Lucene search
+L

3409 matches found

CNNVD
CNNVD
•added 2025/03/28 12:00 a.m.•12 views

WordPress plugin PHP/MySQL CPU performance statistics 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A code issue vulnerability exists in...

9.8CVSS9.1AI score0.00538EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/03/27 7:41 p.m.•40 views

CVE-2024-31896

IBM SPSS Statistics 26.0, 27.0.1, 28.0.1, and 29.0.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information...

7.5CVSS6.6AI score0.00198EPSS
SaveExploits0References1
NVD
NVD
•added 2025/03/27 11:15 a.m.•16 views

CVE-2025-30803

Missing Authorization vulnerability in Greg Ross Just Writing Statistics just-writing-statistics allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Just Writing Statistics: from n/a through = 5.3...

4.3CVSS0.00372EPSS
SaveExploits0References1
CVE
CVE
•added 2025/03/27 10:54 a.m.•69 views

CVE-2025-30803

CVE-2025-30803 (Just Writing Statistics) is a Missing Authorization vulnerability in the Just Writing Statistics WordPress plugin (versions

4.3CVSS7.2AI score0.00372EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/03/27 10:52 a.m.•13 views

WordPress Just Writing Statistics plugin <= 5.3 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin Just Writing Statistics versions = 5.3...

4.3CVSS7AI score0.00372EPSS
SaveExploits0Affected Software1
CNVD
CNVD
•added 2025/03/27 12:00 a.m.•22 views

Mattermost Authorization Issues Vulnerability

Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. Mattermost suffers from an authorization issue vulnerability that stems from improper authorization of the Viewer role, which can be exploited by an attacker to still view team and site statistics...

4.3CVSS6.5AI score0.00247EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/27 12:00 a.m.•1 views

CVE-2025-30803: Missing Authorization

Missing Authorization vulnerability in Greg Ross Just Writing Statistics just-writing-statistics allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Just Writing Statistics: from n/a through = 5.3...

4.3CVSS5.9AI score0.00372EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/03/27 12:00 a.m.•10 views

WordPress plugin Just Writing Statistics 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

4.3CVSS8.6AI score0.00372EPSS
SaveExploits0References2
CNVD
CNVD
•added 2025/03/27 12:00 a.m.•72 views

IBM SPSS Statistics Encryption Problem Vulnerability

IBM Spss Statistics is a software package from International Business Machines IBM, Inc. It is used for interactive or batch statistical analysis. An encryption issue vulnerability exists in IBM SPSS Statistics versions 26.0, 27.0.1, 28.0.1, and 29.0.2, which stems from the use of a weak encrypti...

7.5CVSS6.3AI score0.00198EPSS
SaveExploits0References1
OSV
OSV
•added 2025/03/25 7:15 p.m.•13 views

CVE-2024-31896

IBM SPSS Statistics 26.0, 27.0.1, 28.0.1, and 29.0.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information...

7.5CVSS5.8AI score0.00198EPSS
SaveExploits0References1
NVD
NVD
•added 2025/03/25 7:15 p.m.•41 views

CVE-2024-31896

IBM SPSS Statistics 26.0, 27.0.1, 28.0.1, and 29.0.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information...

7.5CVSS0.00198EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/03/25 6:58 p.m.•22 views

CVE-2024-31896 IBM SPSS Statistics information disclosure

IBM SPSS Statistics 26.0, 27.0.1, 28.0.1, and 29.0.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information...

5.9CVSS6.8AI score0.00198EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/03/25 6:58 p.m.•37 views

CVE-2024-31896 IBM SPSS Statistics information disclosure

IBM SPSS Statistics 26.0, 27.0.1, 28.0.1, and 29.0.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information...

5.9CVSS0.00198EPSS
SaveExploits0References1
CVE
CVE
•added 2025/03/25 6:58 p.m.•206 views

CVE-2024-31896

CVE-2024-31896 affects IBM SPSS Statistics versions 26.0, 27.0.1, 28.0.1, and 29.0.2. The issue stems from the use of weaker cryptographic algorithms (notably SHA-1 cipher suites), which could allow an attacker to decrypt highly sensitive information. The IBM security bulletin notes the vulnerabi...

7.5CVSS6.8AI score0.00198EPSS
SaveExploits0References1Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2025/03/25 3:12 p.m.•28 views

Security Bulletin: SHA-1 cipher suites detected in older versions of SPSS Statistics (CVE-2024-31896)

Summary The Statistics server supports SHA-1 cipher suites. SHA-1 was officially deprecated by NIST in 2011, but many applications still rely on it. Up until 2017, only theoretical attacks have been known against SHA-1, which is why many applications still rely on it. Recently, a practical attack...

7.5CVSS6.6AI score0.00198EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2025/03/25 3:04 p.m.•14 views

Security Bulletin: Apache axis.jar is present in older Statistics releases that use IBM SPSS C&DS

Summary Apache Axis is vulnerable to server-side request forgery, caused by a improper input validation by the service admin HTTP API. By sending a specially crafted request, an attacker could exploit this vulnerability to conduct SSRF attack. Customers using IBM SPSS Statistics versions 26-29 wi...

7.2CVSS6.5AI score0.01213EPSS
SaveExploits0Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/25 12:00 a.m.•0 views

CVE-2024-31896: Use of a Broken or Risky Cryptographic Algorithm

IBM SPSS Statistics 26.0, 27.0.1, 28.0.1, and 29.0.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information...

7.5CVSS5.8AI score0.00198EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/03/25 12:00 a.m.•16 views

PT-2025-12815 · Ibm · Ibm Spss Statistics

Name of the Vulnerable Software and Affected Versions: IBM SPSS Statistics versions 26.0 through 29.0.2 Description: The issue concerns the use of weaker than expected cryptographic algorithms, which could allow an attacker to decrypt highly sensitive information. Recommendations: For versions 26...

7.5CVSS6.8AI score0.00198EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2025/03/25 12:00 a.m.•13 views

IBM Spss Statistics 加密问题漏洞

IBM Spss Statistics is a software package from International Business Machines IBM, Inc. It is used for interactive or batch statistical analysis. An encryption issue vulnerability exists in IBM SPSS Statistics versions 26.0, 27.0.1, 28.0.1, and 29.0.2, which stems from the use of a weak encrypti...

7.5CVSS6.6AI score0.00198EPSS
SaveExploits0References4
Securelist
Securelist
•added 2025/03/21 10:00 a.m.•22 views

Threat landscape for industrial automation systems in Q4 2024

Statistics across all threats In Q4 2024, the percentage of ICS computers on which malicious objects were blocked decreased by 0.1 pp from the previous quarter to 21.9%. Percentage of ICS computers on which malicious objects were blocked, by quarter, 2022–2024 Compared to Q4 2023, the percentage...

7.2AI score
SaveExploits0
Rows per page
Query Builder