Skip to content
OpenAdvisories

Archive

16 January 2024

Vulnerabilities first published on this day (UTC), newest first.

11 results · Clear filters · Feed

  • Low 2.7

    Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Package Build SEC). Suppor…

  • Low 3.7

    Vulnerability in the Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Co…

  • Low 2.5

    Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX). S…

  • Low 3.8

    Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystem). The supported version that is af…

  • Low 2.7

    Vulnerability in Oracle Audit Vault and Database Firewall (component: Firewall). Supported versions that are affected a…

  • Low 2.3

    Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems (component: Core). The supported versio…

  • Low 3.0

    Vulnerability in Oracle Audit Vault and Database Firewall (component: Firewall). Supported versions that are affected a…

  • Low 3.3

    Unlinkability broken in ursa when verifiers use malicious keys

    Ursa is a cryptographic library for use with blockchains. A weakness in the Hyperledger AnonCreds specification that is not mitigated in the Ursa and AnonCreds implementations is that the Issuer does not publish a key correctness proof demonstrating that a ge…

  • Low 3.5

    Jspxcms Document Management Page InfoController.java cross site scripting

    A vulnerability was found in Jspxcms 10.2.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file src\main\java\com\jspxcms\core\web\back\InfoController.java of the component Document Management Page. The…

  • Low 2.7
    CVE-2023-2252 Scanner template

    Directorist < 7.5.4 - Admin+ LFI

    The Directorist WordPress plugin before 7.5.4 is vulnerable to Local File Inclusion as it does not validate the file parameter when importing CSV files.

  • Low 2.3

    HCL BigFix OSD Bare Metal Server WebUI is affected by sensitive information disclosure

    HCL BigFix Bare OSD Metal Server WebUI version 311.19 or lower can sometimes include sensitive information in a query string which could allow an attacker to execute a malicious attack.