CVEs published April 18, 2023
190 CVEs were published on April 18, 2023: 22 critical, 36 high.
- Published
- 190
- Critical
- 22
- High
- 36
- Medium
- 119
- Low
- 13
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 50
Most affected products
- Oracle MySQL Server
- 23
- Oracle VM VirtualBox
- 10
- Schneider Electric StruxureWare Data Center Expert
- 9
- hhyo Archery
- 8
- Oracle Java SE JDK and JRE
- 7
- Campcodes Online Thesis Archiving System
- 6
- Oracle Banking Virtual Account Management
- 6
- Oracle Health Sciences InForm
- 6
- Oracle Solaris Operating System
- 6
- Oracle WebLogic Server
- 6
Critical 22
- CVE-2023-29516Code injection from view right on XWiki.AttachmentSelector in xwiki-platformxwiki-platform · org.xwiki.platform:xwiki-platform-attachme…
- CVE-2023-29514Code injection in template provider administration in xwiki-platformxwiki-platform · org.xwiki.platform.applications:xwiki-a… +2
- CVE-2023-29512Code injection in xwiki-platform-web-templatesxwiki-platform · org.xwiki.platform:xwiki-platform-web-temp…
- CVE-2023-29510Code injection via unescaped translations in xwiki-platformxwiki-platform · org.xwiki.platform:xwiki-platform-administ…
- CVE-2023-29522Code injection from view right on XWiki.ClassSheet in xwiki-platformxwiki-platform · org.xwiki.platform:xwiki-platform-xclass-ui
- CVE-2023-29519Code injection in org.xwiki.platform:xwiki-platform-attachment-uixwiki-platform · org.xwiki.platform:xwiki-platform-attachme…
- CVE-2023-29518Code injection from view right using Invitation.InvitationCommon in xwiki-platformxwiki-platform · org.xwiki.platform:xwiki-platform-invitati…
- CVE-2023-29523Code injection in display method used in user profiles in xwiki-platformxwiki-platform · org.xwiki.platform:xwiki-platform-oldcore
- CVE-2023-29524Code injection from account through XWiki.SchedulerJobSheet in xwiki-platformxwiki-platform · org.xwiki.platform:xwiki-platform-schedule…
- CVE-2023-29525Privilege escalation from view right on XWiki.Notifications.Code.LegacyNotificationAdministration in xwiki-platformxwiki-platform · org.xwiki.platform:xwiki-platform-distr… +1
- CVE-2023-29526Async and display macro allow displaying and interacting with any document in restricted modexwiki-platform · org.xwiki.platform:xwiki-platform-oldco… +1
- CVE-2023-29527Code injection from account through AWM view sheet in xwiki platformxwiki-platform · org.xwiki.platform:xwiki-platform-appwithi…
- CVE-2023-28004 A CWE-129: Improper validation of an array index vulnerability exists where a specially crafted Ethernet request could result in denial oSchneider Electric PowerLogic HDPM6000
- CVE-2023-29412CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could cause remSchneider Electric APC Easy UPS Online Monitoring Software…
- CVE-2023-29411 A CWE-306: Missing Authentication for Critical Function vulnerability exists that could allow changes to administrative credentials, leadinSchneider Electric APC Easy UPS Online Monitoring Software…
- CVE-2023-28839Improper neutralization in an SQL query in Shoppingfeedshoppingflux module-prestashop
- CVE-2021-28254A deserialization vulnerability in the destruct() function of Laravel v8.5.9 allows attackers to execute arbitrary commands.
- CVE-2021-40506An issue was discovered in the ALU unit of the OR1200 (aka OpenRISC 1200) processor 2011-09-10 through 2015-11-11.
- CVE-2021-40507An issue was discovered in the ALU unit of the OR1200 (aka OpenRISC 1200) processor 2011-09-10 through 2015-11-11.
