Lucene search
+L

224 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•1 views

CVE-2026-86810: Improper Authentication

A vulnerability was detected in Open-Web-Analytics up to 1.9.1. The impacted element is the function checkCapabilityAndAuthenticateUser of the file Core/Controller.php of the component Controller. Performing a manipulation results in improper authentication. The attack may be initiated remotely...

7.5CVSS6.6AI score0.00843EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•61 views

PT-2026-88457

A vulnerability was detected in Open-Web-Analytics up to 1.9.1. The impacted element is the function checkCapabilityAndAuthenticateUser of the file Core/Controller.php of the component Controller. Performing a manipulation results in improper authentication. The attack may be initiated remotely...

7.5CVSS6.7AI score0.00843EPSS
SaveExploits0References10
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/08/05 3:00 p.m.•29 views

Malicious code in bigops-web-analytics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18ba471d08385d30965c87d85316db28f34e4cd5f6f5eb20f5f9cedc33cd12bf On require, index.js loads helpers.js which selects a platform-specific endpoint and fetches an opaque binary payload from string-split-obfuscated...

5.6AI score
SaveExploits0References2
OSV
OSV
•added 2026/08/05 3:00 p.m.•16 views

MAL-2026-12858 Malicious code in bigops-web-analytics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18ba471d08385d30965c87d85316db28f34e4cd5f6f5eb20f5f9cedc33cd12bf On require, index.js loads helpers.js which selects a platform-specific endpoint and fetches an opaque binary payload from string-split-obfuscated...

5.6AI score
SaveExploits0References2
Patchstack
Patchstack
•added 2026/05/01 9:33 a.m.•17 views

WordPress AWCA – The Great Analytics Insights for Your eStore plugin <= 3.12.0 - Unauthenticated Reflected Cross-Site Scripting vulnerability

Unauthenticated Reflected Cross-Site Scripting vulnerability discovered by Asaf Mozes in WordPress Plugin Advanced WC Analytics versions = 3.12.0...

6.1CVSS5.8AI score0.00276EPSS
SaveExploits0References1Affected Software1
RedhatCVE
RedhatCVE
•added 2026/02/21 7:30 p.m.•14 views

CVE-2025-68032

Missing Authorization vulnerability in Passionate Brains Advanced WC Analytics advance-wc-analytics allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Advanced WC Analytics: from n/a through = 3.19.0...

6.5CVSS5.5AI score0.00263EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/02/20 12:00 a.m.•13 views

PT-2026-21078

Name of the Vulnerable Software and Affected Versions Passionate Brains Advanced WC Analytics versions through 3.19.0 Description An authorization issue exists in Passionate Brains Advanced WC Analytics, allowing exploitation due to incorrectly configured access control security levels...

5.4AI score0.00263EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2026/01/09 8:52 a.m.•12 views

CVE-2021-2474

Vulnerability in the Oracle Web Analytics product of Oracle E-Business Suite component: Admin. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Web Analytics. Successful attack...

8.5CVSS6.5AI score0.01162EPSS
SaveExploits0References1
OSV
OSV
•added 2025/11/24 11:40 p.m.•9 views

MAL-2025-191217 Malicious code in @everreal/web-analytics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77c0514435a2fcfbbc44b6691737ce9fa17b0397b9cbd490173d9dca9fa18adc The package @everreal/web-analytics was found to contain malicious code. Source: ghsa-malware...

6.8AI score
SaveExploits0References4
EUVD
EUVD
•added 2025/11/24 11:40 p.m.•10 views

EUVD-2025-199321

Malicious code in @everreal/web-analytics npm...

6.6AI score
SaveExploits0References4
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/11/24 11:40 p.m.•13 views

Malicious code in @everreal/web-analytics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77c0514435a2fcfbbc44b6691737ce9fa17b0397b9cbd490173d9dca9fa18adc The package @everreal/web-analytics was found to contain malicious code. Source: ghsa-malware...

6.9AI score
SaveExploits0References4
Snyk
Snyk
•added 2025/11/24 4:24 p.m.•4 views

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

9.8CVSS6.8AI score
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•18 views

EUVD-2014-1533

Malware in sbrugna...

8.8CVSS8.8AI score0.01126EPSS
SaveExploits1References5
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•18 views

EUVD-2014-1287

Malware in sbrugna...

7.5CVSS6.1AI score0.02495EPSS
SaveExploits7References8
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•18 views

EUVD-2021-16932

Malware in sbrugna...

8.5CVSS8.6AI score0.01162EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•15 views

EUVD-2010-2681

Malware in sbrugna...

5.1CVSS6.4AI score0.02687EPSS
SaveExploits2References8
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•15 views

EUVD-2010-2680

Malware in sbrugna...

5CVSS6.4AI score0.02862EPSS
SaveExploits2References6
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•15 views

EUVD-2014-1532

Malware in sbrugna...

4.3CVSS8.6AI score0.01801EPSS
SaveExploits0References6
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•14 views

EUVD-2014-2332

Malware in sbrugna...

9.8CVSS9.5AI score0.02657EPSS
SaveExploits2References6
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•14 views

EUVD-2017-1838

Malware in sbrugna...

8.2CVSS8.3AI score0.01889EPSS
SaveExploits0References4
Rows per page
Query Builder