2025

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affecte

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Container). Supported v

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Web Utilities). Suppo

Vulnerability in the JDBC component of Oracle Database Server. Supported versions that are affected are 23.4-23.8. Diff

Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are a

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t

Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction and Engineering

Conjur provides secrets management and application identity for infrastructure. An authenticated attacker who is able to

Conjur provides secrets management and application identity for infrastructure. Missing validations in Secrets Manager,

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC). Supporte

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Platform Se

Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: User Interface). Supported versions t

Vulnerability in Oracle REST Data Services (component: General). The supported version that is affected is 24.2.0. Eas

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PIA Core Technology). S

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PIA Core Technology). S

Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). Supported versions th

Vulnerability in the Oracle MES for Process Manufacturing product of Oracle E-Business Suite (component: Device Integrat

Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Preferences). Suppo

File Browser provides a file managing interface within a specified directory and it can be used to upload, delete, previ

In Netgear XR300 V1.0.3.38_10.3.30, a stack-based buffer overflow exists in the HTTPD service through the usb_device.cgi

In Netgear XR300 V1.0.3.38_10.3.30, a stack-based buffer overflow vulnerability exists in the HTTPD service through the

In Netgear XR300 V1.0.3.38_10.3.30, a stack-based buffer overflow vulnerability exists in the HTTPD service through the

DSpace open source software is a repository application which provides durable access to digital resources. Prior to ver

DSpace open source software is a repository application which provides durable access to digital resources. Two related

Nexxt Solutions NCM-X1800 Mesh Router firmware UV1.2.7 and below contains an authenticated command injection vulnerabili

Cross-Site Scripting (XSS) vulnerability in Nexxt Solutions NCM-X1800 Mesh Router firmware UV1.2.7 and below allowing at

Command injection vulnerability in Nexxt Solutions NCM-X1800 Mesh Router versions UV1.2.7 and below, allowing authentica

Apache CXF stores large stream based messages as temporary files on the local filesystem. A bug was introduced which mea

IBM QRadar SIEM 7.5 - 7.5.0 UP12 IF02 is vulnerable to stored cross-site scripting. This vulnerability allows authentica

Dell ECS versions prior to 3.8.1.5/ ObjectScale version 4.0.0.0 contains an Insertion of Sensitive Information into Log

The Companion Auto Update plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘update_delay_days’

A heap-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.2, FortiOS 7.4.0 through 7.4.7, FortiOS

The improper default setting in JiranSoft CrossEditor4 on Windows, Linux, Unix (API modules) potentaily allows Stored XS

The Strong Testimonials plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Testimonial Custom Fie

The timelineofficial/Time-Line- repository contains the source code for the TIME LINE website. A vulnerability was found

Directus is a real-time API and App dashboard for managing SQL database content. Starting in version 9.12.0 and prior to

Directus is a real-time API and App dashboard for managing SQL database content. Starting in version 9.0.0 and prior to

Directus is a real-time API and App dashboard for managing SQL database content. Starting in version 9.0.0 and prior to

Directus is a real-time API and App dashboard for managing SQL database content. Starting in version 9.0.0 and prior to

DRACOON is a file sharing service, and the DRACOON Branding Service allows customers to customize their DRACOON interfac

Caido is a web security auditing toolkit. A reflected cross-site scripting (XSS) vulnerability was discovered in Caido’s

WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A Reflected Cro

WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A Reflected Cro

WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. An Open Redirec

WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A Reflected Cro

Indico is an event management system that uses Flask-Multipass, a multi-backend authentication system for Flask. Startin