Month: July 2023

Event Manager for WooCommerce plugin for WordPress cross-site scripting | CVE-2023-36383

July 21, 2023

NAME__________Event Manager for WooCommerce plugin for WordPress cross-site scriptingPlatforms Affected:WordPress Event Manager for WooCommerce plugin for WordPress 3.9.5Risk Level:5.9Exploitability:HighConsequences:Cross-Site Scripting...

VMware Tanzu Spring Security security bypass | CVE-2023-34035

July 21, 2023

NAME__________VMware Tanzu Spring Security security bypassPlatforms Affected:VMware Tanzu Spring Security 5.8.0 VMware Tanzu Spring Security 6.0.0 VMware Tanzu Spring Security...

Oracle Business Intelligence Enterprise Edition unspecified | CVE-2023-22061

July 21, 2023

NAME__________Oracle Business Intelligence Enterprise Edition unspecifiedPlatforms Affected:Oracle Business Intelligence Enterprise Edition 6.4.0.0.0Risk Level:5.4Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________An unspecified vulnerability in Oracle Business...

Easy Captcha Plugin for WordPress cross-site scripting | CVE-2023-33312

July 21, 2023

NAME__________Easy Captcha Plugin for WordPress cross-site scriptingPlatforms Affected:WordPress Easy Captcha Plugin for WordPress 1.0Risk Level:7.1Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________Easy Captcha Plugin for...

Oracle Hyperion Workspace unspecified | CVE-2023-22060

July 21, 2023

NAME__________Oracle Hyperion Workspace unspecifiedPlatforms Affected:Oracle Hyperion Workspace 11.2.13.0.000Risk Level:7.6Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________An unspecified vulnerability in Oracle Hyperion Workspace related to the...

Oracle Business Intelligence Enterprise Edition unspecified | CVE-2023-22012

July 21, 2023

NAME__________Oracle Business Intelligence Enterprise Edition unspecifiedPlatforms Affected:Oracle Business Intelligence Enterprise Edition 7.0.0.0.0Risk Level:4.3Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________An unspecified vulnerability in Oracle Business...

Shortcode IMDB plugin for WordPress cross-site request forgery | CVE-2023-37892

July 21, 2023

NAME__________Shortcode IMDB plugin for WordPress cross-site request forgeryPlatforms Affected:WordPress Shortcode IMDB Plugin for WordPress 6.0.8Risk Level:4.3Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Shortcode IMDB plugin...

Matrix matrix-react-sdk cross-site scripting | CVE-2023-37259

July 21, 2023

NAME__________Matrix matrix-react-sdk cross-site scriptingPlatforms Affected:Matrix matrix-react-sdk 3.32.0 Matrix matrix-react-sdk 3.75.0Risk Level:6.1Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________Matrix matrix-react-sdk is vulnerable to cross-site scripting, caused...

D-Link DIR-815 buffer overflow | CVE-2023-37758

July 21, 2023

NAME__________D-Link DIR-815 buffer overflowPlatforms Affected:D-Link DIR-815 1.01Risk Level:7.3Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________D-Link DIR-815 is vulnerable to a stack-based buffer overflow, caused by...

Oracle MySQL Server unspecified | CVE-2023-22046

July 21, 2023

NAME__________Oracle MySQL Server unspecifiedPlatforms Affected:Oracle MySQL Server 8.0.33Risk Level:4.9Exploitability:UnprovenConsequences:Denial of Service DESCRIPTION__________An unspecified vulnerability in Oracle MySQL Server related to...

Grav code execution | CVE-2023-37897

July 21, 2023

NAME__________Grav code executionPlatforms Affected:Grav Grav 1.7.42.1Risk Level:7.2Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Grav could allow a remote authenticated attacker to execute arbitrary code on...

Custom Post Type Generator plugin for WordPress cross-site scripting | CVE-2023-33329

July 21, 2023

NAME__________Custom Post Type Generator plugin for WordPress cross-site scriptingPlatforms Affected:WordPress Custom Post Type Generator Plugin for WordPress 2.4.2Risk Level:5.9Exploitability:HighConsequences:Cross-Site Scripting...

Oracle MySQL Server unspecified | CVE-2023-22033

July 21, 2023

NAME__________Oracle MySQL Server unspecifiedPlatforms Affected:Oracle MySQL Server 8.0.33Risk Level:4.4Exploitability:UnprovenConsequences:Denial of Service DESCRIPTION__________An unspecified vulnerability in Oracle MySQL Server related to...