- CVE-2022-46640Nanoleaf Desktop App before v1.3.1 was discovered to contain a command injection vulnerability which is exploited via a crafted HTTP request
- CVE-2023-2138Use of Hard-coded Credentials in nuxtlabs/github-modulenuxtlabs/github-module · @nuxtlabs/github-module
- CVE-2023-28863AMI MegaRAC SPx12 and SPx13 devices have Insufficient Verification of Data Authenticity.
High 36
- CVE-2023-29517Exposure of Sensitive Information to an Unauthorized Actor in org.xwiki.platform:xwiki-platform-office-viewerxwiki-platform · org.xwiki.platform:xwiki-platform-office-v…
- CVE-2023-29515Cross-site scripting (XSS) in xwiki-platformxwiki-platform · org.xwiki.platform:xwiki-platform-appwi… +1
- CVE-2023-29521Code injection from account/view through VFS Tree macro in xwiki-platformxwiki-platform · org.xwiki.platform:xwiki-platform-vfs-ui
- CVE-2023-29002Debug mode leaks confidential data in Ciliumcilium · github.com/cilium/cilium
- CVE-2023-29410 A CWE-20: Improper Input Validation vulnerability exists that could allow an authenticated attacker to gain the same privilege as the appliSchneider Electric InsightHome · Schneider Electric Insi… +1
- CVE-2023-29413 A CWE-306: Missing Authentication for Critical Function vulnerability exists that could cause Denial-of-Service when accessed by an unautheSchneider Electric APC Easy UPS Online Monitoring Software…
- CVE-2023-25550 A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists that allows remote code execution via the Schneider Electric StruxureWare Data Center Expert
- CVE-2023-25549 A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists that allows for remote code execution when uSchneider Electric StruxureWare Data Center Expert
- CVE-2023-25554 A CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that allows aSchneider Electric StruxureWare Data Center Expert
- CVE-2023-25552 A CWE-862: Missing Authorization vulnerability exists that could allow viewing of unauthorized content, changes or deleting of content, oSchneider Electric StruxureWare Data Center Expert
- CVE-2023-25548 A CWE-863: Incorrect Authorization vulnerability exists that could allow access to device credentials on specific DCE endpoints not being pSchneider Electric StruxureWare Data Center Expert
- CVE-2023-25547 A CWE-863: Incorrect Authorization vulnerability exists that could allow remote code execution on upload and install packages when a hackerSchneider Electric StruxureWare Data Center Expert
- CVE-2022-43377 A CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists that could cause account takeover when a brutSchneider Electric NetBotz 4 - 355/450/455/550/570
- CVE-2022-43376 A CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists that could cause codeSchneider Electric NetBotz 4 - 355/450/455/550/570
- CVE-2023-21996Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Services).Oracle WebLogic Server
- CVE-2023-21990Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2023-21987Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2023-21985Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility).Oracle Solaris Operating System
- CVE-2023-21980Vulnerability in the MySQL Server product of Oracle MySQL (component: Client programs).Oracle MySQL Server
- CVE-2023-21979Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).Oracle WebLogic Server
- CVE-2023-21964Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).Oracle WebLogic Server
- CVE-2023-21948Vulnerability in the Oracle Solaris product of Oracle Systems (component: Core).Oracle Solaris Operating System
- CVE-2023-21932Vulnerability in the Oracle Hospitality OPERA 5 Property Services product of Oracle Hospitality Applications (component: OXI).Oracle Hospitality OPERA 5 Property Services
- CVE-2023-21931Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).Oracle WebLogic Server
- CVE-2023-21930Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).Oracle Java SE JDK and JRE
- CVE-2023-21923Vulnerability in the Oracle Health Sciences InForm product of Oracle Health Sciences Applications (component: Core).Oracle Health Sciences InForm
- CVE-2023-21912Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges).Oracle MySQL Server
- CVE-2023-21896Vulnerability in the Oracle Solaris product of Oracle Systems (component: NSSwitch).Oracle Solaris Operating System
- CVE-2023-22294Privilege escalation in Checkmk ApplianceTribe29 Checkmk Appliance
- CVE-2023-25556 A CWE-287: Improper Authentication vulnerability exists that could allow a device to be compromised when a key of less than seven digits isSchneider Electric Merten INSTABUS Tastermodul 1fach Sys… +5
- CVE-2023-27976 A CWE-668: Exposure of Resource to Wrong Sphere vulnerability exists that could cause remote code execution when a valid user visits a maliSchneider Electric EcoStruxure Control Expert
- CVE-2022-45836WordPress Download Manager Plugin <= 3.2.59 is vulnerable to Cross Site Scripting (XSS)W3 Eden Download Manager
- CVE-2021-41612An issue was discovered in the ALU unit of the OpenRISC mor1kx processor.
