CVEs published in July 2023
2,375 vulnerabilities, 275 critical, 16 exploited.
- oracle business intelligence, oracle corporation business intelligence enterprise edition +1 moreVulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics ...5.4 Medium
- oracle essbase, oracle corporation hyperion essbase +1 moreVulnerability in Oracle Essbase (component: Security and Provisioning). The supported version...2.2 Low
- oracle self-service human resourcesVulnerability in the Oracle Self-Service Human Resources product of Oracle E-Business Suite ...4.3 Medium
- oracle mysql server, fedoraproject fedora, netapp active iq unified manager +3 more +5 moreVulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported...4.9 Medium
- oracle mysql, oracle corporation mysql server +1 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication). ...4.9 Medium
- oracle graalvm, graalvm for jdk, jdk +8 more +10 moreVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK...3.1 Low
- oracle mysql server, fedoraproject fedora, netapp active iq unified manager +3 more +5 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication). ...4.4 Medium
- oracle e-business suite, oracle corporation e-business suite technology stack +1 moreVulnerability in the Oracle Applications Technology product of Oracle E-Business Suite (component...4.3 Medium
- oracle fusion middleware, oracle corporation mobile security suite +1 moreVulnerability in the Oracle Mobile Security Suite product of Oracle Fusion Middleware (component:...6.5 Medium
- oracle application express, oracle corporation application express (apex) +1 moreVulnerability in the Application Express Administration product of Oracle Application Express ...5.6 Medium
- oracle application express, oracle corporation application express (apex) +1 moreVulnerability in the Application Express Customers Plugin product of Oracle Application Express ...9.0 Critical
- oracle application express, oracle corporation application express (apex) +1 moreVulnerability in the Application Express Team Calendar Plugin product of Oracle Application...9.0 Critical
- oracle hyperion essbase administration servicesVulnerability in the Oracle Hyperion Essbase Administration Services product of Oracle Essbase ...6.0 Medium
- oracle database server, oracle corporation advanced networking option +1 moreVulnerability in the Advanced Networking Option component of Oracle Database Server. Supported...3.7 Low
- rockwell automation thinmanager thinserver, rockwellautomation thinmanager +1 moreRockwell Automation ThinManager ThinServer Path Traversal Vulnerability7.5 High
- hcl software bigfix webui software distribution, hcltech bigfix webui +1 moreHCL BigFix WebUI Software Distribution is affected by a cross site server request forgery vulnerability4.9 Medium
- hcl bigfix webuiBigFix WebUI is vulnerable to use of a risky cryptographic algorithm5.9 Medium
- 1panel-dev 1panelCommand injection in firewall ip functionality in 1Panel7.2 High
- ethyca fidesFides Webserver Vulnerable to Zip Bomb File Uploads2.7 Low
- ethyca fidesFides Webserver Vulnerable to SVG Bomb File Uploads2.7 Low
- hcl bigfix webuiURL redirection affects BigFix WebUI4.7 Medium
- hcl software bigfix webui api, hcltech bigfix webui +1 moreAn SQL injection affects BigFix WebUI API5.5 Medium
- easy captcha project captcha, wppal easy captcha +1 moreWordPress Easy Captcha Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)7.1 High
- iagona scrutiswebIagona ScrutisWeb Use of Hard-coded Cryptographic Key5.5 Medium
- iagona scrutiswebIagona ScrutisWeb Absolute Path Traversal7.5 High
- iagona scrutiswebCVE-2023-382577.5 High
- custom post type generator project post type generator, hijiri custom post type generator +1 moreWordPress Custom Post Type Generator Plugin <= 2.4.2 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- iagona scrutiswebIagona ScrutisWeb Unrestricted Upload of File with Dangerous Type10.0 Critical
- ami megarac sp-x, megarac spx12, megarac spx13 +2 moreCode injection via Dynamic Redfish Extension interface8.2 High
- ami megarac spx12, megarac sp-x +1 moreAuthentication Bypass via HTTP Header Spoofing9.1 Critical
- what3words autosuggest, autosuggest plugin +1 morewhat3words Autosuggest Plugin Setting class-w3w-autosuggest-public.php enqueue_scripts information disclosure2.7 Low
- matrix-org matrix-react-sdkCross site scripting in Export Chat feature6.1 Medium
- solarwinds database performance analyzer, dpa +1 moreXSS in SolarWinds Database Performance Analyzer 2023.26.1 Medium
- linux kernel, fedora, red hat enterprise linux 6 +3 more +5 morePossibility of deadlock in libbpf function sock_hash_delete_elem4.7 Medium
- spring security, vmware spring security +1 moreSpring Security's authorization rules can be misconfigured when using multiple servlets7.3 High
- rockwell automation kinetix 5700 dc bus power supply series a, rockwellautomation kinetix 5700 firmware +1 moreRockwell Automation Kinetix 5700 DC Bus Power Supply Series A – CIP Message Attack Could Cause Denial-Of-Service7.5 High
- ons ras collection instrumentONS Digital RAS Collection Instrument comment.yml jobs os command injection5.5 Medium
- magepeople team event manager and tickets selling plugin for woocommerce, mage-people event manager and tickets selling for woocommerce +1 moreWordPress Event Manager for WooCommerce Plugin <= 3.9.5 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- booking calendar project calendar, codepeople booking calendar contact form +1 moreWordPress Booking Calendar Contact Form Plugin <= 1.2.40 is vulnerable to Cross Site Scripting (XSS)7.1 High
- wesecur, wesecur security +1 moreWordPress WeSecur Security Plugin <= 1.2.1 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
clamavOSS-FuzzHeap-buffer-overflow in wwunpackNo score- armemberplugin armember, repute infosystems armember (free), armember (premium) +2 moreWordPress ARMember (free) and ARMember (premium) plugins - vulnerable to Auth. Stored Cross Site Scripting (XSS)5.9 Medium
- hewlett packard enterprise (hpe) hpe intelligent provisioning (ip) for gen9, hpe intelligent provisioning +1 moreThe vulnerability could be locally exploited to allow escalation of privilege.7.5 High
- cyberlord92 oauth single sign on – sso (oauth client), miniorange oauth single sign on +1 moreWordPress OAuth Single Sign On – SSO (OAuth Client) Plugin <= 6.23.3 is vulnerable to Broken Authentication8.8 High
- crudlab jazz popupsWordPress Jazz Popups Plugin <= 1.8.7 is vulnerable to Cross Site Scripting (XSS)7.1 High
- blue yonder postgraas serverBlue Yonder postgraas_server PostgreSQL Backend postgres_cluster_driver.py create_postgres_db sql injection5.5 Medium
- mainwp maintenance extensionWordPress MainWP Maintenance Extension Plugin <= 4.1.1 is vulnerable to SQL Injection8.5 High
- kemal yazici - pluginpress shortcode imdbWordPress Shortcode IMDB Plugin <= 6.0.8 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- david pokorny replace word, replace word project word +1 moreWordPress Replace Word Plugin <= 2.1 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- wpadmin aws cdnWordPress WPAdmin AWS CDN Plugin <= 2.0.13 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- Show moreLoading…