13083 matches found
CVE-2023-21944
Vulnerability in Oracle Essbase component: Security and Provisioning. The supported version that is affected is 21.4. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Essbase. Successful attacks require human interaction from a...
CVE-2023-21918
Vulnerability in the Oracle Database Recovery Manager component of Oracle Database Server. Supported versions that are affected are 19c and 21c. Easily exploitable vulnerability allows high privileged attacker having Local SYSDBA privilege with network access via Oracle Net to compromise Oracle...
Oracle Database Server 安全漏洞
Oracle Database Server is a set of relational database management system of the United States Oracle Oracle. The database management system provides data management, distributed processing and other functions. A security vulnerability exists in Oracle Database Server version 19c, version 21c. An...
Oracle Siebel CRM 安全漏洞
Oracle Siebel CRM is a set of customer relationship management solutions from Oracle Oracle. The solution includes modules for sales management, marketing management, customer service system, and call center. A security vulnerability exists in Oracle Siebel CRM version 23.3 and earlier versions,...
PT-2023-17411
Name of the Vulnerable Software and Affected Versions Shopware 6 versions 6.4.20.0 through 6.4.20.0 Shopware 6 versions 6.5.0.0-rc1 through 6.5.0.0-rc4 Description The issue allows remote attackers with access to a Twig environment without the Sandbox extension to bypass validation checks and...
CVE-2021-46880
creationtimestamp| type| source ---|---|--- 2023-04-15 07:26:37+00:00| seen| https://t.me/cibsecurity/62216...
PT-2023-17292
Name of the Vulnerable Software and Affected Versions Eskom Water Metering Software versions prior to 23.04.06 Description The issue is related to an SQL Injection vulnerability, which allows for Command Line Execution through SQL Injection. This is due to the improper neutralization of special...
SUSE-SU-2023:1837-1 Security update for apache2-mod_auth_openidc
This update for apache2-modauthopenidc fixes the following issues: - CVE-2022-23527: Fixed open redirect in oidcvalidateredirecturl using tab character bsc1206441. - CVE-2023-28625: Fixed NULL pointer dereference when OIDCStripCookies was set and a crafted Cookie header was supplied bsc1210073...
Arista Networks Extensible Operating System 安全漏洞
Arista Networks Extensible Operating System EOS is a scalable operating system for next-generation data center and cloud solutions from Arista Networks, Inc. in the United States. A security vulnerability exists in the Arista Networks Extensible Operating System that stems from specially crafted...
CVE-2022-43770
creationtimestamp| type| source ---|---|--- 2023-04-11 20:23:37+00:00| seen| https://t.me/cibsecurity/61896...
CVE-2022-47467
creationtimestamp| type| source ---|---|--- 2023-04-11 16:23:18+00:00| seen| https://t.me/cibsecurity/61858...
CVE-2022-43293
creationtimestamp| type| source ---|---|--- 2023-04-11 07:23:18+00:00| seen| https://t.me/cibsecurity/61829 2026-07-29 12:00:40+00:00| seen| https://t.me/CVEhub/10198 2026-07-30 00:01:09+00:00| seen| https://t.me/CVEhub/10198 2026-07-31 08:00:04+00:00| published-proof-of-concept|...
Microsoft Windows Win32K 安全漏洞
Microsoft Windows Win32k is a system file for Windows multi-user administration from Microsoft USA. A security vulnerability exists in Microsoft Windows Win32K. The following products and versions are affected:Windows 11 Version 22H2 for ARM64-based Systems,Windows 11 Version 22H2 for x64-based...
Microsoft Windows Lock Screen 安全漏洞
Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation Microsoft. A security vulnerability exists in Microsoft Windows Lock Screen. The following products and editions are affected:Windows Server 2019 Server Core installation,Window...
SAP Diagnostics Agent 访问控制错误漏洞
SAP Diagnostics Agent is a system diagnostics agent program from SAP, Germany. An access control error vulnerability exists in SAP Diagnostics Agent version 720 that stems from a lack of authentication and code entry cleanup...
LiveAction LiveSP 跨站脚本漏洞
LiveAction LiveSP is a network monitoring software for service providers from LiveAction. A security vulnerability exists in LiveAction LiveSP version v21.1.2. An attacker can exploit the vulnerability to execute arbitrary web script or HTML...
Pegasystem Synchronization Engine 信任管理问题漏洞
Pegasystem Synchronization Engine is a synchronization engine application from Pegasystem Corporation. A security vulnerability exists in Pegasystem Synchronization Engine versions 3.1.1 through 3.1.27, which can be exploited by a user with non-administrative access to change the configuration fi...
CVE-2023-1913
The Maps Widget for Google Maps for WordPress is vulnerable to Stored Cross-Site Scripting via widget settings in versions up to, and including, 4.24 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permission...
CVE-2022-3375
creationtimestamp| type| source ---|---|--- 2023-04-06 00:26:31+00:00| seen| https://t.me/cibsecurity/61508 2025-02-14 10:00:35+00:00| seen| Telegram/Kh8efBJHvicpAq78wT2rTJ4RjQHzhAqP5XrFgNvz5Sn5k-9U...