2023

Vulnerability in the Oracle Banking Payments product of Oracle Financial Services Applications (component: Book/Internal

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics W

Vulnerability in the Siebel CRM product of Oracle Siebel CRM (component: UI Framework). Supported versions that are aff

Vulnerability in the Oracle Banking Virtual Account Management product of Oracle Financial Services Applications (compon

Vulnerability in the Oracle Banking Virtual Account Management product of Oracle Financial Services Applications (compon

Vulnerability in the Oracle Banking Virtual Account Management product of Oracle Financial Services Applications (compon

Vulnerability in the Oracle Banking Virtual Account Management product of Oracle Financial Services Applications (compon

Vulnerability in the Oracle Banking Virtual Account Management product of Oracle Financial Services Applications (compon

Vulnerability in the Oracle Banking Virtual Account Management product of Oracle Financial Services Applications (compon

Vulnerability in the Oracle Financial Services Behavior Detection Platform product of Oracle Financial Services Applicat

A CWE-427 - Uncontrolled Search Path Element vulnerability exists that could allow an attacker with a local privileged

Sensitive data exposure in Webconf in Tribe29 Checkmk Appliance before 1.6.4 allows local attacker to retrieve passwords

DirCMS 6.0.0 has a Cross Site Scripting (XSS) vulnerability in the foreground.

A CWE-269: Improper Privilege Management vulnerability exists that could cause a local user to perform a denial of serv

Weak Password Requirements in GitHub repository modoboa/modoboa prior to 2.1.0.

Qualys Cloud Agent for macOS (versions 2.5.1-75 before 3.7) installer allows a local escalation of privilege bounded on

A Race Condition exists in the Qualys Cloud Agent for Windows platform in versions from 3.1.3.34 and before 4.5.3.1. Th

An NTFS Junction condition exists in the Qualys Cloud Agent for Windows platform in versions before 4.8.0.31. Attackers

An Executable Hijacking condition exists in the Qualys Cloud Agent for Windows platform in versions before 4.5.3.1. Att

A vulnerability was found in SourceCodester Task Reminder System 1.0. It has been classified as critical. This affects a

Dreamer CMS 3.0.1 is vulnerable to stored Cross Site Scripting (XSS).

A vulnerability has been found in SourceCodester Student Study Center Desk Management System 1.0 and classified as criti

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in W3 Eden, Inc. Download Manager plugin <= 3.2.59 versions.

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Denis Buka Content Repeater – Custom Posts Simplified

A vulnerability, which was classified as critical, was found in SourceCodester Student Study Center Desk Management Syst

A vulnerability, which was classified as critical, has been found in SourceCodester Task Reminder System 1.0. This issue

A vulnerability classified as critical was found in Campcodes Online Thesis Archiving System 1.0. This vulnerability aff

A vulnerability classified as critical has been found in Campcodes Online Thesis Archiving System 1.0. This affects an u

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in WHA WHA Puzzle plugin <= 1.0.9 versions.

Unauth. Stored Cross-Site Scripting (XSS) vulnerability in Repute InfoSystems ARForms Form Builder plugin <= 1.5.5 versi

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Gus Sevilla WP Clictracker plugin <= 1.0.5 versions.

A vulnerability was found in Campcodes Online Thesis Archiving System 1.0. It has been rated as critical. Affected by th

A vulnerability was found in Campcodes Online Thesis Archiving System 1.0. It has been declared as critical. Affected by

Insufficient permission checks in the REST API in Tribe29 Checkmk <= 2.1.0p27 and <= 2.2.0b4 (beta) allow unauthorized u

Cross Site Scripting vulnerability found in Jbootfly allows attackers to obtain sensitive information via the username p

An issue was discovered in the controller unit of the OpenRISC mor1kx processor. The write logic of Exception Effective

A vulnerability was found in Campcodes Online Thesis Archiving System 1.0. It has been classified as critical. Affected

A vulnerability was found in Campcodes Online Thesis Archiving System 1.0 and classified as critical. This issue affects

The Thumbnail carousel slider plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the search_term p

The Responsive Filterable Portfolio plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the search_

@web3-react is a framework for building Ethereum Apps . In affected versions the `chainId` may be outdated if the user c

OpenZeppelin Contracts is a library for secure smart contract development. A function in the implementation contract may

Nextcloud is a personal home server system. Depending on the set up tags and other workflows this issue can be used to l

slim/psr7 is a PSR-7 implementation for use with Slim 4. In versions prior to 1.6.1 an attacker could sneak in a newline

guzzlehttp/psr7 is a PSR-7 HTTP message library implementation in PHP. Affected versions are subject to improper header

A Use After Free vulnerability in the Layer 2 Address Learning Manager (l2alm) of Juniper Networks Junos OS on QFX Serie

An Improper Input Validation vulnerability in the kernel of Juniper Networks Junos OS and Junos OS Evolved allows an una

A Use After Free vulnerability in the routing protocol daemon of Juniper Networks Junos OS and Junos OS Evolved allows a