2023

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication). Supported versions that are

Vulnerability in the Oracle Applications Technology product of Oracle E-Business Suite (component: Reports Configuration

Vulnerability in the Oracle Mobile Security Suite product of Oracle Fusion Middleware (component: Android Mobile Authent

Vulnerability in the Application Express Administration product of Oracle Application Express (component: None). Suppor

Vulnerability in the Application Express Customers Plugin product of Oracle Application Express (component: User Account

Vulnerability in the Application Express Team Calendar Plugin product of Oracle Application Express (component: User Acc

Vulnerability in the Oracle Hyperion Essbase Administration Services product of Oracle Essbase (component: EAS Administr

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication). Supported versions that are

Vulnerability in the Advanced Networking Option component of Oracle Database Server. Supported versions that are affect

ChakraCore branch master cbb9b was discovered to contain a segmentation violation via the function BackwardPass::IsEmpty

ChakraCore branch master cbb9b was discovered to contain a segmentation violation via the function Js::EntryPointInfo::H

ChakraCore branch master cbb9b was discovered to contain a segmentation violation via the function Js::ProfilingHelpers:

ChakraCore branch master cbb9b was discovered to contain a segmentation violation via the function Js::DiagScopeVariable

ChakraCore branch master cbb9b was discovered to contain a stack overflow vulnerability via the function Js::ScopeSlots:

An executable used in Rockwell Automation ThinManager ThinServer can be configured to enable an API feature in the HTTP

A cross site request forgery vulnerability in the BigFix WebUI Software Distribution interface site version 44 and befor

goproxy v1.1 was discovered to contain an issue which can lead to a Denial of service (DoS) via unspecified vectors.

D-LINK DIR-815 v1.01 was discovered to contain a buffer overflow via the component /web/captcha.cgi.

Fides is an open-source privacy engineering platform for managing data privacy requests and privacy regulations. The Fid

Fides is an open-source privacy engineering platform for managing data privacy requests and privacy regulations. The Fid

1Panel is an open source Linux server operation and maintenance management panel. An OS command injection vulnerability

A remotely exploitable command injection vulnerability was found on the Kratos NGC-IDU 9.1.0.4. An attacker can execute

TP-LINK Archer C50v2 Archer C50(US)_V2_160801, TP-LINK Archer C20v1 Archer_C20_V1_150707, and TP-LINK Archer C2v1 Archer

An SQL injection vulnerability in the Payplug (payplug) module for PrestaShop, in versions 3.6.0, 3.6.1, 3.6.2, 3.6.3, 3

The BigFix WebUI uses weak cipher suites.

 URL redirection in Login page in HCL BigFix WebUI allows malicious user to redirect the client browser to an external s

Iagona ScrutisWeb versions 2.1.37 and prior are vulnerable to an insecure direct object reference vulnerability that cou

Missing Authentication for a Critical Function within the Kratos NGC Indoor Unit (IDU) before 11.4 allows remote attacke

Iagona ScrutisWeb versions 2.1.37 and prior are vulnerable to a cryptographic vulnerability that could allow an unauthen

Iagona ScrutisWeb versions 2.1.37 and prior are vulnerable to a remote code execution vulnerability that could allow an

AMI SPx contains a vulnerability in the BMC where a user may inject code which could be executed via a Dynamic Redfish E

AMI MegaRAC SPx12 contains a vulnerability in BMC where a User may cause an authentication bypass by spoofing the HTTP h

Iagona ScrutisWeb versions 2.1.37 and prior are vulnerable to a directory traversal vulnerability that could allow an un

Auth. (admin+) Reflected Cross-Site Scripting (XSS) vulnerability in Hijiri Custom Post Type Generator plugin <= 2.4.2 v

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in wppal Easy Captcha plugin <= 1.0 versions.

Insufficient validation in Bigfix WebUI API App site version < 14 allows an authenticated WebUI user to issue SQL querie

SQL injection vulnerability in HKing2802 Locke-Bot 2.0.2 allows remote attackers to run arbitrary SQL commands via craft

EVERTZ devices 3080IPX exe-guest-v1.2-r26125, 7801FC 1.3 Build 27, and 7890IXG V494 are vulnerable to Arbitrary File Upl

matrix-react-sdk is a react-based SDK for inserting a Matrix chat/voip client into a web page. The Export Chat feature i

XSS attack was possible in DPA 2023.2 due to insufficient input validation

A deadlock flaw was found in the Linux kernel’s BPF subsystem. This flaw allows a local user to potentially crash the sy

A vulnerability has been found in what3words Autosuggest Plugin up to 4.0.0 on WordPress and classified as problematic.

Spring Security versions 5.8 prior to 5.8.5, 6.0 prior to 6.0.5, and 6.1 prior to 6.1.2 could be susceptible to authoriz

In Hazelcast through 5.0.4, 5.1 through 5.1.6, and 5.2 through 5.2.3, executor services don't check client permissions p

The Rockwell Automation Kinetix 5700 DC Bus Power Supply Series A is vulnerable to CIP fuzzing.  The new ENIP connectio

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in CodePeople Booking Calendar Contact Form plugin <= 1.2.40

Auth. (editor+) Stored Cross-Site Scripting (XSS) vulnerability in MagePeople Team Event Manager and Tickets Selling Plu

In NATO Communications and Information Agency anet (aka Advisor Network) through 3.3.0, an attacker can provide a crafte

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WeSecur Security plugin <= 1.2.1 versions.

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Repute InfoSystems ARMember (free), Repute InfoSystems