Sql injection

The wp-stats-dashboard plugin through 2.9.4 for WordPress has admin/graphtrend.php type SQL injection...

CVE-2015-9399

The wp-stats-dashboard plugin through 2.9.4 for WordPress has admin/graphtrend.php type SQL injection...

CVE-2015-9399

The vulnerability CVE-2015-9399 affects the WordPress plugin wp-stats-dashboard (versions up to 2.9.4). It is an admin/graph_trend.php SQL injection, described as an authenticated vulnerability (authenticated blind SQL injection in WP‑Stats‑Dashboard

CVE-2015-9399: Improper Neutralization of Special Elements used in an SQL Command

The wp-stats-dashboard plugin through 2.9.4 for WordPress has admin/graphtrend.php type SQL injection...

PT-2019-7358

Name of the Vulnerable Software and Affected Versions wp-stats-dashboard plugin versions through 2.9.4 Description The issue is related to a type SQL injection in the admin/graph trend.php file of the wp-stats-dashboard plugin for WordPress. Recommendations For versions through 2.9.4, update to a...

Integer overflow

libZetta.rs through 0.1.2 has an integer overflow in the zpool parser for error stats that leads to a panic...

CVE-2019-15787

The CVE-2019-15787 issue affects libzetta-rs (libZetta.rs) up to and including 0.1.2, where an integer overflow in the zpool parser (for error stats) can cause a panic. Multiple sources (NVD, Red Hat, CNVD, OSV, etc.) corroborate the description; details on exploitability, specific vulnerable/pat...

CVE-2016-10919

The wassup plugin before 1.9.1 for WordPress has XSS via the Top stats widget or the wassupURI::addsiteurl method, a different vulnerability than CVE-2012-2633...

Security feature bypass

The wassup plugin before 1.9.1 for WordPress has XSS via the Top stats widget or the wassupURI::addsiteurl method, a different vulnerability than CVE-2012-2633...

CVE-2016-10919

The wassup plugin before 1.9.1 for WordPress has XSS via the Top stats widget or the wassupURI::addsiteurl method, a different vulnerability than CVE-2012-2633...

CVE-2016-10919: Improper Neutralization of Input During Web Page Generation

The wassup plugin before 1.9.1 for WordPress has XSS via the Top stats widget or the wassupURI::addsiteurl method, a different vulnerability than CVE-2012-2633...

PT-2019-7715

Name of the Vulnerable Software and Affected Versions Wassup plugin versions prior to 1.9.1 Description The issue concerns a cross-site scripting XSS vulnerability. It can be exploited via the Top stats widget or the wassupURI::add siteurl method. Recommendations For versions prior to 1.9.1, upda...

Moderate: Red Hat Security Advisory: podman security, bug fix, and enhancement update

An update for podman is now available for Red Hat Enterprise Linux 7 Extras. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

Cross-site Scripting (XSS)

dolibarr/dolibarr is vulnerable to cross-site scripting XSS. The GETPOST functions in htdocs/product/stats/card.php for example for id parameter are not properly validated, allowing an attacker to inject an arbitrary script which will send a specifically crafted link to the user to steal users'...

CVE-2019-1010016

Dolibarr 6.0.4 is affected by: Cross Site Scripting XSS. The impact is: Cookie stealing. The component is: htdocs/product/stats/card.php. The attack vector is: Victim must click a specially crafted link sent by the attacker...

CVE-2019-1010016

Dolibarr 6.0.4 is affected by: Cross Site Scripting XSS. The impact is: Cookie stealing. The component is: htdocs/product/stats/card.php. The attack vector is: Victim must click a specially crafted link sent by the attacker...

CVE-2019-1010016

Dolibarr 6.0.4 is affected by: Cross Site Scripting XSS. The impact is: Cookie stealing. The component is: htdocs/product/stats/card.php. The attack vector is: Victim must click a specially crafted link sent by the attacker...

Cross site scripting

Dolibarr 6.0.4 is affected by: Cross Site Scripting XSS. The impact is: Cookie stealing. The component is: htdocs/product/stats/card.php. The attack vector is: Victim must click a specially crafted link sent by the attacker...

CVE-2019-1010016

Dolibarr 6.0.4 is affected by: Cross Site Scripting XSS. The impact is: Cookie stealing. The component is: htdocs/product/stats/card.php. The attack vector is: Victim must click a specially crafted link sent by the attacker...

CVE-2019-1010016

Dolibarr 6.0.4 is affected by: Cross Site Scripting XSS. The impact is: Cookie stealing. The component is: htdocs/product/stats/card.php. The attack vector is: Victim must click a specially crafted link sent by the attacker...