Approved changes feed: RSS · Atom
cpe:2.3:a:matomo:matomo:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Matomo (21a512e7-6247-5f2d-9ce2-74205c18c8ba) |
|---|---|
| Product | Matomo (0baf95f5-d38a-51b6-b353-58f62e1ceb8b) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/matomo-org/matomo |
purl2cpe | 2026-06-01 10:15:16.497584 |
pkg:rpm/opensuse/matomo |
purl2cpe | 2026-06-01 10:15:16.497587 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2015-7816 |
vulnerable | 2026-06-08 05:07:01.998285 |
Details available
The DisplayTopKeywords function in plugins/Referrers/Controller.php in Piwik before 2.15.0 allows remote attackers to conduct PHP object injection attacks, conduct Server-Side Request Forgery (SSRF) attacks, and execute arbitrary PHP code via a crafted HTTP header.
Published: 2015-11-16T19:00:00.000Z
Updated: 2024-08-06T07:59:00.479Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-7815 |
vulnerable | 2026-06-08 05:07:01.997831 |
Details available
Directory traversal vulnerability in core/ViewDataTable/Factory.php in Piwik before 2.15.0 allows remote attackers to include and execute arbitrary local files via the viewDataTable parameter.
Published: 2015-11-16T19:00:00.000Z
Updated: 2024-08-06T07:59:00.585Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-2633 |
vulnerable | 2026-06-08 05:04:27.137679 |
Details available
Piwik before 1.11 accepts input from a POST request instead of a GET request in unspecified circumstances, which might allow attackers to obtain sensitive information by leveraging the logging of parameters.
Published: 2013-03-21T21:00:00.000Z
Updated: 2024-09-16T17:53:59.529Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-1844 |
vulnerable | 2026-06-08 05:03:56.749645 |
Details available
Cross-site scripting (XSS) vulnerability in Piwik before 1.11 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Published: 2013-03-21T21:00:00.000Z
Updated: 2024-09-17T01:51:34.424Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-0195 |
vulnerable | 2026-06-08 05:03:45.769468 |
Details available
Cross-site Scripting (XSS) in Piwik before 1.10.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: This is a different vulnerability than CVE-2013-0193 and CVE-2013-0194.
Published: 2019-11-20T14:31:59.000Z
Updated: 2024-08-06T14:18:09.555Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-0194 |
vulnerable | 2026-06-08 05:03:45.769129 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-0193 |
vulnerable | 2026-06-08 05:03:45.768717 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-4541 |
vulnerable | 2026-06-08 05:02:51.338934 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-0401 |
vulnerable | 2026-06-08 04:56:36.793137 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-0400 |
vulnerable | 2026-06-08 04:56:36.791413 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-0399 |
vulnerable | 2026-06-08 04:56:36.789683 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-0398 |
vulnerable | 2026-06-08 04:56:36.787897 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-0004 |
vulnerable | 2026-06-08 04:56:32.923953 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-1085 |
vulnerable | 2026-06-08 04:51:12.961189 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.