3666 matches found
CVE-2019-12620
Cisco HyperFlex Software contains a Counter Value Injection vulnerability (CVE-2019-12620) in the statistics collection service. The root cause is insufficient authentication of the statistics collection service, allowing an unauthenticated, remote attacker to inject arbitrary data values, which ...
Cisco HyperFlex Software Counter Value Injection Vulnerability
A vulnerability in the statistics collection service of Cisco HyperFlex Software could allow an unauthenticated, remote attacker to inject arbitrary values on an affected device. The vulnerability is due to insufficient authentication for the statistics collection service. An attacker could explo...
CVE-2019-12620: Insufficient Verification of Data Authenticity
A vulnerability in the statistics collection service of Cisco HyperFlex Software could allow an unauthenticated, remote attacker to inject arbitrary values on an affected device. The vulnerability is due to insufficient authentication for the statistics collection service. An attacker could explo...
PT-2019-3738
Name of the Vulnerable Software and Affected Versions Cisco HyperFlex Software affected versions not specified Description The issue is related to insufficient authentication for the statistics collection service, which could allow a remote attacker to inject arbitrary values on an affected devic...
HackerOne: "Bounties paid in the last 90 days" discloses the undisclosed bounty amount in program statistics
Hi Team, Summary: I have found a bypass on this disclosed report: Know undisclosed Bounty Amount when Bounty Statistics are enabled. Description: When a program does not disclose how much bounty is paid to particular report, but if bounty statics is enabled then undisclosed Bounty Amount can be...
WordPress Visitor Traffic Real Time Statistics Plugin < 1.12 CSRF Vulnerability
The WordPress plugin Copyright C 2019 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the...
WordPress Visitor Traffic Real Time Statistics Plugin < 1.13 CSRF Vulnerability
The WordPress plugin Copyright C 2019 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the...
WordPress visitors-traffic-real-time-statistics plugin cross-site request forgery vulnerability (CNVD-2019-30099)
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. visitors-traffic-real-time-statistics is a real-time website traffic statistics plugin used in it. A cross-site request forgery...
WordPress visitors-traffic-real-time-statistics plugin cross-site request forgery vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. visitors-traffic-real-time-statistics is a real-time website traffic statistics plugin used in it. A cross-site request forgery...
CVE-2019-15831
The visitors-traffic-real-time-statistics plugin before 1.12 for WordPress has CSRF in the settings page...
CVE-2019-15832
The visitors-traffic-real-time-statistics plugin before 1.13 for WordPress has CSRF...
CVE-2019-15831
The visitors-traffic-real-time-statistics plugin before 1.12 for WordPress has CSRF in the settings page...
Cross site request forgery (csrf)
The visitors-traffic-real-time-statistics plugin before 1.12 for WordPress has CSRF in the settings page...
CVE-2019-15832
Affected product: WordPress plugin visitors-traffic-real-time-statistics (pre-1.13). Vulnerability: CSRF in the plugin that can trigger unintended requests from authenticated users. Root cause/impact: described as CSRF with high potential impact on confidentiality, integrity, and availability (CV...
CVE-2019-15832: Cross-Site Request Forgery (CSRF)
The visitors-traffic-real-time-statistics plugin before 1.13 for WordPress has CSRF...
CVE-2019-15831: Cross-Site Request Forgery (CSRF)
The visitors-traffic-real-time-statistics plugin before 1.12 for WordPress has CSRF in the settings page...
PT-2019-14420
Name of the Vulnerable Software and Affected Versions visitors-traffic-real-time-statistics plugin versions prior to 1.12 Description The issue concerns a CSRF problem in the settings page of the plugin. Recommendations For versions prior to 1.12, update to version 1.12 or later to resolve the...
PT-2019-14421
Name of the Vulnerable Software and Affected Versions visitors-traffic-real-time-statistics plugin versions prior to 1.13 Description The issue concerns a CSRF problem in the visitors-traffic-real-time-statistics plugin for WordPress. Recommendations For versions prior to 1.13, update to version...
WordPress newstatpress plugin cross-site scripting vulnerability (CNVD-2019-30373)
WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. newstatpress is a plugin used in it for real-time statistics on blog visits. A cross-site scripting vulnerability exists in the...