- CVE-2021-41614An issue was discovered in the controller unit of the OpenRISC mor1kx processor.
- CVE-2023-29855WBCE CMS 1.5.3 has a command execution vulnerability via admin/languages/install.php.
- CVE-2023-29887A Local File inclusion vulnerability in test.php in spreadsheet-reader 0.5.11 allows remote attackers to include arbitrary files via the Fil
Medium, low and unrated 132
- CVE-2023-29513Users can be created even when registration is disabled without validation via the template macro in xwiki-platformxwiki-platform · org.xwiki.platform:xwiki-platform-web-temp…
- CVE-2023-29520Page render failure due to broken translations in xwiki-platformxwiki-platform · org.xwiki.platform:xwiki-platform-localiza…
- CVE-2023-30605Multiple SQL injections in sql/instance.py param_edit method in Archery - GHSL-2022-104hhyo Archery
- CVE-2023-30558Multiple SQL injections in sql/data_dictionary.py table_list method in Archery - GHSL-2022-105hhyo Archery
- CVE-2023-30557SQL injection in data_dictionary.py table_info method in Archery - GHSL-2022-106hhyo Archery
- CVE-2023-30556SQL injection in sql_optimize.py optimize_sqltuningadvisor method in Archery - GHSL-2022-107hhyo Archery
- CVE-2023-30555SQL injection in sql_optimize.py explain method in Archery - GHSL-2022-108hhyo Archery
- CVE-2023-30554SQL injection in sql_api/api_workflow.py endpoint in Archery - GHSL-2022-103hhyo Archery
- CVE-2023-30553Multiple SQL injections in sql_api/api_workflow.py endpoint in Archery - GHSL-2022-102hhyo Archery
- CVE-2023-30552SQL injection in sql/instance.py endpoint in Archery - GHSL-2022-101hhyo Archery
- CVE-2023-30606Multisite denial of service through unsanitized dynamic dispatch to SiteSetting in Discoursediscourse
- CVE-2023-30608Parser contains an inefficient regular expression in sqlparseandialbrecht sqlparse · sqlparse
- CVE-2023-30538Stored Cross-site Scripting via improper sanitization of svg files in Discoursediscourse
- CVE-2023-29196HTML injection via topic embedding in Discoursediscourse
- CVE-2023-28856`HINCRBYFLOAT` can be used to crash a redis-server processredis
- CVE-2023-28003 A CWE-613: Insufficient Session Expiration vulnerability exists that could allow an attacker to maintain unauthorized access over a hijacSchneider Electric EcoStruxure Power Monitoring Expert
- CVE-2023-28440Denial of service via admin theme import route in Discoursediscourse
- CVE-2023-25555 A CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists thaSchneider Electric StruxureWare Data Center Expert
- CVE-2023-25553 A CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists on a DCE enSchneider Electric StruxureWare Data Center Expert
- CVE-2023-25551 A CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists on a DCE fileSchneider Electric StruxureWare Data Center Expert
- CVE-2023-26049Cookie parsing of quoted values can exfiltrate values from other cookies in Eclipse Jettyeclipse jetty.project · org.eclipse.jetty:jetty-server
- CVE-2023-26048OutOfMemoryError for large multipart without filename in Eclipse Jettyeclipse jetty.project · org.eclipse.jetty:jetty-server
- CVE-2022-43378 A CWE-1021: Improper Restriction of Rendered UI Layers or Frames vulnerability exists that could cause the user to be tricked into peSchneider Electric NetBotz 4 - 355/450/455/550/570
- CVE-2023-22003Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility).Oracle Solaris Operating System
- CVE-2023-22002Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2023-22001Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2023-22000Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2023-21999Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2023-21998Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2023-21997Vulnerability in the Oracle User Management product of Oracle E-Business Suite (component: Proxy User Delegation).Oracle User Management
- CVE-2023-21993Vulnerability in the Oracle Clinical Remote Data Capture product of Oracle Health Sciences Applications (component: Forms).Oracle Clinical Remote Data Capture Option
