2023

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that a

Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility). Supported versions that are affecte

Vulnerability in the MySQL Server product of Oracle MySQL (component: Client programs). Supported versions that are aff

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t

Vulnerability in the Oracle Solaris product of Oracle Systems (component: Core). The supported version that is affecte

Vulnerability in the Oracle Hospitality OPERA 5 Property Services product of Oracle Hospitality Applications (component:

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Sup

Vulnerability in the Oracle Health Sciences InForm product of Oracle Health Sciences Applications (component: Core). Su

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions

Vulnerability in the Oracle Solaris product of Oracle Systems (component: NSSwitch). Supported versions that are affect

A CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists that could cause account

A CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists t

Privilege escalation in Tribe29 Checkmk Appliance before 1.6.4 allows authenticated site users to escalate privileges vi

WBCE CMS 1.5.3 has a command execution vulnerability via admin/languages/install.php.

A CWE-287: Improper Authentication vulnerability exists that could allow a device to be compromised when a key of less

A CWE-668: Exposure of Resource to Wrong Sphere vulnerability exists that could cause remote code execution when a vali

An issue was discovered in the controller unit of the OpenRISC mor1kx processor. The read/write access permissions to th

An issue was discovered in the ALU unit of the OpenRISC mor1kx processor. The carry flag is not being updated correctly

An OS Command Injection vulnerability in gRPC Network Operations Interface (gNOI) server module of Juniper Networks Juno

A Missing Release of Memory after Effective Lifetime vulnerability in the routing protocol daemon of Juniper Networks Ju

An Improper Check for Unusual or Exceptional Conditions vulnerability in the packet forwarding engine (pfe) of Juniper N

An Improper Check for Unusual or Exceptional Conditions vulnerability in the bbe-smgd of Juniper Networks Junos OS allow

An Improper Authorization vulnerability in the 'sysmanctl' shell command of Juniper Networks Junos OS Evolved allows a l

An Improper Restriction of Communication Channel to Intended Endpoints vulnerability in the timescaledb feature of Junip

A Use of Uninitialized Resource vulnerability in the Border Gateway Protocol (BGP) software of Juniper Networks Junos OS

An Incorrect Default Permissions vulnerability in Juniper Networks Junos OS Evolved allows a low-privileged local attack

An Improper Handling of Length Parameter Inconsistency vulnerability in the routing protocol daemon (rpd) of Juniper Net

An Incorrect Permission Assignment for Critical Resource vulnerability in Juniper Networks Junos OS Evolved allows a loc

Electra Central AC unit – Adjacent attacker may cause the unit to connect to unauthorized update server.

Electra Central AC unit – Adjacent attacker may cause the unit to load unauthorized FW.

Electra Central AC unit – The unit opens an AP with an easily calculated password.

Electra Central AC unit – Adjacent attacker may cause the unit to load unauthorized FW.

A user may be tricked into opening a malicious FBX file that may exploit a heap buffer overflow vulnerability in Autodes

A user may be tricked into opening a malicious FBX file that may exploit a stack buffer overflow vulnerability in Autode

An Out-Of-Bounds Write Vulnerability in Autodesk® FBX® SDK version 2020 or prior may lead to code execution through mali

A malicious actor may convince a victim to open a malicious USD file that may trigger an out-of-bounds write vulnerabili

A malicious actor may convince a victim to open a malicious USD file that may trigger an out-of-bounds read vulnerabilit

A malicious actor may convince a victim to open a malicious USD file that may trigger an uninitialized variable which ma

APNG_Optimizer v1.4 was discovered to contain a buffer overflow via the component /apngopt/ubuntu.png.

Mattermost fails to redact from audit logs the user password during user creation and the user password hash in other op

go-bbs v1 was discovered to contain an arbitrary file download vulnerability via the component /api/v1/download.

DedeCMS v5.7.106 was discovered to contain a SQL injection vulnerability via the component /dede/sys_sql_query.php.

The Gallery by BestWebSoft WordPress plugin before 4.7.0 does not properly escape values used in SQL queries, leading to

The WC Fields Factory WordPress plugin through 4.1.5 does not properly sanitise and escape a parameter before using it i

Server-side Template Injection (SSTI) in Shopware 6 (<= v6.4.20.0, v6.5.0.0-rc1 <= v6.5.0.0-rc4), affecting both shopwar

In Phoenix Contacts ENERGY AXC PU Web service an authenticated restricted user of the web frontend can access, read, wri

A stack-based buffer overflow vulnerability was found in the ASUSTOR Data Master (ADM) due to the lack of data size vali

XWiki Commons are technical libraries common to several other top level XWiki projects. A user without script rights can