Lucene search
+L

3041 matches found

Securelist
Securelist
added 2023/06/07 8:0 a.m.19 views

IT threat evolution Q1 2023. Mobile statistics

IT threat evolution Q1 2023 IT threat evolution Q1 2023. Non-mobile statistics IT threat evolution Q1 2023. Mobile statistics These statistics are based on detection verdicts of Kaspersky products received from users who consented to providing statistical data. Quarterly figures According to...

7AI score
SaveExploits0
CNNVD
CNNVD
added 2023/06/06 12:0 a.m.6 views

Fuzzy SWMP 跨站脚本漏洞

SWMP is a Linux server statistics dashboard by the individual developer of Fuzzy. A cross-site scripting vulnerability exists in Fuzzy SWMP, which stems from a problem with the file swmp.php, where manipulation of the parameter theme can lead to cross-site scripting...

6.1CVSS4.1AI score0.0047EPSS
SaveExploits0References5
OSV
OSV
added 2023/05/29 4:36 p.m.11 views

CLSA-2023-1685378213 sysstat: Fix of 2 CVEs

CVE-2023-33204: fix possible buffer overflow in an incomplete fix for CVE-2022-39377...

7.8CVSS7.3AI score0.01143EPSS
SaveExploits1References1
OSV
OSV
added 2023/05/16 5:15 p.m.9 views

CVE-2023-33003

A cross-site request forgery CSRF vulnerability in Jenkins Tag Profiler Plugin 0.2 and earlier allows attackers to reset profiler statistics...

4.3CVSS5.7AI score0.003EPSS
SaveExploits0References1
NVD
NVD
added 2023/05/16 5:15 p.m.21 views

CVE-2023-33004

A missing permission check in Jenkins Tag Profiler Plugin 0.2 and earlier allows attackers with Overall/Read permission to reset profiler statistics...

4.3CVSS4.5AI score0.00425EPSS
SaveExploits0References1
Prion
Prion
added 2023/05/16 5:15 p.m.26 views

Cross site request forgery (csrf)

A cross-site request forgery CSRF vulnerability in Jenkins Tag Profiler Plugin 0.2 and earlier allows attackers to reset profiler statistics...

4.3CVSS4.6AI score0.003EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2023/05/16 5:15 p.m.25 views

Information disclosure

A missing permission check in Jenkins Tag Profiler Plugin 0.2 and earlier allows attackers with Overall/Read permission to reset profiler statistics...

4CVSS4.4AI score0.00425EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/05/16 4:0 p.m.7 views

CVE-2023-33004

A missing permission check in Jenkins Tag Profiler Plugin 0.2 and earlier allows attackers with Overall/Read permission to reset profiler statistics...

4.5AI score0.00425EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2023/05/16 4:0 p.m.35 views

CVE-2023-33004

A missing permission check in Jenkins Tag Profiler Plugin 0.2 and earlier allows attackers with Overall/Read permission to reset profiler statistics...

4.8AI score0.00425EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2023/05/16 4:0 p.m.28 views

CVE-2023-33003

A cross-site request forgery CSRF vulnerability in Jenkins Tag Profiler Plugin 0.2 and earlier allows attackers to reset profiler statistics...

4.9AI score0.003EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2023/05/16 12:0 a.m.8 views

PT-2023-24134 · Jenkins · Jenkins Tag Profiler Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Tag Profiler Plugin versions 0.2 and earlier Description: A cross-site request forgery CSRF vulnerability allows attackers to reset profiler statistics. The issue arises because the plugin does not perform a permission check in an HTT...

4.3CVSS4.4AI score0.003EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2023/05/16 12:0 a.m.8 views

Jenkins Tag Profiler Plugin 安全漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying and automating any project.Jenkins Plugin is a software application. A security vulnerability...

4.3CVSS5.1AI score0.00425EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2023/05/16 12:0 a.m.9 views

Jenkins Tag Profiler Plugin 跨站请求伪造漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is a software application. A security vulnerability...

4.3CVSS5AI score0.003EPSS
SaveExploits0References4
OSV
OSV
added 2023/05/15 1:15 p.m.8 views

CVE-2023-0600

The WP Visitor Statistics Real Time Traffic WordPress plugin before 6.9 does not escape user input which is concatenated to an SQL query, allowing unauthenticated visitors to conduct SQL Injection attacks...

9.8CVSS7.4AI score0.04234EPSS
SaveExploits2References1
NVD
NVD
added 2023/05/15 1:15 p.m.24 views

CVE-2023-0600

The WP Visitor Statistics Real Time Traffic WordPress plugin before 6.9 does not escape user input which is concatenated to an SQL query, allowing unauthenticated visitors to conduct SQL Injection attacks...

9.8CVSS9.9AI score0.04234EPSS
SaveExploits2References1
Prion
Prion
added 2023/05/15 1:15 p.m.23 views

Sql injection

The WP Visitor Statistics Real Time Traffic WordPress plugin before 6.9 does not escape user input which is concatenated to an SQL query, allowing unauthenticated visitors to conduct SQL Injection attacks...

7.5CVSS9.9AI score0.04234EPSS
SaveExploits2References1Affected Software1
CVE
CVE
added 2023/05/15 12:15 p.m.188 views

CVE-2023-0600

CVE-2023-0600 affects the WordPress plugin WP Visitor Statistics (Real Time Traffic) prior to version 6.9. The issue is that the plugin does not escape user input that is concatenated into an SQL query, enabling unauthenticated SQL Injection attacks. Reported impact describes that unauthenticated...

9.8CVSS10AI score0.04234EPSS
SaveExploits2References1Affected Software1
Positive Technologies
Positive Technologies
added 2023/05/15 12:0 a.m.9 views

PT-2023-16392 · WordPress · Wp Visitor Statistics

Name of the Vulnerable Software and Affected Versions: WP Visitor Statistics Real Time Traffic versions prior to 6.9 Description: The issue allows unauthenticated visitors to conduct SQL Injection attacks due to the plugin not escaping user input which is concatenated to an SQL query...

9.8CVSS10AI score0.04234EPSS
SaveExploits2References6
Oracle linux
Oracle linux
added 2023/05/15 12:0 a.m.61 views

bind security and bug fix update

32:9.16.23-11 - Correct backport issue in statistics rendering fix 2126912 32:9.16.23-10 - Handle subtle difference between upstream and rhel CVE-2022-3094 32:9.16.23-9 - Prevent flooding with UPDATE requests CVE-2022-3094 - Handle RRSIG queries when server-stale is active CVE-2022-3736 - Fix cra...

7.5CVSS7AI score0.48707EPSS
SaveExploits0
CNNVD
CNNVD
added 2023/05/15 12:0 a.m.8 views

WordPress plugin WP Visitor Statistics (Real Time Traffic) SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

9.8CVSS8.6AI score0.04234EPSS
SaveExploits2References2
Rows per page
Query Builder