CVE-2019-13466

Concretely affected: Western Digital SSD Dashboard and SanDisk SSD Dashboard prior to version 2.5.1.0. Vulnerability: Incorrect access control where the generate reports archive is protected with a hard-coded password. Root cause: insufficient access restrictions for archive generation. Impact: p...

PT-2019-13351

Name of the Vulnerable Software and Affected Versions Western Digital SSD Dashboard versions prior to 2.5.1.0 SanDisk SSD Dashboard versions prior to 2.5.1.0 Description The issue is related to Incorrect Access Control. Specifically, the generate reports archive is protected with a hard-coded...

CVE-2019-13467: Undefined Security Weakness

Description: Western Digital SSD Dashboard before 2.5.1.0 and SanDisk SSD Dashboard before 2.5.1.0 applications are potentially vulnerable to man-in-the-middle attacks when the applications download resources from the Dashboard web service. This vulnerability may allow an attacker to substitute...

PT-2019-13352

Name of the Vulnerable Software and Affected Versions Western Digital SSD Dashboard versions prior to 2.5.1.0 SanDisk SSD Dashboard versions prior to 2.5.1.0 Description The issue allows for man-in-the-middle attacks when the applications download resources from the Dashboard web service,...

CVE-2019-13466: Use of Hard-coded Credentials

Western Digital SSD Dashboard before 2.5.1.0 and SanDisk SSD Dashboard before 2.5.1.0 have Incorrect Access Control. The “generate reports” archive is protected with a hard-coded password. An application update that addresses the protection of archive encryption is available...

Akaunting 1.3.17 Cross Site Scripting

Title: Stored XSS In akaunting compnay name alt Affected Version: 1.0.0 - 1.3.17 Tested on: Chrome, Firefox, Opera Latest version Author: Rudra Sarkar @rudr4sarkar 1. Affected "alt" attribute 2. Create account, Confirm Email Verification 3. Create Company name with "alertdocument.domain; 4. It wi...

CVE-2015-9399

The wp-stats-dashboard plugin through 2.9.4 for WordPress has admin/graphtrend.php type SQL injection...

Sql injection

The wp-stats-dashboard plugin through 2.9.4 for WordPress has admin/graphtrend.php type SQL injection...

CVE-2015-9399

The wp-stats-dashboard plugin through 2.9.4 for WordPress has admin/graphtrend.php type SQL injection...

CVE-2015-9399

The vulnerability CVE-2015-9399 affects the WordPress plugin wp-stats-dashboard (versions up to 2.9.4). It is an admin/graph_trend.php SQL injection, described as an authenticated vulnerability (authenticated blind SQL injection in WP‑Stats‑Dashboard

CVE-2015-9399: Improper Neutralization of Special Elements used in an SQL Command

The wp-stats-dashboard plugin through 2.9.4 for WordPress has admin/graphtrend.php type SQL injection...

PT-2019-7358

Name of the Vulnerable Software and Affected Versions wp-stats-dashboard plugin versions through 2.9.4 Description The issue is related to a type SQL injection in the admin/graph trend.php file of the wp-stats-dashboard plugin for WordPress. Recommendations For versions through 2.9.4, update to a...

CloudBees Jenkins Dashboard View Plugin Cross-Site Scripting Vulnerability

CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools. The product is mainly used to monitor the continuous software version release/testing projects and some timed tasks . Dashboard View Plugin is used in which a...

WordPress 5.0.x < 5.0.6 Multiple Vulnerabilities

According to its self-reported version number, the detected WordPress application is affected by multiple vulnerabilities : - A cross-site scripting XSS vulnerability in post previews by contributors. - A cross-site scripting XSS vulnerability in stored comments. - An unspecified issue with...

WordPress 4.5.x < 4.5.18 Multiple Vulnerabilities

According to its self-reported version number, the detected WordPress application is affected by multiple vulnerabilities : - A cross-site scripting XSS vulnerability in post previews by contributors. - A cross-site scripting XSS vulnerability in stored comments. - An unspecified issue with...

WordPress 5.2.x < 5.2.3 Multiple Vulnerabilities

According to its self-reported version number, the detected WordPress application is affected by multiple vulnerabilities : - A cross-site scripting XSS vulnerability in post previews by contributors. - A cross-site scripting XSS vulnerability in stored comments. - An unspecified issue with...

WordPress 3.8.x < 3.8.30 Multiple Vulnerabilities

According to its self-reported version number, the detected WordPress application is affected by multiple vulnerabilities : - A cross-site scripting XSS vulnerability in post previews by contributors. - A cross-site scripting XSS vulnerability in stored comments. - An unspecified issue with...

WordPress 3.9.x < 3.9.28 Multiple Vulnerabilities

According to its self-reported version number, the detected WordPress application is affected by multiple vulnerabilities : - A cross-site scripting XSS vulnerability in post previews by contributors. - A cross-site scripting XSS vulnerability in stored comments. - An unspecified issue with...

WordPress 4.1.x < 4.1.27 Multiple Vulnerabilities

According to its self-reported version number, the detected WordPress application is affected by multiple vulnerabilities : - A cross-site scripting XSS vulnerability in post previews by contributors. - A cross-site scripting XSS vulnerability in stored comments. - An unspecified issue with...

WordPress 4.2.x < 4.2.24 Multiple Vulnerabilities

According to its self-reported version number, the detected WordPress application is affected by multiple vulnerabilities : - A cross-site scripting XSS vulnerability in post previews by contributors. - A cross-site scripting XSS vulnerability in stored comments. - An unspecified issue with...