- CVE-2023-21992Vulnerability in the PeopleSoft Enterprise HCM Human Resources product of Oracle PeopleSoft (component: Administer Workforce).Oracle PeopleSoft Enterprise HCM Human Resources
- CVE-2023-21991Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2023-21989Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2023-21988Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2023-21986Vulnerability in the Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Native Image).Oracle GraalVM Enterprise Edition
- CVE-2023-21984Vulnerability in the Oracle Solaris product of Oracle Systems (component: Libraries).Oracle Solaris Operating System
- CVE-2023-21982Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2023-21981Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Elastic Search).Oracle PeopleSoft Enterprise PT PeopleTools
- CVE-2023-21978Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: GUI).Oracle Application Object Library
- CVE-2023-21977Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2023-21976Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2023-21973Vulnerability in the Oracle iProcurement product of Oracle E-Business Suite (component: E-Content Manager Catalog).Oracle iProcurement
- CVE-2023-21972Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML).Oracle MySQL Server
- CVE-2023-21971Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J).Oracle MySQL Connectors
- CVE-2023-21970Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Security).Oracle BI Publisher
- CVE-2023-21969Vulnerability in Oracle SQL Developer (component: Installation).Oracle SQL Developer
- CVE-2023-21968Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries).Oracle Java SE JDK and JRE
- CVE-2023-21967Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).Oracle Java SE JDK and JRE
- CVE-2023-21966Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: JSON).Oracle MySQL Server
- CVE-2023-21965Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Server).Oracle Business Intelligence Enterprise Edition
- CVE-2023-21963Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Connection Handling).Oracle MySQL Server
- CVE-2023-21962Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Components Services).Oracle MySQL Server
- CVE-2023-21960Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).Oracle WebLogic Server
- CVE-2023-21959Vulnerability in the Oracle iReceivables product of Oracle E-Business Suite (component: Attachments).Oracle iReceivables
- CVE-2023-21956Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Container).Oracle WebLogic Server
- CVE-2023-21955Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Partition).Oracle MySQL Server
- CVE-2023-21954Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).Oracle Java SE JDK and JRE
- CVE-2023-21953Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Partition).Oracle MySQL Server
- CVE-2023-21952Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Server).Oracle Business Intelligence Enterprise Edition
- CVE-2023-21947Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Components Services).Oracle MySQL Server
- CVE-2023-21946Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2023-21945Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2023-21944Vulnerability in Oracle Essbase (component: Security and Provisioning).Oracle Hyperion Essbase
- CVE-2023-21943Vulnerability in Oracle Essbase (component: Security and Provisioning).Oracle Hyperion Essbase
- CVE-2023-21942Vulnerability in Oracle Essbase (component: Security and Provisioning).Oracle Hyperion Essbase
- CVE-2023-21941Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Web Server).Oracle BI Publisher
- CVE-2023-21940Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Components Services).Oracle MySQL Server
- CVE-2023-21939Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Swing).Oracle Java SE JDK and JRE
