7964 matches found
CVE-2025-28962 WordPress Advanced Google Universal Analytics plugin <= 1.0.3 - Broken Access Control to Sensitive Data Exposure vulnerability
Missing Authorization vulnerability in stefanoai Advanced Google Universal Analytics advanced-google-universal-analytics allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Advanced Google Universal Analytics: from n/a through = 1.0.3...
WordPress plugin Advanced Google Universal Analytics 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. A lack of authorization vulnerability exists in WordPress Advanced Google Universal Analytics, which can be exploited by an attacker to cause access control security levels to b...
PT-2025-33153 · Stefanoai · Advanced Google Universal Analytics
Name of the Vulnerable Software and Affected Versions: stefanoai Advanced Google Universal Analytics versions through 1.0.3 Description: A missing authorization flaw in stefanoai Advanced Google Universal Analytics allows exploitation of incorrectly configured access control security levels...
WordPress plugin NetInsight Analytics Implementation Plugin 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site request forgery vulnerability exists i...
PT-2025-33363 · Unknown · Netinsight Analytics Implementation Plugin
Name of the Vulnerable Software and Affected Versions: NetInsight Analytics Implementation Plugin versions through 1.0.3 Description: The NetInsight Analytics Implementation Plugin is susceptible to a Cross-Site Request Forgery CSRF issue. This allows an attacker to potentially perform actions on...
PT-2025-33362 · WordPress · Netinsight Analytics Implementation Plugin
Name of the Vulnerable Software and Affected Versions: NetInsight Analytics Implementation Plugin versions through 1.0.3 Description: A Cross-Site Request Forgery CSRF vulnerability exists in NetInsight Analytics Implementation Plugin, which also allows Stored Cross-Site Scripting XSS...
Exploit for Path Traversal in Rarlab Winrar
CVE-2025-8088: WinRAR Path Traversal Detection Overview Th...
Malicious code in latam-xp-analytics-plugin-gtm (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 333a48f2dfbcb9ab75608fb120182771732f71543d3bc13c3352b144b3022403 The OpenSSF Package Analysis project identified 'latam-xp-analytics-plugin-gtm' @ 2.0.0 npm as malicious. It is considered malicious because: -...
MAL-2025-6808 Malicious code in latam-xp-analytics-plugin-gtm (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 333a48f2dfbcb9ab75608fb120182771732f71543d3bc13c3352b144b3022403 The OpenSSF Package Analysis project identified 'latam-xp-analytics-plugin-gtm' @ 2.0.0 npm as malicious. It is considered malicious because: -...
Malicious code in analytics-messages-definition-activities (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-6400 Malicious code in analytics-messages-definition-activities (npm)
--- -= Per source details. Do not edit below this line.=-...
Security Bulletin: A vulnerability affect Apache Solr, Apache Zookeeper, Logstash shipped with IBM Operations Analytics - Log Analysis (WS-2022-0468)
Summary There is a Jackson-Core vulnerability in Apache Solr, Apache Zookeeper, Logstash shipped with IBM Operations Analytics - Log Analysis Vulnerability Details WSID: WS-2022-0468 DESCRIPTION: The jackson-core package is vulnerable to a Denial of Service DoS attack. The methods in the classes...
Security Bulletin: IBM Cognos Analytics is affected by a security vulnerability in Python JSON Logger (CVE-2025-27607)
Summary There is a vulnerability in Python JSON Logger used by IBM Cognos Analytics CVE-2025-27607. This Security Bulletin relates only to the direct usage of third-party components by IBM Cognos Analytics, and not any nested dependencies within the product. Vulnerability Details...
Malicious code in latam-xp-analytics-plugin-absmartly (npm)
The package communicates with a domain associated with malicious activity...
CVE-2024-40682
IBM SmartCloud Analytics - Log Analysis 1.3.7.0, 1.3.7.1, 1.3.7.2, 1.3.8.0, 1.3.8.1, and 1.3.8.2 could allow a local user to cause a denial of service due to improper validation of specified type of input...
CVE-2024-40686
IBM SmartCloud Analytics - Log Analysis 1.3.7.0, 1.3.7.1, 1.3.7.2, 1.3.8.0, 1.3.8.1, and 1.3.8.2 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. This could allow an attacker to conduct various attacks against the vulnerable system, including...
IBM Security QRadar Network Threat Analytics Resource Management Error Vulnerability
IBM Security QRadar Network Threat Analytics is an advanced network security analysis tool from International Business Machines IBM. A resource management error vulnerability exists in IBM Security QRadar Network Threat Analytics version 1.3.1 and prior versions, which stems from a resource...
CVE-2025-36106
IBM Cognos Analytics Mobile iOS 1.1.0 through 1.1.22 could allow malicious actors to view and modify information coming to and from the application which could then be used to access confidential information on the device or network by using a the deprecated or misconfigured AFNetworking library ...