Design/Logic Flaw

The web server component of TIBCO Software Inc's Spotfire Statistics Services contains multiple vulnerabilities that may allow the remote execution of code. Without needing to authenticate, an attacker may be able to remotely execute code with the permissions of the system account used to run the...

CVE-2018-12410

The web server component of TIBCO Software Inc's Spotfire Statistics Services contains multiple vulnerabilities that may allow the remote execution of code. Without needing to authenticate, an attacker may be able to remotely execute code with the permissions of the system account used to run the...

CVE-2018-12410 TIBCO Spotfire Statistics Services remote execution vulnerabilities

The web server component of TIBCO Software Inc's Spotfire Statistics Services contains multiple vulnerabilities that may allow the remote execution of code. Without needing to authenticate, an attacker may be able to remotely execute code with the permissions of the system account used to run the...

CVE-2018-12410

CVE-2018-12410 involves the web server component of TIBCO Spotfire Statistics Services, which (without authentication) may allow remote code execution with the system account’s privileges. Affected releases are Spotfire Statistics Services up to version 7.11.0. The provided documents describe the...

PT-2018-11151

Name of the Vulnerable Software and Affected Versions TIBCO Spotfire Statistics Services versions up to and including 7.11.0 Description The web server component of TIBCO Software Inc's Spotfire Statistics Services contains multiple issues that may allow remote code execution. An attacker may be...

CVE-2018-12410: Undefined Security Weakness

The web server component of TIBCO Software Inc's Spotfire Statistics Services contains multiple vulnerabilities that may allow the remote execution of code. Without needing to authenticate, an attacker may be able to remotely execute code with the permissions of the system account used to run the...

CVE-2017-5658

The statistics generator in Apache Pony Mail 0.7 to 0.9 was found to be returning timestamp data without proper authorization checks. This could lead to derived information disclosure on private lists about the timing of specific email subjects or text bodies, though without disclosing the conten...

CVE-2017-5658: Exposure of Sensitive Information to an Unauthorized Actor

The statistics generator in Apache Pony Mail 0.7 to 0.9 was found to be returning timestamp data without proper authorization checks. This could lead to derived information disclosure on private lists about the timing of specific email subjects or text bodies, though without disclosing the conten...

PT-2018-8256

Name of the Vulnerable Software and Affected Versions: Apache Pony Mail versions 0.7 through 0.9 Description: The statistics generator in Apache Pony Mail was found to be returning timestamp data without proper authorization checks, potentially leading to derived information disclosure on private...

Unspecified Vulnerability in WordPress Feed Statistics Plugin

WordPress is the WordPress Software Foundation's set of blogging platform using PHP language development, the platform supports in PHP and MySQL server set up a personal blog site.Feed Statistics plugin is used in one of the tracking RSS statistics plugin. An unspecified vulnerability exists in t...

CVE-2018-17074

The Feed Statistics plugin before 4.0 for WordPress has an Open Redirect via the feed-stats-url parameter...

Open redirect

The Feed Statistics plugin before 4.0 for WordPress has an Open Redirect via the feed-stats-url parameter...

CVE-2018-17074

The Feed Statistics plugin before 4.0 for WordPress has an Open Redirect via the feed-stats-url parameter...

CVE-2018-17074

The Feed Statistics plugin before 4.0 for WordPress has an Open Redirect via the feed-stats-url parameter...

CVE-2018-17074

The Feed Statistics plugin before 4.0 for WordPress has an Open Redirect via the feed-stats-url parameter...

CVE-2018-17074

The CVE-2018-17074 entry concerns the WordPress Feed Statistics plugin prior to version 4.0, which contains an Open Redirect vulnerability via the feed-stats-url parameter. The issue allows attackers to redirect users to arbitrary URLs, potentially aiding phishing or credential theft in contexts ...

CVE-2018-17074: URL Redirection to Untrusted Site

The Feed Statistics plugin before 4.0 for WordPress has an Open Redirect via the feed-stats-url parameter...

PT-2018-13879

Name of the Vulnerable Software and Affected Versions WordPress Feed Statistics plugin versions prior to 4.0 Description The issue allows for an Open Redirect via the feed-stats-url parameter. Recommendations For versions prior to 4.0, update to version 4.0 or later to resolve the issue...

CVE-2018-15534: Exposure of Sensitive Information to an Unauthorized Actor

Geutebrueck reporter 16 before 7.8.974.20 has a possibility of unauthenticated access to sensitive information including usernames and hashes via a direct request for /statistics/gscsetup.xml on TCP port 12003...

PT-2018-13070

Name of the Vulnerable Software and Affected Versions Geutebrueck re porter versions prior to 7.8.974.20 Description The issue allows for unauthenticated access to sensitive information, including usernames and hashes. This can be achieved by making a direct request for the...