2024

Vulnerability in the Oracle Quoting product of Oracle E-Business Suite (component: User Interface). Supported versions

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported version

Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/Python). Supported versions that ar

Vulnerability in the Oracle Field Service product of Oracle E-Business Suite (component: Field Service Engineer Portal).

Vulnerability in the Oracle Common Applications Calendar product of Oracle E-Business Suite (component: Tasks). Support

Vulnerability in the Oracle Incentive Compensation product of Oracle E-Business Suite (component: Compensation Plan). S

Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Diagnostics). Supported

Vulnerability in the Oracle Cost Management product of Oracle E-Business Suite (component: Cost Planning). Supported ve

Vulnerability in the Oracle Advanced Pricing product of Oracle E-Business Suite (component: Price List). Supported vers

Vulnerability in the Oracle Site Hub product of Oracle E-Business Suite (component: Site Hierarchy Flows). Supported ve

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that a

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: XMLPublisher). Supporte

Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Web Server). Supported versions that a

Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Item Catalog). Supported version

Vulnerability in the Oracle Process Manufacturing Product Development product of Oracle E-Business Suite (component: Qua

Vulnerability in the Oracle Service Bus product of Oracle Fusion Middleware (component: OSB Core Functionality). The s

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Query). Supported versi

Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Layout Templates). Supported versions

Vulnerability in the Oracle Enterprise Manager Fusion Middleware Control product of Oracle Fusion Middleware (component:

Vulnerability in the Oracle Global Lifecycle Management FMW Installer product of Oracle Fusion Middleware (component: Cl

A Cross-Site Request Forgery (CSRF) in Codeigniter 3.1.13 allows attackers to arbitrarily change the Administrator passw

SQL injection vulnerabilities were discovered in Ajax.php, ForWindow.php, ForExport.php, Modules.php, functions/HackingL

Certain HP DesignJet products may be vulnerable to credential reflection which allow viewing SMTP server credentials.

Sakai is a Collaboration and Learning Environment. Starting in version 23.0 and prior to version 23.2, kernel users crea

A vulnerability was found in code-projects Blood Bank Management System 1.0. It has been rated as critical. This issue a

A SQL Injection vulnerability was found in /password-recovery.php of PHPGurukul User Registration & Login and User Manag

A SQL Injection vulnerability was found in /search-result.php of PHPGurukul User Registration & Login and User Managemen

A HTML Injection vulnerability was found in /search-result.php of PHPGurukul User Registration & Login and User Manageme

Cleartext transmission of sensitive information in acep-collector service. The following products are affected: Acronis

In the Linux kernel, the following vulnerability has been resolved: mm: avoid leaving partial pfn mappings around in er

An unauthenticated remote attacker can get read access to files in the "/tmp" directory due to missing authentication.

An unauthenticated local attacker can decrypt the devices config file and therefore compromise the device due to a weak

An unauthenticated remote attacker can perform a brute-force attack on the credentials of the remote service portal with

An unauthenticated local attacker can gain admin privileges by deploying a config file due to improper input validation.

Enterprise Cloud Database from Ragic does not properly validate a specific page parameter, allowing unauthenticated remo

The ee-class from FormosaSoft does not properly validate a specific page parameter, allowing remote attackers with regul

The ee-class from FormosaSoft does not properly validate a specific page parameter, allowing remote attackers with regul

The The AADMY – Add Auto Date Month Year Into Posts plugin for WordPress is vulnerable to arbitrary shortcode execution

SHIRASAGI prior to v1.19.1 processes URLs in HTTP requests improperly, resulting in a path traversal vulnerability. If t

The specific query functionality in the FlowMaster BPM Plus from NewType does not properly restrict user input, allowing

The FlowMaster BPM Plus system from NewType has a privilege escalation vulnerability. Remote attackers with regular priv

WebEIP v3.0 from NewType does not properly validate user input, allowing remote attackers with regular privilege to in

The WP 2FA with Telegram plugin for WordPress is vulnerable to Authentication Bypass in versions up to, and including, 3

The SlimStat Analytics plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the resource parameter in a

Netgear R7000 1.0.11.136 is vulnerable to Command Injection in RMT_invite.cgi via device_name2 parameter.

Netgear EX6120 v1.0.0.68, Netgear EX6100 v1.0.2.28, and Netgear EX3700 v1.0.0.96 are vulnerable to command injection in

Netgear EX6120 v1.0.0.68 is vulnerable to Command Injection in genie_fix2.cgi via the wan_dns1_pri parameter.