Lucene search
K

7661 matches found

CNVD
CNVD
added 2025/11/14 12:0 a.m.6 views

ZOHO ManageEngine Analytics Plus SQL Injection Vulnerability

ZOHO ManageEngine Analytics Plus is a self-service IT analytics solution from ZOHO. Get a better view of your IT data with rich visualizations and dashboards. A SQL injection vulnerability exists in ZOHO ManageEngine Analytics Plus. An attacker can use this vulnerability to view, add, modify, or...

9.8CVSS7.8AI score0.01526EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/11/13 4:2 p.m.10 views

CVE-2025-64293

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Golemiq 0 Day Analytics 0-day-analytics allows SQL Injection.This issue affects 0 Day Analytics: from n/a through = 4.0.0...

7.6CVSS5.9AI score0.00228EPSS
Exploits0References1
EUVD
EUVD
added 2025/11/13 12:31 p.m.3 views

EUVD-2025-163772

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PascalBajorat Analytics Germanized for Google Analytics ga-germanized allows DOM-Based XSS.This issue affects Analytics Germanized for Google Analytics: from n/a through = 1.6.2...

5.8AI score0.00132EPSS
Exploits0References2
NVD
NVD
added 2025/11/13 10:15 a.m.3 views

CVE-2025-64292

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PascalBajorat Analytics Germanized for Google Analytics ga-germanized allows DOM-Based XSS.This issue affects Analytics Germanized for Google Analytics: from n/a through = 1.6.2...

6.5CVSS0.00132EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/11/13 9:24 a.m.2 views

CVE-2025-64292 WordPress Analytics Germanized for Google Analytics plugin <= 1.6.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PascalBajorat Analytics Germanized for Google Analytics ga-germanized allows DOM-Based XSS.This issue affects Analytics Germanized for Google Analytics: from n/a through = 1.6.2...

6.5CVSS6AI score0.00132EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/11/13 9:24 a.m.9 views

CVE-2025-64292 WordPress Analytics Germanized for Google Analytics plugin <= 1.6.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PascalBajorat Analytics Germanized for Google Analytics ga-germanized allows DOM-Based XSS.This issue affects Analytics Germanized for Google Analytics: from n/a through = 1.6.2...

6.5CVSS0.00132EPSS
Exploits0References1
CVE
CVE
added 2025/11/13 9:24 a.m.11 views

CVE-2025-64292

CVE-2025-64292: WordPress Analytics Germanized for Google Analytics (ga-germanized)

6.5CVSS6AI score0.00132EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/11/13 12:0 a.m.3 views

WordPress plugin Analytics Germanized for Google Analytics 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...

6.5CVSS6AI score0.00132EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/11/13 12:0 a.m.6 views

PT-2025-46809

Name of the Vulnerable Software and Affected Versions PascalBajorat Analytics Germanized for Google Analytics versions through 1.6.2 Description The software contains a flaw related to improper input handling during web page generation, which allows for DOM-Based Cross-site Scripting XSS. This...

6.2AI score0.00132EPSS
Exploits0References3
EUVD
EUVD
added 2025/11/12 6:31 p.m.4 views

EUVD-2025-131910

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Golemiq 0 Day Analytics allows SQL Injection.This issue affects 0 Day Analytics: from n/a through 4.0.0...

7.6CVSS7.1AI score0.00228EPSS
Exploits0References2
NVD
NVD
added 2025/11/12 4:15 p.m.7 views

CVE-2025-64293

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Golemiq 0 Day Analytics 0-day-analytics allows SQL Injection.This issue affects 0 Day Analytics: from n/a through = 4.0.0...

7.6CVSS0.00228EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/11/12 3:52 p.m.5 views

CVE-2025-64293 WordPress 0 Day Analytics plugin <= 4.0.0 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Golemiq 0 Day Analytics 0-day-analytics allows SQL Injection.This issue affects 0 Day Analytics: from n/a through = 4.0.0...

7.6CVSS5.9AI score0.00228EPSS
Exploits0References1
CVE
CVE
added 2025/11/12 3:52 p.m.46 views

CVE-2025-64293

CVE-2025-64293 affects the WordPress plugin “0 Day Analytics” (WordPress plugin) up to and including version 4.0.0. The issue is an SQL Injection caused by improper neutralization of special elements in SQL commands, enabling attacker-controlled input to alter queries. Consequences cited in the s...

7.6CVSS5.9AI score0.00228EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/11/12 3:52 p.m.11 views

CVE-2025-64293 WordPress 0 Day Analytics plugin <= 4.0.0 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Golemiq 0 Day Analytics 0-day-analytics allows SQL Injection.This issue affects 0 Day Analytics: from n/a through = 4.0.0...

7.6CVSS0.00228EPSS
Exploits0References1
Patchstack
Patchstack
added 2025/11/12 3:4 p.m.5 views

WordPress 0 Day Analytics plugin <= 4.0.0 - SQL Injection vulnerability

SQL Injection vulnerability discovered by kwakbumjun in WordPress Plugin 0 Day Analytics versions = 4.0.0...

7.6CVSS7.8AI score0.00228EPSS
Exploits0Affected Software1
RedhatCVE
RedhatCVE
added 2025/11/12 1:6 p.m.6 views

CVE-2025-8324

Zohocorp ManageEngine Analytics Plus versions 6170 and below are vulnerable to Unauthenticated SQL Injection due to the improper filter configuration...

9.8CVSS8AI score0.01526EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/11/12 12:0 a.m.5 views

WordPress Plugin 0 Day Analytics SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin... WordPress...

7.6CVSS7.6AI score0.00228EPSS
Exploits0References2
Packet Storm News
Packet Storm News
added 2025/11/12 12:0 a.m.6 views

SecTracer: A Framework for Uncovering the Root Causes of Network Intrusions Via Security Provenance

Modern enterprise networks comprise diverse and heterogeneous systems that support a wide range of services, making it challenging for administrators to track and analyze sophisticated attacks such as advanced persistent threats APTs, which often exploit multiple vectors. To address this challeng...

6.8AI score
Exploits0
Positive Technologies
Positive Technologies
added 2025/11/12 12:0 a.m.9 views

PT-2025-46673

Name of the Vulnerable Software and Affected Versions Golemiq 0 Day Analytics versions through 4.0.0 Description A flaw exists in Golemiq 0 Day Analytics that allows for SQL Injection due to improper neutralization of special elements used in SQL commands. The issue allows attackers to inject...

7.6CVSS7.1AI score0.00228EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2025/11/11 7:48 p.m.7 views

CVE-2025-33150

IBM Cognos Analytics Certified Containers 12.1.0 could disclose package parameter information due to the presence of hidden pages...

5.3CVSS6.4AI score0.00205EPSS
Exploits0References1
Rows per page
Query Builder