Show filters
82 Total Results
Displaying 61-70 of 82
Sort by:
Attacker Value
Unknown
CVE-2017-2147
Disclosure Date: April 28, 2017 (last updated November 26, 2024)
Cross-site scripting vulnerability in WP Statistics version 12.0.4 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
0
Attacker Value
Unknown
CVE-2015-8530
Disclosure Date: May 14, 2016 (last updated November 25, 2024)
Stack-based buffer overflow in the Initialize function in an ActiveX control in IBM SPSS Statistics 19 and 20 before 20.0.0.2-IF0008, 21 before 21.0.0.2-IF0010, 22 before 22.0.0.2-IF0011, 23 before 23.0.0.3-IF0001, and 24 before 24.0.0.0-IF0003 allows remote authenticated users to execute arbitrary code via a long argument.
0
Attacker Value
Unknown
CVE-2015-7489
Disclosure Date: January 01, 2016 (last updated November 25, 2024)
IBM SPSS Statistics 22.0.0.2 before IF10 and 23.0.0.2 before IF7 uses weak permissions (Everyone: Write) for Python scripts, which allows local users to gain privileges by modifying a script.
0
Attacker Value
Unknown
CVE-2015-0140
Disclosure Date: May 25, 2015 (last updated October 05, 2023)
An unspecified ActiveX control in IBM SPSS Statistics 22.0 through FP1 on 32-bit platforms allows remote attackers to execute arbitrary code via a crafted HTML document.
0
Attacker Value
Unknown
CVE-2014-6294
Disclosure Date: October 03, 2014 (last updated October 05, 2023)
Cross-site scripting (XSS) vulnerability in the External links click statistics (outstats) extension 0.0.3 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
0
Attacker Value
Unknown
CVE-2014-6293
Disclosure Date: October 03, 2014 (last updated October 05, 2023)
SQL injection vulnerability in the Statistics (ke_stats) extension before 1.1.2 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, as exploited in the wild in February 2014.
0
Attacker Value
Unknown
CVE-2014-4605
Disclosure Date: July 02, 2014 (last updated October 05, 2023)
Cross-site scripting (XSS) vulnerability in cal/test.php in the ZdStatistics (zdstats) plugin 2.0.1 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the lang parameter.
0
Attacker Value
Unknown
CVE-2013-2371
Disclosure Date: March 15, 2013 (last updated October 05, 2023)
The Web API in the Statistics Server in TIBCO Spotfire Statistics Services 3.3.x before 3.3.1, 4.5.x before 4.5.1, and 5.0.x before 5.0.1 allows remote attackers to obtain sensitive information via an unspecified HTTP request.
0
Attacker Value
Unknown
CVE-2009-4905
Disclosure Date: June 25, 2010 (last updated October 04, 2023)
Multiple cross-site request forgery (CSRF) vulnerabilities in index.php in Acc Statistics 1.1 allow remote attackers to hijack the authentication of administrators for requests that change (1) passwords, (2) usernames, and (3) e-mail addresses.
0
Attacker Value
Unknown
CVE-2009-3784
Disclosure Date: October 26, 2009 (last updated October 04, 2023)
Open redirect vulnerability in Simplenews Statistics 6.x before 6.x-2.0, a module for Drupal, allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.
0
