Archive
17 October 2023
Vulnerabilities first published on this day (UTC), newest first.
163 results · Feed
-
High 7.1
A password disclosure vulnerability in the Secure PDF eXchange (SPX) feature allows attackers with full email access to…
-
Low 3.5
Cross-Site Request Forgery (CSRF) in pkp/ojs
Cross-Site Request Forgery (CSRF) in GitHub repository pkp/ojs prior to 3.3.0-16.
-
Medium 5.3
CNA SHORTNAME: dotCMSORG UUID: 5b9d93f2-25c7-46b4-ab60-d201718c9dd8
In dotCMS, versions mentioned, a flaw in the NormalizationFilter does not strip double slashes (//) from URLs, potentially enabling bypasses for XSS and access controls. An example affected URL is https://demo.dotcms.com//html/portlet/ext/files/edit_text_inc.…
-
High 8.2
Prototype pollution vulnerability leading to arbitrary code execution in synchrony deobfuscator
Synchrony deobfuscator is a javascript cleaner & deobfuscator. A `__proto__` pollution vulnerability exists in versions before v2.4.4. Successful exploitation could lead to arbitrary code execution. A `__proto__` pollution vulnerability exists in the `Literal…
-
High 8.8
SonicOS post-authentication Improper Privilege Management vulnerability in the SonicOS SSL VPN Tunnel allows users to e…
-
Unscored —
Stack-based buffer overflow vulnerability exists in OnSinView2 versions 2.0.1 and earlier. If this vulnerability is exp…
-
Unscored —
Improper restriction of operations within the bounds of a memory buffer issue exists in OnSinView2 versions 2.0.1 and e…
-
Medium 5.3
OpenFGA denial of service
OpenFGA is a flexible authorization/permission engine built for developers and inspired by Google Zanzibar. Affected versions of OpenFGA are vulnerable to a denial of service attack. When a number of `ListObjects` calls are executed, in some scenarios, those …
-
Unscored —
SonicOS Use of Hard-coded Password vulnerability in the 'dynHandleBuyToolbar' demo function.
-
Unscored —
SonicOS post-authentication Stack-Based Buffer Overflow Vulnerability in the SSL VPN plainprefs.exp URL endpoint leads …
-
Unscored —
SonicOS post-authentication Stack-Based Buffer Overflow Vulnerability in the sonicwall.exp, prefs.exp URL endpoints lea…
-
Unscored —
SonicOS p ost-authentication Stack-Based Buffer Overflow vulnerability in the ssoStats-s.xml, ssoStats-s.wri URL endpoi…
-
Unscored —
SonicOS post-authentication Stack-Based Buffer Overflow vulnerability in the getPacketReplayData.json URL endpoint lead…
-
Unscored —
SonicOS post-authentication user assertion failure leads to Stack-Based Buffer Overflow vulnerability via main.cgi lead…
-
Unscored —
SonicOS post-authentication stack-based buffer overflow vulnerability in the sonicflow.csv and appflowsessions.csv URL …
-
Unscored —
SonicOS post-authentication stack-based buffer overflow vulnerability in the getBookmarkList.json URL endpoint leads to…
-
Medium 5.9
Vulnerability in the Sun ZFS Storage Appliance product of Oracle Systems (component: Core). The supported version that …
-
Medium 6.3
Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Content Access SDK, I…
-
Low 3.1
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystem). Supported versions that are affe…
-
Medium 5.5
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel). The supported version that is affect…
-
Medium 5.3
Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). The supp…
-
Medium 5.4
Vulnerability in the Oracle Banking Trade Finance product of Oracle Financial Services Applications (component: Infrast…
-
Medium 5.4
Vulnerability in the Oracle Banking Trade Finance product of Oracle Financial Services Applications (component: Infrast…
-
Medium 5.4
Vulnerability in the Oracle Banking Trade Finance product of Oracle Financial Services Applications (component: Infrast…
-
Medium 5.4
Vulnerability in the Oracle Banking Trade Finance product of Oracle Financial Services Applications (component: Infrast…
-
Medium 5.9
Vulnerability in the Oracle Banking Trade Finance product of Oracle Financial Services Applications (component: Infrast…
-
Medium 5.4
Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: In…
-
Medium 6.5
Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: In…
-
Medium 5.9
Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: In…
-
Medium 4.9
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are…
-
Low 2.7
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Encryption). Supported versions…
-
Medium 4.9
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affecte…
-
Medium 4.9
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: UDF). Supported versions that are affecte…
-
Medium 4.9
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…
-
Medium 4.9
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…
-
Medium 4.6
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics …
-
High 7.5
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t…
-
Medium 6.1
Vulnerability in the Oracle Enterprise Command Center Framework product of Oracle E-Business Suite (component: UI Compo…
-
Medium 6.5
Vulnerability in the Oracle Enterprise Command Center Framework product of Oracle E-Business Suite (component: API). Su…
-
Medium 5.4
Vulnerability in the BI Publisher product of Oracle Analytics (component: Web Server). Supported versions that are affe…