Lucene search
K

7661 matches found

Cvelist
Cvelist
added 2025/12/24 4:53 a.m.19 views

CVE-2025-66444 Cross-Site Scripting vulnerability in Hitachi Infrastructure Analytics Advisor and Hitachi Ops Center Analyzer

Cross-site Scripting vulnerability in Hitachi Infrastructure Analytics Advisor Data Center Analytics component and Hitachi Ops Center Analyzer Hitachi Ops Center Analyzer detail view component.This issue affects Hitachi Infrastructure Analytics Advisor:; Hitachi Ops Center Analyzer: from 10.0.0-0...

8.2CVSS0.00164EPSS
Exploits0References1
CVE
CVE
added 2025/12/24 4:52 a.m.9 views

CVE-2025-66445

CVE-2025-66445 describes an authorization bypass in Hitachi’s products: Hitachi Infrastructure Analytics Advisor (Data Center Analytics component) and Hitachi Ops Center Analyzer (detail view component). Affected versions are Hitachi Infrastructure Analytics Advisor before 11.0.5-00 and Hitachi O...

7.1CVSS6.6AI score0.00185EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/12/24 4:52 a.m.20 views

CVE-2025-66445 Authorization bypass vulnerability in Hitachi Infrastructure Analytics Advisor and Hitachi Ops Center Analyzer

Authorization bypass vulnerability in Hitachi Infrastructure Analytics Advisor Data Center Analytics component and Hitachi Ops Center Analyzer Hitachi Ops Center Analyzer detail view component.This issue affects Hitachi Infrastructure Analytics Advisor:; Hitachi Ops Center Analyzer: from 10.0.0-0...

7.1CVSS0.00185EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/12/24 4:52 a.m.3 views

CVE-2025-66445 Authorization bypass vulnerability in Hitachi Infrastructure Analytics Advisor and Hitachi Ops Center Analyzer

Authorization bypass vulnerability in Hitachi Infrastructure Analytics Advisor Data Center Analytics component and Hitachi Ops Center Analyzer Hitachi Ops Center Analyzer detail view component.This issue affects Hitachi Infrastructure Analytics Advisor:; Hitachi Ops Center Analyzer: from 10.0.0-0...

7.1CVSS6.6AI score0.00185EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/12/24 12:0 a.m.3 views

Hitachi Ops Center Analyzer和Hitachi Infrastructure Analytics Advisor 安全漏洞

Hitachi Ops Center Analyzer and Hitachi Infrastructure Analytics Advisor are both products of Hitachi, Ltd. of Japan.Hitachi Ops Center Analyzer is a data center management software. It monitors, reports, and correlates end-to-end performance from servers to storage.Hitachi Infrastructure Analyti...

7.1CVSS6.6AI score0.00185EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/12/24 12:0 a.m.3 views

Hitachi Ops Center Analyzer和Hitachi Infrastructure Analytics Advisor 安全漏洞

Hitachi Ops Center Analyzer and Hitachi Infrastructure Analytics Advisor are both products of Hitachi, Ltd. of Japan.Hitachi Ops Center Analyzer is a data center management software. It monitors, reports, and correlates end-to-end performance from servers to storage.Hitachi Infrastructure Analyti...

8.2CVSS6AI score0.00164EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/12/23 12:0 a.m.3 views

PT-2025-52751

Name of the Vulnerable Software and Affected Versions Hitachi Infrastructure Analytics Advisor versions prior to 11.0.5-00 Hitachi Ops Center Analyzer versions 10.0.0-00 through 11.0.5-00 Description A Cross-site Scripting issue exists in Hitachi Infrastructure Analytics Advisor Data Center...

8.2CVSS6.3AI score0.00164EPSS
Exploits0References8
Positive Technologies
Positive Technologies
added 2025/12/23 12:0 a.m.3 views

PT-2025-52752

Name of the Vulnerable Software and Affected Versions Hitachi Infrastructure Analytics Advisor versions prior to 11.0.5-00 Hitachi Ops Center Analyzer versions 10.0.0-00 through 11.0.5-00 Description An authorization bypass issue exists in Hitachi Infrastructure Analytics Advisor Data Center...

7.1CVSS6.6AI score0.00185EPSS
Exploits0References7
RedhatCVE
RedhatCVE
added 2025/12/20 9:15 a.m.8 views

CVE-2025-14151

The SlimStat Analytics plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'outboundresource' parameter in the slimtrack AJAX action in all versions up to, and including, 5.3.2. This is due to insufficient input sanitization and output escaping on user supplied attributes...

