Fuzzy SWMP 跨站脚本漏洞

SWMP is a Linux server statistics dashboard by the individual developer of Fuzzy. A cross-site scripting vulnerability exists in Fuzzy SWMP, which stems from a problem with the file swmp.php, where manipulation of the parameter theme can lead to cross-site scripting...

CLSA-2023-1685378213 sysstat: Fix of 2 CVEs

CVE-2023-33204: fix possible buffer overflow in an incomplete fix for CVE-2022-39377...

CVE-2023-33003

A cross-site request forgery CSRF vulnerability in Jenkins Tag Profiler Plugin 0.2 and earlier allows attackers to reset profiler statistics...

CVE-2023-33004

A missing permission check in Jenkins Tag Profiler Plugin 0.2 and earlier allows attackers with Overall/Read permission to reset profiler statistics...

Cross site request forgery (csrf)

A cross-site request forgery CSRF vulnerability in Jenkins Tag Profiler Plugin 0.2 and earlier allows attackers to reset profiler statistics...

Information disclosure

A missing permission check in Jenkins Tag Profiler Plugin 0.2 and earlier allows attackers with Overall/Read permission to reset profiler statistics...

CVE-2023-33004

A missing permission check in Jenkins Tag Profiler Plugin 0.2 and earlier allows attackers with Overall/Read permission to reset profiler statistics...

CVE-2023-33004

A missing permission check in Jenkins Tag Profiler Plugin 0.2 and earlier allows attackers with Overall/Read permission to reset profiler statistics...

CVE-2023-33003

A cross-site request forgery CSRF vulnerability in Jenkins Tag Profiler Plugin 0.2 and earlier allows attackers to reset profiler statistics...

CVE-2023-33003: Cross-Site Request Forgery (CSRF)

A cross-site request forgery CSRF vulnerability in Jenkins Tag Profiler Plugin 0.2 and earlier allows attackers to reset profiler statistics...

CVE-2023-33004: Incorrect Permission Assignment for Critical Resource

A missing permission check in Jenkins Tag Profiler Plugin 0.2 and earlier allows attackers with Overall/Read permission to reset profiler statistics...

PT-2023-24134 · Jenkins · Jenkins Tag Profiler Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Tag Profiler Plugin versions 0.2 and earlier Description: A cross-site request forgery CSRF vulnerability allows attackers to reset profiler statistics. The issue arises because the plugin does not perform a permission check in an HTT...

Jenkins Tag Profiler Plugin 安全漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying and automating any project.Jenkins Plugin is a software application. A security vulnerability...

PT-2023-24135

Name of the Vulnerable Software and Affected Versions Jenkins Tag Profiler Plugin versions 0.2 and earlier Description A missing permission check in the Jenkins Tag Profiler Plugin allows attackers with Overall/Read permission to reset profiler statistics. This issue also results in a cross-site...

Jenkins Tag Profiler Plugin 跨站请求伪造漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is a software application. A security vulnerability...

CVE-2023-0600

The WP Visitor Statistics Real Time Traffic WordPress plugin before 6.9 does not escape user input which is concatenated to an SQL query, allowing unauthenticated visitors to conduct SQL Injection attacks...

CVE-2023-0600

The WP Visitor Statistics Real Time Traffic WordPress plugin before 6.9 does not escape user input which is concatenated to an SQL query, allowing unauthenticated visitors to conduct SQL Injection attacks...

Sql injection

The WP Visitor Statistics Real Time Traffic WordPress plugin before 6.9 does not escape user input which is concatenated to an SQL query, allowing unauthenticated visitors to conduct SQL Injection attacks...

CVE-2023-0600

The WP Visitor Statistics (Real Time Traffic) WordPress plugin versions prior to 6.9 is vulnerable to an unauthenticated SQL Injection attack. The root cause is the failure to escape user input concatenated into an SQL query. Attackers can exploit the visitorId parameter to conduct time-based SQL...

PT-2023-16392 · WordPress · Wp Visitor Statistics

Name of the Vulnerable Software and Affected Versions: WP Visitor Statistics Real Time Traffic versions prior to 6.9 Description: The issue allows unauthenticated visitors to conduct SQL Injection attacks due to the plugin not escaping user input which is concatenated to an SQL query...