UBUNTU-CVE-2023-21989

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 6.1.44 and Prior to 7.0.8. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox...

Schneider Electric NetBotz 安全漏洞

Schneider Electric NetBotz is a proactive monitoring solution from Schneider Electric, France. It is designed to protect against physical, environmental, or human threats that can cause IT infrastructure disruption or downtime. A security vulnerability exists in Schneider Electric NetBotz 4 V4.7....

Oracle SQL Developer 安全漏洞

Oracle SQL Developer is a free integrated development environment from Oracle Corporation that simplifies the development and management of Oracle databases. A security vulnerability exists in Oracle SQL Developer versions prior to 23.1.0. An attacker exploiting this vulnerability could take over...

PT-2023-18415 · Tribe29 · Tribe29 Checkmk Appliance

Name of the Vulnerable Software and Affected Versions: Tribe29 Checkmk Appliance versions prior to 1.6.4 Description: The issue allows a local attacker to retrieve passwords by reading log files, specifically due to sensitive data exposure in Webconf. This can lead to unauthorized access to...

PT-2023-3225

Name of the Vulnerable Software and Affected Versions sqlparse versions prior to 0.4.4 Description The SQL parser contains a regular expression that is vulnerable to ReDoS Regular Expression Denial of Service. This issue may lead to Denial of Service DoS. The vulnerability was introduced by commi...

PT-2023-2663 · Oracle +8 · Mysql Server +7

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 8.0.32 and prior Description: The vulnerability exists in the MySQL Server product of Oracle MySQL, specifically in the Server: JSON component, due to insufficient input validation. This allows a high-privileged attacker...

Apache Spark 安全漏洞

Apache Spark is a large-scale data processing engine that supports acyclic data streaming and in-memory computation from the Apache Foundation USA. A security vulnerability exists in Apache Spark versions prior to 3.4.0. An attacker could exploit this vulnerability to gain privileges and execute...

Faturamatik Bircard SQL注入漏洞

Faturamatik Bircard is a computing e-money and payment center application from Faturamatik Turkey. An SQL injection vulnerability exists in Faturamatik Bircard versions prior to 23.04.05, which stems from improper neutralization of special elements, which can lead to SQL injection...

Nextcloud 信息泄露漏洞

Nextcloud is an open source suite of self-hosted file synchronization and sharing communication application platform from Nextcloud, Germany. An information disclosure vulnerability exists in versions of Nextcloud prior to 15.0.5, which stems from a user who is later added to a conversation being...

CVE-2022-2525

Improper Restriction of Excessive Authentication Attempts in GitHub repository janeczku/calibre-web prior to 0.6.20...

LibreSSL 信任管理问题漏洞

LibreSSL is an open source implementation of a secure socket layer and transport layer security protocol. A security vulnerability exists in LibreSSL versions prior to 3.4.2, which stems from an error that sometimes drops unvalidated certificate chains, and an authentication bypass...

CVE-2023-2103 Cross-site Scripting (XSS) - Stored in alextselegidis/easyappointments

Cross-site Scripting XSS - Stored in GitHub repository alextselegidis/easyappointments prior to 1.5.0...

CVE-2023-2102 Cross-site Scripting (XSS) - Stored in alextselegidis/easyappointments

Cross-site Scripting XSS - Stored in GitHub repository alextselegidis/easyappointments prior to 1.5.0...

PT-2023-17430 · Froxlor · Froxlor

Name of the Vulnerable Software and Affected Versions: froxlor versions prior to 2.0.14 Description: The issue concerns the unrestricted upload of files with dangerous types in the GitHub repository froxlor/froxlor. Specifically, image files uploaded were not properly validated, which could resul...

Vitess 安全漏洞

Vitess is a database clustering system for horizontally scaling MySQL from Vitess. A security vulnerability exists in Vitess versions prior to 16.0.1 that stems from an error message received by anyone attempting to view keyspaces from VTAdmin...

CVE-2023-2014 Cross-site Scripting (XSS) - Generic in microweber/microweber

Cross-site Scripting XSS - Generic in GitHub repository microweber/microweber prior to 1.3.3...

Talend Data Catalog 代码问题漏洞

Talend Data Catalog is a tool that combines data cataloging and metadata management from Talend. It is used to connect data from platforms, databases, and analytic tools to generate a holistic view of the information supply chain in a language everyone can understand. A security vulnerability...

Microweber 跨站脚本漏洞

Microweber is an online store management system that provides drag and drop functionality from the Microweber community in the United States. The system includes modules for adding products, images, and more. A cross-site scripting vulnerability exists in Microweber versions prior to 1.3.3 that...

Adobe Substance 3D Designer 资源管理错误漏洞

Adobe Substance 3D Designer is a 3D design software from Adobe. A resource management error vulnerability exists in Adobe Substance 3D Designer version 12.4.0 and prior versions, which stems from a post-release reuse vulnerability that could lead to the execution of arbitrary code in the current...

PT-2023-4424 · Unknown · Sheetjs Community Edition

Name of the Vulnerable Software and Affected Versions: SheetJS Community Edition versions prior to 0.19.3 Description: The issue is related to a Prototype Pollution vulnerability, which can be exploited by a remote attacker using a specially crafted file, potentially allowing for unauthorized...