6.1CVSS5.2AI score0.00377EPSS
Exploits0References1
IBM Security Bulletins
IBM Security Bulletins
added 2025/12/19 9:14 p.m.12 views

Security Bulletin: User Entity Behavior Analytics app for IBM QRadar SIEM includes components with known vulnerabilities

Summary Components with known vulnerabilities were addressed in a IBM User Entity Behavior Analytics app release Vulnerability Details CVEID:CVE-2025-55182 DESCRIPTION: A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1.1, and...

10CVSS7.8AI score0.99562EPSS
Exploits380Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2025/12/19 9:13 p.m.9 views

Security Bulletin: IBM Security QRadar Network Threat Analytics app for IBM QRadar SIEM includes components with known vulnerabilities

Summary Components with known vulnerabilities were addressed in a IBM Security QRadar Network Threat Analytics app release Vulnerability Details CVEID:CVE-2025-29927 DESCRIPTION: Next.js is a React framework for building full-stack web applications. Starting in version 1.11.4 and prior to version...

9.1CVSS6.7AI score0.99621EPSS
Exploits58Affected Software1
NVD
NVD
added 2025/12/19 9:15 a.m.7 views

CVE-2025-14151

The SlimStat Analytics plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'outboundresource' parameter in the slimtrack AJAX action in all versions up to, and including, 5.3.2. This is due to insufficient input sanitization and output escaping on user supplied attributes...

7.2CVSS0.00377EPSS
Exploits0References4
CVE
CVE
added 2025/12/19 8:23 a.m.12 views

CVE-2025-14151

CVE-2025-14151 affects SlimStat Analytics for WordPress. The vulnerability is a Stored XSS via the outbound_resource attribute in the slimtrack AJAX action in all versions up to 5.3.2, caused by insufficient input sanitization and output escaping. Unauthenticated attackers can inject scripts that...

7.2CVSS4.9AI score0.00377EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2025/12/19 8:23 a.m.4 views

CVE-2025-14151 SlimStat Analytics <= 5.3.2 - Unauthenticated Stored Cross-Site Scripting

The SlimStat Analytics plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'outboundresource' parameter in the slimtrack AJAX action in all versions up to, and including, 5.3.2. This is due to insufficient input sanitization and output escaping on user supplied attributes...

7.2CVSS4.9AI score0.00377EPSS
Exploits0References4
Cvelist
Cvelist
added 2025/12/19 8:23 a.m.23 views

CVE-2025-14151 SlimStat Analytics <= 5.3.2 - Unauthenticated Stored Cross-Site Scripting

The SlimStat Analytics plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'outboundresource' parameter in the slimtrack AJAX action in all versions up to, and including, 5.3.2. This is due to insufficient input sanitization and output escaping on user supplied attributes...

7.2CVSS0.00377EPSS
Exploits0References4
EUVD
EUVD
added 2025/12/19 8:23 a.m.2 views

EUVD-2025-204479

The SlimStat Analytics plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'outboundresource' parameter in the slimtrack AJAX action in all versions up to, and including, 5.3.2. This is due to insufficient input sanitization and output escaping on user supplied attributes...

6.1CVSS4.8AI score0.00377EPSS
Exploits0References5
Patchstack
Patchstack
added 2025/12/19 7:32 a.m.6 views

WordPress SlimStat Analytics plugin <= 5.3.2 - Unauthenticated Stored Cross-Site Scripting vulnerability

Unauthenticated Stored Cross-Site Scripting vulnerability discovered by Supakiad S. m3ez - E-CQURITY Thailand in WordPress Plugin Slimstat Analytics versions = 5.3.2...

6.1CVSS5.6AI score0.00377EPSS
Exploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2025/12/19 12:0 a.m.5 views

PT-2025-52436

The SlimStat Analytics plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'outbound resource' parameter in the slimtrack AJAX action in all versions up to, and including, 5.3.2. This is due to insufficient input sanitization and output escaping on user supplied attributes...

6.1CVSS5.2AI score0.00377EPSS
Exploits0References5
CNNVD
CNNVD
added 2025/12/19 12:0 a.m.5 views

WordPress plugin SlimStat Analytics 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin... A cross-site scripti...

7.2CVSS5.8AI score0.00377EPSS
Exploits0References5
Microsoft Secure
Microsoft Secure
added 2025/12/18 5:0 p.m.4 views

New Microsoft e-book: 3 reasons point solutions are holding you back

While patchwork tools slow defenders down and impact visibility into potential cyberthreats, they’re an unfortunate reality for many organizations. As digital risk accelerates and attack surfaces multiply, security leaders are doing their best to stitch together point solutions while trying to...

6.5AI score
Exploits0
Rows per page
Query Builder