- CVE-2023-21938Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries).Oracle Java SE JDK and JRE
- CVE-2023-21937Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).Oracle Java SE JDK and JRE
- CVE-2023-21936Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC).Oracle JD Edwards EnterpriseOne Tools
- CVE-2023-21935Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2023-21934Vulnerability in the Java VM component of Oracle Database Server.Oracle Database - Enterprise Edition
- CVE-2023-21933Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL).Oracle MySQL Server
- CVE-2023-21929Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL).Oracle MySQL Server
- CVE-2023-21928Vulnerability in the Oracle Solaris product of Oracle Systems (component: IPS repository daemon).Oracle Solaris Operating System
- CVE-2023-21927Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Interoperability SEC).Oracle JD Edwards EnterpriseOne Tools
- CVE-2023-21926Vulnerability in the Oracle Health Sciences InForm product of Oracle Health Sciences Applications (component: Core).Oracle Health Sciences InForm
- CVE-2023-21925Vulnerability in the Oracle Health Sciences InForm product of Oracle Health Sciences Applications (component: Core).Oracle Health Sciences InForm
- CVE-2023-21924Vulnerability in the Oracle Health Sciences InForm product of Oracle Health Sciences Applications (component: Core).Oracle Health Sciences InForm
- CVE-2023-21922Vulnerability in the Oracle Health Sciences InForm product of Oracle Health Sciences Applications (component: Core).Oracle Health Sciences InForm
- CVE-2023-21921Vulnerability in the Oracle Health Sciences InForm product of Oracle Health Sciences Applications (component: Core).Oracle Health Sciences InForm
- CVE-2023-21920Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2023-21919Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL).Oracle MySQL Server
- CVE-2023-21918Vulnerability in the Oracle Database Recovery Manager component of Oracle Database Server.Oracle Database - Enterprise Edition
- CVE-2023-21917Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2023-21916Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Web Server).Oracle PeopleSoft Enterprise PT PeopleTools
- CVE-2023-21915Vulnerability in the Oracle Banking Payments product of Oracle Financial Services Applications (component: Book/Internal Transfer).Oracle Banking Payments
- CVE-2023-21913Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2023-21911Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).Oracle MySQL Server
- CVE-2023-21910Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Web General).Oracle Business Intelligence Enterprise Edition
- CVE-2023-21909Vulnerability in the Siebel CRM product of Oracle Siebel CRM (component: UI Framework).Oracle Siebel UI Framework
- CVE-2023-21908Vulnerability in the Oracle Banking Virtual Account Management product of Oracle Financial Services Applications (component: OBVAM Trn JournOracle Banking Virtual Account Management
- CVE-2023-21907Vulnerability in the Oracle Banking Virtual Account Management product of Oracle Financial Services Applications (component: OBVAM Trn JournOracle Banking Virtual Account Management
- CVE-2023-21906Vulnerability in the Oracle Banking Virtual Account Management product of Oracle Financial Services Applications (component: SMS Module).Oracle Banking Virtual Account Management
- CVE-2023-21905Vulnerability in the Oracle Banking Virtual Account Management product of Oracle Financial Services Applications (component: Routing Hub).Oracle Banking Virtual Account Management
- CVE-2023-21904Vulnerability in the Oracle Banking Virtual Account Management product of Oracle Financial Services Applications (component: OBVAM Trn JournOracle Banking Virtual Account Management
- CVE-2023-21903Vulnerability in the Oracle Banking Virtual Account Management product of Oracle Financial Services Applications (component: OBVAM Internal Oracle Banking Virtual Account Management
