cost of ownership, and increase ROI across the organization. A security vulnerability exists in...

Oracle BI Publisher 安全漏洞

Oracle BI Publisher is a reporting solution from Oracle Corporation USA that makes it easier and faster to create, manage and deliver all reports and documents than traditional reporting tools. A security vulnerability exists in Oracle BI Publisher for Oracle Analytics. An attacker has exploited...

Oracle BI Publisher 安全漏洞

Oracle BI Publisher is a reporting solution from Oracle Corporation USA that makes it easier and faster to create, manage and deliver all reports and documents than traditional reporting tools. A security vulnerability exists in Oracle BI Publisher for Oracle Analytics. An attacker has exploited...

Oracle BI Publisher 安全漏洞

Oracle BI Publisher is a reporting solution from Oracle Corporation USA that makes it easier and faster to create, manage and deliver all reports and documents than traditional reporting tools. A security vulnerability exists in Oracle BI Publisher for Oracle Analytics. An attacker could exploit...

CVE-2024-32145

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PineWise WP Google Analytics Events allows Reflected XSS.This issue affects WP Google Analytics Events: from n/a through 2.8.0...

CVE-2024-32145 WordPress WP Google Analytics Events – No-Code Custom Event Tracking for Google Analytics plugin <= 2.8.0 - Reflected Cross-Site Scripting vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PineWise WP Google Analytics Events allows Reflected XSS.This issue affects WP Google Analytics Events: from n/a through 2.8.0...

CVE-2024-32145

CVE-2024-32145 affects the WP Google Analytics Events WordPress plugin (vulnerable up to 2.8.0). Root cause: Improper input neutralization during web page generation leading to Reflected XSS. Impact is reflected XSS as stated; CVSS scores in public metrics show base scores around 6.1 (NVD) and 7....

WordPress Plugin WP Google Analytics Events 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. WordPress Plugin WP Google Analytics Events A...

The vulnerability of the Jenkins Red Hat Dependency Analytics plugin, related to improper input handling during the creation of web pages, allows attackers to execute XSS attacks with control over files in the working areas.

The vulnerability of the Jenkins Red Hat Dependency Analytics plugin is related to the lack of Content-Security-Policy protection for user-generated content in working areas, archived artifacts, etc., which Jenkins provides for loading. Exploiting this vulnerability allows a malicious actor to...

WordPress WP Google Analytics Events – No-Code Custom Event Tracking for Google Analytics plugin <= 2.8.0 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by Brandon Roldan Patchstack Alliance in WordPress Plugin WP Google Analytics Events versions = 2.8.0...

WordPress WP Google Analytics Events Plugin <= 2.8.0 is vulnerable to Cross Site Scripting (XSS)

Software WP Google Analytics Events Type Plugin Vulnerable versions = 2.8.0 Fixed in 2.8.1 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-32145 Patch priority Low CVSS severity Low 7.1 Developer Claim ownership PSID 8fc4ab37d76e Credits Brandon Roldan Required...

Cisco IOS XE Software DHCP Snooping with Endpoint Analytics DoS (cisco-sa-dhcp-dos-T3CXPO9z)

According to its self-reported version, Cisco IOS-XE Software is affected by a vulnerability. - A vulnerability in the DHCP snooping feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload unexpectedly, resulting in a denial of servic...

CVE-2024-31937

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Visitor Analytics TWIPLA Visitor Analytics IO allows Stored XSS.This issue affects TWIPLA Visitor Analytics IO: from n/a through 1.2.0...

CVE-2024-31937

CVE-2024-31937 affects the TWIPLA (Visitor Analytics IO) WordPress plugin. The connected Wordfence entry documents a Stored Cross-Site Scripting vulnerability in TWIPLA, described as Improper Neutralization of Input During Web Page Generation. Affected version range is from unspecified inception ...

CVE-2024-31937 WordPress TWIPLA (Visitor Analytics IO) plugin <= 1.2.0 - Cross-Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Visitor Analytics TWIPLA Visitor Analytics IO allows Stored XSS.This issue affects TWIPLA Visitor Analytics IO: from n/a through 1.2.0...

PT-2024-24301 · Twipla · Twipla

Name of the Vulnerable Software and Affected Versions: TWIPLA Visitor Analytics IO versions 1.2.0 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker...

WordPress TWIPLA (Visitor Analytics IO) plugin <= 1.2.0 - Cross-Site Scripting (XSS) vulnerability

Cross-Site Scripting XSS vulnerability discovered by Dhabaleshwar Das Patchstack Alliance in WordPress Plugin TWIPLA Visitor Analytics IO versions = 1.2.0...

WordPress TWIPLA (Visitor Analytics IO) Plugin <= 1.2.0 is vulnerable to Cross Site Scripting (XSS)

Software TWIPLA Visitor Analytics IO Type Plugin Vulnerable versions = 1.2.0 Fixed in 1.3.0 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-31937 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 35e7ceea8aa3 Credits Dhabaleshwar Das Required...

The vulnerability of Hitachi Vantara Pentaho Business Analytics Server lies in its ability to disclose information through a server error message, allowing an intruder to expose the protected information.

The vulnerability of Hitachi Vantara Pentaho Business Analytics Server relates to the disclosure of information through a server error message. Exploiting this vulnerability allows an attacker to remotely disclose the protected information...

Security Bulletin: IBM Planning Analytics Connector for SAP is affected by security vulnerabilities

Summary IBM Planning Analytics Connector for SAP is affected but not classified as vulnerable, based on current information, to vulnerabilities in Golang Go CVE-2022-41723 and Go YAML CVE-2021-4235, CVE-2022-3064. These have been addressed by upgrading the vulnerable libraries. Vulnerability...