Oracle MySQL Server unspecified | CVE-2023-22054

July 21, 2023

Dell Wyse ThinOS information disclosure | CVE-2023-32447

July 21, 2023

NAME__________Dell Wyse ThinOS information disclosurePlatforms Affected:Dell Wyse ThinOS 9.0 Dell Wyse ThinOS 9.1 Dell Wyse ThinOS 9.1 MR1Risk Level:5.5Exploitability:UnprovenConsequences:Obtain Information...

Classified Listing plugin for WordPress cross-site request forgery | CVE-2023-37387

July 21, 2023

NAME__________Classified Listing plugin for WordPress cross-site request forgeryPlatforms Affected:WordPress Classified Listing Plugin for WordPress 2.4.5Risk Level:5.4Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Classified Listing plugin...

Oracle VM VirtualBox unspecified | CVE-2023-22017

July 21, 2023

NAME__________Oracle VM VirtualBox unspecifiedPlatforms Affected:Oracle VM VirtualBox 6.1.16 Oracle VM VirtualBox 7.0.7Risk Level:5.5Exploitability:UnprovenConsequences:Denial of Service DESCRIPTION__________An unspecified vulnerability in Oracle...

Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK unspecified | CVE-2023-22049

July 21, 2023

NAME__________Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK unspecifiedPlatforms Affected:Oracle GraalVM for JDK 17.0.7 Oracle GraalVM for...

Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK unspecified | CVE-2023-22006

July 21, 2023

NAME__________Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK unspecifiedPlatforms Affected:Oracle GraalVM for JDK 17.0.7 Oracle GraalVM for...

Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK unspecified | CVE-2023-22044

July 21, 2023

NAME__________Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK unspecifiedPlatforms Affected:Oracle GraalVM for JDK 17.0.7 Oracle GraalVM for...

Oracle MySQL Server unspecified | CVE-2023-22053

July 21, 2023

NAME__________Oracle MySQL Server unspecifiedPlatforms Affected:Oracle MySQL Server 5.7.42 Oracle MySQL Server 8.0.33Risk Level:5.9Exploitability:UnprovenConsequences:Denial of Service DESCRIPTION__________An unspecified vulnerability in Oracle...

Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK unspecified | CVE-2023-22036

July 21, 2023

NAME__________Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK unspecifiedPlatforms Affected:Oracle GraalVM for JDK 17.0.7 Oracle GraalVM for...

Oracle MySQL Server unspecified | CVE-2023-22008

July 21, 2023

1Panel-dev 1Panel command execution | CVE-2023-37477

July 21, 2023

NAME__________1Panel-dev 1Panel command executionPlatforms Affected:1Panel-dev 1Panel 1.4.2Risk Level:7.2Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________1Panel-dev 1Panel could allow a remote authenticated attacker to execute arbitrary...

Month: July 2023

Event Manager for WooCommerce plugin for WordPress cross-site scripting | CVE-2023-36383

VMware Tanzu Spring Security security bypass | CVE-2023-34035

Oracle Business Intelligence Enterprise Edition unspecified | CVE-2023-22061

Easy Captcha Plugin for WordPress cross-site scripting | CVE-2023-33312

Oracle Hyperion Workspace unspecified | CVE-2023-22060

Oracle Business Intelligence Enterprise Edition unspecified | CVE-2023-22012

Shortcode IMDB plugin for WordPress cross-site request forgery | CVE-2023-37892

Matrix matrix-react-sdk cross-site scripting | CVE-2023-37259

D-Link DIR-815 buffer overflow | CVE-2023-37758

Oracle MySQL Server unspecified | CVE-2023-22046

Grav code execution | CVE-2023-37897

Custom Post Type Generator plugin for WordPress cross-site scripting | CVE-2023-33329

Oracle MySQL Server unspecified | CVE-2023-22033

Oracle MySQL Server unspecified | CVE-2023-22054

Dell Wyse ThinOS information disclosure | CVE-2023-32447

Classified Listing plugin for WordPress cross-site request forgery | CVE-2023-37387

Oracle VM VirtualBox unspecified | CVE-2023-22017

Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK unspecified | CVE-2023-22049

Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK unspecified | CVE-2023-22006

Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK unspecified | CVE-2023-22044

Oracle MySQL Server unspecified | CVE-2023-22053

Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK unspecified | CVE-2023-22036

Oracle MySQL Server unspecified | CVE-2023-22008

1Panel-dev 1Panel command execution | CVE-2023-37477

CISA: CISA Adds Three Known Exploited Vulnerabilities to Catalog

CISA: CISA Releases Eight Industrial Control Systems Advisories

CISA: CISA Adds One Known Exploited Vulnerability to Catalog

CISA: CISA Releases Six Industrial Control Systems Advisories

CISA: CISA and Partners Release Joint Guidance on PRC-Affiliated Threat Actor Compromising Networks of Global Telecommunications Providers

You may have missed