5494 matches found
Oracle E-Business Suite 安全漏洞
Oracle E-Business Suite E-Business Suite is a set of fully integrated global business management software from Oracle Oracle. The software provides customer relationship management, service management, financial management and other functions. A security vulnerability exists in Oracle iProcuremen...
WordPress WooCommerce Easy Duplicate Product Plugin <= 0.3.0.0 is vulnerable to Cross Site Scripting (XSS)
Software WooCommerce Easy Duplicate Product Type Plugin Vulnerable versions = 0.3.0.0 Fixed in 0.3.0.1 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-30747 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 3fcae325f207...
CVE-2022-43128
DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2022-42245. Reason: This record is a duplicate of CVE-2022-42245. Notes: All CVE users should reference CVE-2022-42245 instead of this record. All references and descriptions in this record have been removed to prevent accidental usage...
CVE-2022-43128
CVE-2022-43128 is a duplicate of CVE-2022-42245 and references Dreamer CMS 4.0.01 as vulnerable to SQL Injection. Public PoCs show an SQLi in Dreamer CMS (notably via POST to /admin/search/doSearch and related ArchivesMapper.xml usage) with v4.0.0 demonstrated in external advisories and exploit l...
CVE-2023-1271
Rejected reason: Duplicate. Please use CVE-2023-24421...
Open redirect
Rejected reason: Duplicate. Please use CVE-2023-24421...
PT-2023-16852 · Undefined · Undefined
‼ CVE-2023-1271 ‼ REJECT Duplicate. Please use CVE-2023-24421. 📖 Read via "National Vulnerability Database"...
SUSE CVE-2023-28643
Nextcloud server is an open source home cloud implementation. In affected versions when a recipient receives 2 shares with the same name, while a memory cache is configured, the second share will replace the first one instead of being renamed to name 2. It is recommended that the Nextcloud Server...
Duplicate Advisory: pimcore is vulnerable to cross-site scripting in classes module
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-4f25-2x2c-vg6v. This link is maintained to preserve external references. Original Description Cross-site Scripting XSS - Generic in GitHub repository pimcore/pimcore prior to 10.5.20...
Duplicate Advisory: Pimcore vulnerable to Reflected XSS in Predefined Properties module in Settings
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-7r35-chv4-xr3r. This link is maintained ot preserve external references. Original Description Cross-site Scripting XSS - Reflected in GitHub repository pimcore/pimcore prior to 10.5.20...
Duplicate Advisory: Pimcore Cross-site scripting in Predefined Asset Metadata module in Settings
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-6qjm-39vh-729w. This link is maintained ot preserve external references. Original Description Cross-site Scripting XSS - Generic in GitHub repository pimcore/pimcore prior to 10.5.20...
CVE-2023-1648
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2023-0326. Reason: This candidate is a duplicate of CVE-2023-0326. Notes: All CVE users should reference CVE-2023-0326 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...
CVE-2023-1648
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2023-0326. Reason: This candidate is a duplicate of CVE-2023-0326. Notes: All CVE users should reference CVE-2023-0326 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage...
Duplicate Advisory: pullit Command Injection vulnerability
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-8px5-63x9-5c7p. This link is maintained to preserve external references. Original Description The pullit package before 1.4.0 for Node.js allows OS Command Injection because eval is used on an attacker-supplied...
SUSE CVE-2023-27655
REJECT DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2019-9587. Reason: This record is a reservation duplicate of CVE-2019-9587. Notes: All CVE users should reference CVE-2019-9587 instead of this record. All references and descriptions in this record have been removed to prevent accidental usage...
SUSE CVE-2023-1576
This is a duplicate of an earlier CVE, CVE-2022-47069...
CVE-2023-24787
DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2023-24685. Reason: This record is a duplicate of CVE-2023-24685. Notes: All CVE users should reference CVE-2023-24685 instead of this record. All references and descriptions in this record have been removed to prevent accidental usage...
CVE-2023-24787
CVE-2023-24787 is a duplicate of CVE-2023-24685 and the record is marked as such in the description. Connected sources provide concrete details about ChurchCRM SQL injection via the Event parameter in the /churchcrm/EventAttendance.php endpoint (param Event) used after authentication. The vulnera...
UBUNTU-CVE-2023-27655
REJECT DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2019-9587. Reason: This record is a reservation duplicate of CVE-2019-9587. Notes: All CVE users should reference CVE-2019-9587 instead of this record. All references and descriptions in this record have been removed to prevent accidental usage...
