CVE-2023-21852

CVE-2023-21852 affects Oracle E-Business Suite, specifically the Oracle Learning Management Setup component. Supported vulnerable versions are 12.2.3–12.2.12. The issue stems from insufficient input validation in the Setup area, enabling a remote unauthenticated attacker with network access via H...

CVE-2023-21848

...

CVE-2023-21847

...

CVE-2023-21843

...

CVE-2023-21841

...

CVE-2023-21837

...

CVE-2023-21834

...

CVE-2023-21829

...

CVE-2023-21826

...

CVE-2023-21825

...

CVE-2022-39429

...

GSD-2023-1000855 perf: arm_dsu: Fix hotplug callback leak in dsu_pmu_init()

perf: armdsu: Fix hotplug callback leak in dsupmuinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

transparencia.recife.pe.gov.br Cross Site Scripting vulnerability OBB-3157773

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2018-14628

CVE-2018-14628 describes an information-leak vulnerability in Samba's LDAP server where missing access-control checks allow an authenticated but unprivileged attacker to discover the names and preserved attributes of deleted LDAP objects. The vulnerability affects Samba components handling LDAP d...

CVE-2018-25075

CVE-2018-25075 affects karsany OBridge up to version 1.3. The vulnerability is in the function getAllStandaloneProcedureAndFunction of obridge-main/src/main/java/org/obridge/dao/ProcedureDao.java where manipulation leads to an SQL injection. Exploitation complexity is described as high, with atta...

CVE-2023-23595

CVE-2023-23595 affects BlueCat Device Registration Portal (DRP) 2.2. The issue is an XXE vulnerability that can exfiltrate single-line files (for example, a line that could contain credentials in a .netrc-like format). Public details consistently describe the vulnerable component as the DRP and c...

CVE-2017-20169

CVE-2017-20169 affects GGGGGGGG ToN-MasterServer due to a vulnerability in the file public_html/irc_updater/svr_request_pub.php that enables a SQL injection. The issue is described as critical with potential impact on confidentiality, integrity, and availability. The patch identified as 3a4c7e6d5...

CVE-2023-22494

CVE-2023-22494 is rejected and not an active vulnerability entry.

CVE-2023-0235

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none...

CVE-2022-3143

CVE-2022-3143 affects WildFly Elytron where java.util.Arrays.equals is used in multiple places, enabling timing attacks. The root cause is unsafe comparisons potentially leaking information about secret values; the recommended fix is to replace such comparisons with java.security.MessageDigest.is...