7983 matches found
Elevate Your Cybersecurity with Imperva Cloud WAF: More Than Just a Checkbox
In the world of digital modernization, having a web application firewall WAF isnt an option - its a necessity. But in the endless sea of security solutions, how do you choose the right one? How do you ensure that youre not merely checking a box, but genuinely fortifying your digital fortress? Whi...
WordPress plugin Slimstat Analytics SQL Injection Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerability exists i...
The vulnerability of the Azure HDInsights data analytics service, related to insufficient access control, allows attackers to escalate their privileges.
The vulnerability of the Azure HDInsight data analytics service is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to enhance their privileges through a specially crafted request...
Over 100,000 WordPress Websites Affected by XSS and SQLi Vulnerabilities in Slimstat Analytics Plugin
On August 24, 2023, our Wordfence Threat Intelligence team identified and began the responsible disclosure process for a stored Cross-Site Scripting XSS and a Blind SQL Injection vulnerability in the Slimstat Analytics plugin, which is actively installed on more than 100,000 WordPress websites. T...
Security Bulletin: Vulnerability in OpenSSH affects IBM Integrated Analytics System (Sailfish)[CVE-2023-38408]
Summary The OpenSSH package is used by IBM Integrated Analytics System. The IBM Integrated Analytics System has addressed the applicable CVE CVE-2023-38408. Vulnerability Details CVEID:CVE-2023-38408 DESCRIPTION: OpenSSH could allow a remote attacker to execute arbitrary code on the system, cause...
Security Bulletin: Vulnerability in BIND affects IBM Integrated Analytics System (Sailfish)[CVE-2023-2828]
Summary The BIND package is used by IBM Integrated Analytics System. The IBM Integrated Analytics System had addressed the applicable CVE CVE-2023-2828. Vulnerability Details CVEID:CVE-2023-2828 DESCRIPTION: ISC BIND is vulnerable to a denial of service, caused by a flaw that allows the named's...
WordPress Slimstat Analytics 5.0.9 Cross Site Scripting / SQL Injection
Vulnerability Summary from Wordfence Intelligence Description: Slimstat Analytics = 5.0.9 – Authenticated Contributor+ Stored Cross-Site Scripting via Shortcode Affected Plugin: Slimstat Analytics Plugin Slug: wp-slimstat Affected Versions: = 5.0.9 CVE ID: CVE-2023-4597 CVSS Score: 6.4 Medium CVS...
WordPress Slimstat Analytics Plugin <= 5.0.9 is vulnerable to SQL Injection
Software Slimstat Analytics Type Plugin Vulnerable versions = 5.0.9 Fixed in 5.0.10 OWASP Top 10 A1: Injection Classification SQL Injection CVE CVE-2023-4598 Patch priority Low CVSS severity Low 8.5 Developer Claim ownership PSID 8c9d4c888c2a Credits WordFence Required privilege Contributor...
The vulnerability of the online business analytics service IBM Cognos Analytics, which stems from the lack of restrictions on file uploads, allows a perpetrator to upload arbitrary files.
The vulnerability of the online business analytics service IBM Cognos Analytics lies in the lack of restrictions on file uploads. Exploiting this vulnerability allows a malicious actor to upload any files they desire remotely...
The vulnerability of the online business analytics service IBM Cognos Analytics, related to the lack of protection for operational data, allows a perpetrator to disclose protected information.
The vulnerability of the online business analytics service IBM Cognos Analytics lies in the lack of protection for operational data. Exploiting this vulnerability could allow a malicious actor to gain access to protected information remotely...
CVE-2023-40553 WordPress Plausible Analytics Plugin <= 1.3.3 is vulnerable to Cross Site Scripting (XSS)
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Plausible.Io Plausible Analytics plugin = 1.3.3 versions...
CVE-2023-40553 WordPress Plausible Analytics Plugin <= 1.3.3 is vulnerable to Cross Site Scripting (XSS)
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Plausible.Io Plausible Analytics plugin = 1.3.3 versions...
CVE-2023-40553
CVE-2023-40553 affects Plausible Analytics WordPress plugin, buggy in <= 1.3.3. Unauth. Reflected XSS via page-url was reported; patch 1.3.4 fixes the flaw. Impact is reflected XSS leading to potential user impersonation or session manipulation in exposed contexts. Product: Plausible Analytics...
Plausible Analytics < 1.3.4 - Reflected XSS
Description The plugin does not sanitise and escape the page-url parameter before outputting it back in the page, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as admin...
WordPress plugin Plausible Analytics cross-site scripting vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerability...
Security Bulletin: IBM QRadar User Behavior Analytics is vulnerable to components with known vulnerabilities
Summary IBM QRadar User Behavior Analytics contains vulnerable packages/components and that may be identified and potentially exploited. The packages have been updated in the latest release and the vulnerabilities identified in the CVEs have been addressed. Please follow the instructions in the...
The vulnerability of the online business analytics service IBM Cognos Analytics, which is part of the IBM Cloud Pak for Data (CP4D) cloud platform for data analysis, organization, and management, allows a perpetrator to influence the integrity of protected information.
The vulnerability of the online business analytics service IBM Cognos Analytics, which is part of the IBM Cloud Pak for Data CP4D platform for data analysis, organization, and management, relates to insufficient protection of operational data during the processing of the seccomp parameter...
The vulnerability of the SAP BW BI Consumer Service (BICS) service in the SAP Data Management and Analytics systems, such as SAP Business Warehouse and SAP BW/4HANA, allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the SAP BW BI Consumer Service BICS module, which is part of the SAP Business Warehouse and SAP BW/4HANA data management and analytics systems, is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to gain...
CVE-2023-4599
The Email Encoder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'eebmailto' shortcode in versions up to, and including, 2.1.8 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with...
CVE-2023-4599
The Slimstat Analytics plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'eebmailto' shortcode in versions up to, and including, 2.1.7 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers...