CVE-2021-32852 countly-server vulnerable to Cross-site Scripting

Countly, a product analytics solution, is vulnerable to cross-site scripting prior to version 21.11 of the community edition. The victim must follow a malicious link or be redirected there from malicious web site. The attacker must have an account or be able to create one. This issue is patched i...

Design/Logic Flaw

Uncontrolled search path element in the IntelR oneAPI Data Analytics Library oneDAL before version 2021.5 for IntelR oneAPI Base Toolkit may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-25905

Uncontrolled search path element in the IntelR oneAPI Data Analytics Library oneDAL before version 2021.5 for IntelR oneAPI Base Toolkit may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-25905

CVE-2022-25905 affects Intel® oneAPI Toolkits, specifically the Intel® oneAPI Data Analytics Library (oneDAL) prior to 2021.5. The issue is an uncontrolled search path element in the oneDAL component that can allow an authenticated user to potentially escalate privileges via local access. Affecte...

PT-2023-12831 · Intel · Intel(R) Oneapi Data Analytics Library

Name of the Vulnerable Software and Affected Versions: IntelR oneAPI Data Analytics Library oneDAL versions prior to 2021.5 Description: The issue is related to an uncontrolled search path element in the IntelR oneAPI Data Analytics Library oneDAL, which may allow an authenticated user to...

Intel(R) oneAPI DPC++/C++ Compiler 代码问题漏洞

IntelR oneAPI DPC++/C++ Compiler is a compiler from Intel Corporation USA. A security vulnerability exists in IntelR oneAPI Data Analytics Library oneDAL versions prior to 2021.5, which stems from an uncontrolled search path element in the IntelR oneAPI Base Toolkit, and can be exploited by an...

SUSE CVE-2016-7401

The cookie parsing code in Django before 1.8.15 and 1.9.x before 1.9.10, when used on a site with Google Analytics, allows remote attackers to bypass an intended CSRF protection mechanism by setting arbitrary cookies...

Opt-Out for Google Analytics < 2.3.5 - Admin+ Stored XSS

The plugin does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

WordPress Opt-Out for Google Analytics Plugin <= 2.3.4 is vulnerable to Cross Site Scripting (XSS)

Software Opt-Out for Google Analytics Type Plugin Vulnerable versions = 2.3.4 Fixed in 2.3.5 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-25712 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 2387d8d69039 Credits Rio Darmaw...

Malicious code in @superbet-group/martech.lib.google-analytics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 623842b7ea3cf0abe8ef8b80d5eed291e97bcc42d9ad072da19aca5c6d3d456c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-59 Malicious code in @superbet-group/martech.lib.google-analytics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 623842b7ea3cf0abe8ef8b80d5eed291e97bcc42d9ad072da19aca5c6d3d456c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Web beacons on websites and in e-mail

There is a vast number of trackers, which gather information about users activities online. For all intents and purposes, we have grown accustomed to online service providers, marketing agencies, and analytical companies tracking our every mouse click, our social posts, browser and streaming...

pixiv: Stealing Users OAuth authorization code via redirect_uri

A path traversal vulnerability in the OAuth redirecturi parameter allowed attackers to redirect authenticated users to their product page with their OAuth credentials, potentially leading to account takeover. This could occur due to the leakage of the user's authorization code via the query strin...

The vulnerability of the Reporting component in the Oracle Hospitality Reporting and Analytics package of the Oracle Food and Beverage Applications allows a perpetrator to gain unauthorized access to protected data or to modify, add, or delete protected data.

The vulnerability of the Reporting component in the Oracle Hospitality Reporting and Analytics package of the Oracle Food and Beverage Applications relates to insufficient validation of input data. Exploiting this vulnerability may allow an attacker operating remotely to gain unauthorized access ...

Make calculation using 1e18 but protocol allows tokens with different scale

Lines of code Vulnerability details Impact Make calculation using 1e18 but protocol allows tokens with different scale. Proof of Concept Method: Calculation: Factory: Here in factory user can add tokens with scale from 6 to 18. Tools Used Static analytics Code reading Recommended Mitigation Steps...

The vulnerability of the Reporting component of the Oracle Hospitality Reporting and Analytics software package, which allows a hacker to gain full access to the application.

The vulnerability of the Reporting component of the Oracle Hospitality Reporting and Analytics software package in the Oracle Food and Beverage Applications relates to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to gain full access to the...

Metabase Information Disclosure Vulnerability (CNVD-2023-06473)

Metabase is an open source data analytics platform from Metabase Inc. Metabase is vulnerable to an information disclosure vulnerability that stems from exposing sensitive information to an unauthorized user. No details of the vulnerability are currently available...

CVE-2023-23629

Metabase is an open source data analytics platform. Affected versions are subject to Improper Privilege Management. As intended, recipients of dashboards subscriptions can view the data as seen by the creator of that subscription. This allows someone with greater access to data to create a...

CVE-2023-23628

Metabase is an open source data analytics platform. Affected versions are subject to Exposure of Sensitive Information to an Unauthorized Actor. Sandboxed users shouldn't be able to view data about other Metabase users anywhere in the Metabase application. However, when a sandbox user views the...

Design/Logic Flaw

Metabase is an open source data analytics platform. Affected versions are subject to Improper Privilege Management. As intended, recipients of dashboards subscriptions can view the data as seen by the creator of that subscription. This allows someone with greater access to data to create a...