3669 matches found
CVE-2021-43082
Buffer Copy without Checking Size of Input 'Classic Buffer Overflow' vulnerability in the stats-over-http plugin of Apache Traffic Server allows an attacker to overwrite memory. This issue affects Apache Traffic Server 9.1.0...
Apache Traffic Server 安全漏洞
Apache Traffic Server, referred to as ATS or TS, is a high-performance, modular HTTP proxy and caching server. stats-over-http plugin in Apache Traffic Server version 9.1.0 is vulnerable to a heap buffer overflow. An attacker could exploit this vulnerability to overwrite memory...
CVE-2015-10001
The WP-Stats WordPress plugin before 2.52 does not have CSRF check when saving its settings, and did not escape some of them when outputting them, allowing attacker to make logged in high privilege users change them and set Cross-Site Scripting payloads...
Cross site scripting
The WP-Stats WordPress plugin before 2.52 does not have CSRF check when saving its settings, and did not escape some of them when outputting them, allowing attacker to make logged in high privilege users change them and set Cross-Site Scripting payloads...
CVE-2015-10001
The CVE-2015-10001 entry concerns the WP-Stats WordPress plugin (pre-2.52). The underlying issue is the absence of CSRF checks when saving settings and incomplete escaping of output, enabling an authenticated, high-privilege user to modify settings and inject Cross-Site Scripting payloads. Affect...
CVE-2015-10001 WP-Stats < 2.5.2 - CSRF to Stored Cross-Site Scripting (XSS)
The WP-Stats WordPress plugin before 2.52 does not have CSRF check when saving its settings, and did not escape some of them when outputting them, allowing attacker to make logged in high privilege users change them and set Cross-Site Scripting payloads...
CVE-2015-10001: Cross-Site Request Forgery (CSRF)
The WP-Stats WordPress plugin before 2.52 does not have CSRF check when saving its settings, and did not escape some of them when outputting them, allowing attacker to make logged in high privilege users change them and set Cross-Site Scripting payloads...
WordPress 跨站请求伪造漏洞
WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site request forgery vulnerability exists in the Wordpress plugin WP-Stats, which is caused ...
PT-2021-8380
Name of the Vulnerable Software and Affected Versions WP-Stats WordPress plugin versions prior to 2.52 Description The issue allows an attacker to make logged-in high-privilege users change settings and set Cross-Site Scripting payloads due to the lack of a CSRF check when saving settings and the...
PT-2021-4797
Name of the Vulnerable Software and Affected Versions Apache Traffic Server version 9.1.0 Description The issue is related to a buffer copy without checking the size of input, also known as a 'Classic Buffer Overflow', in the stats-over-http plugin of Apache Traffic Server. This allows a remote...
CVE-2021-39350
The FV Flowplayer Video Player WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the playerid parameter found in the /view/stats.php file which allows attackers to inject arbitrary web scripts, in versions 7.5.0.727 - 7.5.2.727...
PT-2021-22556 · WordPress · Fv Flowplayer Video Player
Name of the Vulnerable Software and Affected Versions: FV Flowplayer Video Player WordPress plugin versions 7.5.0.727 through 7.5.2.727 Description: The issue allows attackers to inject arbitrary web scripts via the player id parameter found in the /view/stats.php file, enabling Reflected...
PT-2024-11389
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the hwmon feature in the Linux kernel, specifically with the mlxreg-fan driver. The vulnerability occurs when the fan current state is enforced from sysfs and the...
WordPress 插件跨站脚本漏洞
WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the Google Analytics plugin for WordPress, versions...
PT-2021-15966
Name of the Vulnerable Software and Affected Versions ShareThis Dashboard for Google Analytics WordPress plugin versions prior to 2.5.2 Description The issue is related to a reflected Cross-Site Scripting problem. It occurs because the ga action parameter in the stats view is not properly sanitiz...
PYSEC-2021-775
TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can read from outside of bounds of heap allocated data by sending specially crafted illegal arguments to BoostedTreesSparseCalculateBestFeatureSplit. The implementation needs to validate that...
CVE-2021-38590
In cPanel before 96.0.8, weak permissions on web stats can lead to information disclosure SEC-584...
Information disclosure
In cPanel before 96.0.8, weak permissions on web stats can lead to information disclosure SEC-584...
CVE-2021-38590
CVE-2021-38590 affects cPanel before 96.0.8 where weak permissions on web statistics can lead to information disclosure (SEC-584). The vulnerability is caused by insufficient access controls on web stats, enabling local attackers to read information that should be restricted. Impact is informatio...