- CVE-2023-21902Vulnerability in the Oracle Financial Services Behavior Detection Platform product of Oracle Financial Services Applications (component: AppOracle Financial Services Behavior Detection Platform
- CVE-2022-34755 A CWE-427 - Uncontrolled Search Path Element vulnerability exists that could allow an attacker with a local privileged account to place a sSchneider Electric Easergy Builder Installer
- CVE-2023-22307Site-Passwords in GET parametersTribe29 Checkmk Appliance
- CVE-2023-1548 A CWE-269: Improper Privilege Management vulnerability exists that could cause a local user to perform a denial of service through the consSchneider Electric EcoStruxure Control Expert
- CVE-2023-28143Local Privilege EscalationQualys Cloud Agent
- CVE-2023-28142Race ConditionQualys Cloud Agent
- CVE-2023-28141NTFS JunctionQualys Cloud Agent
- CVE-2023-28140Executable HijackingQualys Cloud Agent
- CVE-2023-2155SourceCodester Air Cargo Management System cross site scriptingSourceCodester Air Cargo Management System
- CVE-2023-2154SourceCodester Task Reminder System sql injectionSourceCodester Task Reminder System
- CVE-2023-2153SourceCodester Complaint Management System POST Parameter editable_ajax.php cross site scriptingSourceCodester Complaint Management System
- CVE-2023-2152SourceCodester Student Study Center Desk Management System index.php file inclusionSourceCodester Student Study Center Desk Management System
- CVE-2022-44632WordPress Content Repeater – Custom Posts Simplified Plugin <= 1.1.13 is vulnerable to Cross Site Scripting (XSS)Denis Buka Content Repeater – Custom Posts Simplified
- CVE-2023-2151SourceCodester Student Study Center Desk Management System manage_student.php sql injectionSourceCodester Student Study Center Desk Management System
- CVE-2023-2150SourceCodester Task Reminder System Master.php sql injectionSourceCodester Task Reminder System
- CVE-2022-44735WordPress WP Clictracker Plugin <= 1.0.5 is vulnerable to Cross Site Scripting (XSS)Gus Sevilla WP Clictracker
- CVE-2022-45839WordPress WHA Puzzle Plugin <= 1.0.9 is vulnerable to Cross Site Scripting (XSS)WHA Puzzle
- CVE-2023-2149Campcodes Online Thesis Archiving System manage_user.php sql injectionCampcodes Online Thesis Archiving System
- CVE-2022-45838WordPress ARForms Form Builder Plugin <= 1.5.5 is vulnerable to Cross Site Scripting (XSS)Repute InfoSystems ARForms Form Builder
- CVE-2023-2148Campcodes Online Thesis Archiving System view_curriculum.php sql injectionCampcodes Online Thesis Archiving System
- CVE-2023-2147Campcodes Online Thesis Archiving System view_details.php sql injectionCampcodes Online Thesis Archiving System
- CVE-2023-2146Campcodes Online Thesis Archiving System Master.php sql injectionCampcodes Online Thesis Archiving System
- CVE-2023-2020Unauthorized scheduling of downtimes via REST APITribe29 Checkmk
- CVE-2023-2145Campcodes Online Thesis Archiving System projects_per_curriculum.php sql injectionCampcodes Online Thesis Archiving System
- CVE-2023-2144Campcodes Online Thesis Archiving System view_department.php sql injectionCampcodes Online Thesis Archiving System
- CVE-2023-2120Thumbnail carousel slider <= 1.1.9 - Reflected Cross-Site Scriptingnik00726 Thumbnail carousel slider
- CVE-2023-2119Responsive Filterable Portfolio <= 1.0.19 - Reflected Cross-Site Scriptingnik00726 Responsive Filterable Portfolio
- CVE-2021-41613An issue was discovered in the controller unit of the OpenRISC mor1kx processor.
- CVE-2023-2160Weak Password Requirements in modoboa/modoboamodoboa/modoboa · modoboa
- CVE-2023-27043The email module of Python through 3.11.3 incorrectly parses e-mail addresses that contain a special character.
- CVE-2023-27092Cross Site Scripting vulnerability found in Jbootfly allows attackers to obtain sensitive information via the username parameter.
- CVE-2023-29774Dreamer CMS 3.0.1 is vulnerable to stored Cross Site Scripting (XSS).
- CVE-2023-29854DirCMS 6.0.0 has a Cross Site Scripting (XSS) vulnerability in the foreground.