7 matches found
CVE-2022-2353
Prior to microweber/microweber v1.2.20, due to improper neutralization of input, an attacker can steal tokens to perform cross-site request forgery, fetch contents from same-site and redirect a user...
6.3CVSS6.6AI score0.00508EPSS
SaveExploits1References1
CVE-2025-30694
CVE-2025-30694 affects Oracle Database Server’s XML Database component. Affected versions are 19.3–19.26, 21.3–21.17, and 23.4–23.7. The vulnerability is exploitable by a low-privilege user with User Account privilege who has network access via HTTP, with exploitation requiring user interaction. ...
5.4CVSS4.4AI score0.00379EPSS
SaveExploits0References1Affected Software1
20