PT-2019-6784

Name of the Vulnerable Software and Affected Versions Bitweaver versions 2.8.1 and earlier Description The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via the path info to certain API endpoints such as "stats/index.php" or "newsletters/edition.php", ...

CVE-2010-2488

NULL pointer dereference vulnerability in ZNC before 0.092 caused by traffic stats when there are unauthenticated connections...

CVE-2010-2488

NULL pointer dereference vulnerability in ZNC before 0.092 caused by traffic stats when there are unauthenticated connections...

CVE-2010-2488

NULL pointer dereference vulnerability in ZNC before 0.092 caused by traffic stats when there are unauthenticated connections...

CVE-2010-2488

NULL pointer dereference vulnerability in ZNC before 0.092 caused by traffic stats when there are unauthenticated connections...

CVE-2010-2488: NULL Pointer Dereference

NULL pointer dereference vulnerability in ZNC before 0.092 caused by traffic stats when there are unauthenticated connections...

Authentication flaw

In BIG-IQ 6.0.0-6.1.0, services for stats do not require authentication nor do they implement any form of Transport Layer Security TLS...

CVE-2019-6652

CVE-2019-6652 affects F5 BIG-IQ Centralized Management 6.0.0–6.1.0, where BIG-IQ services for stats do not require authentication and lack TLS. The vulnerability can allow an attacker to gain full access to the statistics database on affected BIG-IQ systems. Remediation per vendor is to upgrade t...

CVE-2019-6652: Missing Authentication for Critical Function

In BIG-IQ 6.0.0-6.1.0, services for stats do not require authentication nor do they implement any form of Transport Layer Security TLS...

CVE-2015-9399

The wp-stats-dashboard plugin through 2.9.4 for WordPress has admin/graphtrend.php type SQL injection...

Sql injection

The wp-stats-dashboard plugin through 2.9.4 for WordPress has admin/graphtrend.php type SQL injection...

CVE-2015-9399

The wp-stats-dashboard plugin through 2.9.4 for WordPress has admin/graphtrend.php type SQL injection...

CVE-2015-9399

The vulnerability CVE-2015-9399 affects the WordPress plugin wp-stats-dashboard (versions up to 2.9.4). It is an admin/graph_trend.php SQL injection, described as an authenticated vulnerability (authenticated blind SQL injection in WP‑Stats‑Dashboard

CVE-2015-9399: Improper Neutralization of Special Elements used in an SQL Command

The wp-stats-dashboard plugin through 2.9.4 for WordPress has admin/graphtrend.php type SQL injection...

Integer overflow

libZetta.rs through 0.1.2 has an integer overflow in the zpool parser for error stats that leads to a panic...

CVE-2019-15787

The CVE-2019-15787 issue affects libzetta-rs (libZetta.rs) up to and including 0.1.2, where an integer overflow in the zpool parser (for error stats) can cause a panic. Multiple sources (NVD, Red Hat, CNVD, OSV, etc.) corroborate the description; details on exploitability, specific vulnerable/pat...

CVE-2016-10919

The wassup plugin before 1.9.1 for WordPress has XSS via the Top stats widget or the wassupURI::addsiteurl method, a different vulnerability than CVE-2012-2633...

Security feature bypass

The wassup plugin before 1.9.1 for WordPress has XSS via the Top stats widget or the wassupURI::addsiteurl method, a different vulnerability than CVE-2012-2633...

CVE-2016-10919: Improper Neutralization of Input During Web Page Generation

The wassup plugin before 1.9.1 for WordPress has XSS via the Top stats widget or the wassupURI::addsiteurl method, a different vulnerability than CVE-2012-2633...

Moderate: Red Hat Security Advisory: podman security, bug fix, and enhancement update

An update for podman is now available for Red Hat Enterprise Linux 7 Extras. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...