Vulnerabilities

Oracle Hyperion Workspace unspecified |

July 20, 2023

NAME__________Oracle Hyperion Workspace unspecifiedPlatforms Affected:Oracle Hyperion Workspace 11.2.13.0.000Risk Level:7.6Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________An unspecified vulnerability in Oracle Hyperion Workspace related to the...

Oracle Database Server unspecified | CVE-2023-22052

July 20, 2023

NAME__________Oracle Database Server unspecifiedPlatforms Affected:Oracle Database Server 19.3 Oracle Database Server 19.19 Oracle Database Server 21.3 Oracle Database Server 21.10Risk...

Mastery Lms cross-site scripting | CVE-2023-3753

July 20, 2023

NAME__________Mastery Lms cross-site scriptingPlatforms Affected:Creativeitem Mastery Lms 1.2Risk Level:3.5Exploitability:UnprovenConsequences:Cross-Site Scripting DESCRIPTION__________Mastery Lms is vulnerable to cross-site scripting, caused by improper...

HCL BigFix WebUI information disclosure | CVE-2023-28021

July 20, 2023

NAME__________HCL BigFix WebUI information disclosurePlatforms Affected:HCL BigFix WebUIRisk Level:5.9Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________HCL BigFix WebUI could allow a remote attacker to obtain...

Oracle MySQL Server unspecified |

July 20, 2023

NAME__________Oracle MySQL Server unspecifiedPlatforms Affected:Oracle MySQL Server 8.0.33Risk Level:4.9Exploitability:UnprovenConsequences:Denial of Service DESCRIPTION__________An unspecified vulnerability in Oracle MySQL Server related to...

Crestron 3-Series Control Systems denial of service | CVE-2023-38405

July 20, 2023

NAME__________Crestron 3-Series Control Systems denial of servicePlatforms Affected:Crestron 3-Series Control SystemsRisk Level:7.5Exploitability:UnprovenConsequences:Denial of Service DESCRIPTION__________Crestron 3-Series Control Systems is vulnerable...

Oracle GraalVM Enterprise Edition and Oracle GraalVM for JDK unspecified |

July 20, 2023

NAME__________Oracle GraalVM Enterprise Edition and Oracle GraalVM for JDK unspecifiedPlatforms Affected:Oracle GraalVM Enterprise Edition 21.3.6 Oracle GraalVM Enterprise Edition 22.3.2...

Oracle MySQL Server unspecified |

July 20, 2023

NAME__________Oracle MySQL Server unspecifiedPlatforms Affected:Oracle MySQL Server 8.0.33Risk Level:4.4Exploitability:UnprovenConsequences:Denial of Service DESCRIPTION__________An unspecified vulnerability in Oracle MySQL Server related to...

Oracle Applications Framework unspecified | CVE-2023-22042

July 20, 2023

NAME__________Oracle Applications Framework unspecifiedPlatforms Affected:Oracle Applications Framework 12.2.3 Oracle Hyperion Financial Reporting 11.2.13.0.000 Oracle Applications Framework 12.3.12Risk Level:6.1Exploitability:UnprovenConsequences:Other DESCRIPTION__________An unspecified...

Oracle Agile PLM unspecified | CVE-2023-22039

July 20, 2023

NAME__________Oracle Agile PLM unspecifiedPlatforms Affected:Oracle Agile PLM 9.3.6Risk Level:5.4Exploitability:UnprovenConsequences:Other DESCRIPTION__________An unspecified vulnerability in Oracle Agile PLM related to the WebClient...

Oracle MySQL Server unspecified |

July 20, 2023

NAME__________Oracle MySQL Server unspecifiedPlatforms Affected:Oracle MySQL Server 5.7.42 Oracle MySQL Server 8.0.33Risk Level:5.9Exploitability:UnprovenConsequences:Denial of Service DESCRIPTION__________An unspecified vulnerability in Oracle...

Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK unspecified | CVE-2023-22036

July 20, 2023

NAME__________Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK unspecifiedPlatforms Affected:Oracle GraalVM for JDK 17.0.7 Oracle GraalVM for...

Atlas Business Directory Listing cross-site scripting | CVE-2023-3755

July 20, 2023

NAME__________Atlas Business Directory Listing cross-site scriptingPlatforms Affected:Creativeitem Atlas Business Directory Listing 2.13Risk Level:3.5Exploitability:UnprovenConsequences:Cross-Site Scripting DESCRIPTION__________Atlas Business Directory Listing is vulnerable...

Oracle Business Intelligence Enterprise Edition unspecified |

July 20, 2023

NAME__________Oracle Business Intelligence Enterprise Edition unspecifiedPlatforms Affected:Oracle Business Intelligence Enterprise Edition 6.4.0.0.0Risk Level:5.4Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________An unspecified vulnerability in Oracle Business...

Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK unspecified | CVE-2023-22044

July 20, 2023

NAME__________Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK unspecifiedPlatforms Affected:Oracle GraalVM for JDK 17.0.7 Oracle GraalVM for...

Oracle VM VirtualBox unspecified |

July 20, 2023

NAME__________Oracle VM VirtualBox unspecifiedPlatforms Affected:Oracle VM VirtualBox 6.1.16 Oracle VM VirtualBox 7.0.7Risk Level:5.5Exploitability:UnprovenConsequences:Denial of Service DESCRIPTION__________An unspecified vulnerability in Oracle...

Oracle MySQL Server unspecified |

July 20, 2023

Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK unspecified | CVE-2023-22049

July 20, 2023

NAME__________Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK unspecifiedPlatforms Affected:Oracle GraalVM for JDK 17.0.7 Oracle GraalVM for...

HCL BigFix WebUI cross-site request forgery | CVE-2023-28023

July 20, 2023

NAME__________HCL BigFix WebUI cross-site request forgeryPlatforms Affected:HCL BigFix WebUIRisk Level:4.9Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________HCL BigFix WebUI is vulnerable to cross-site request forgery,...

Oracle MySQL Server unspecified |

July 20, 2023

Oracle Mobile Security Suite unspecified | CVE-2023-21994

July 20, 2023

NAME__________Oracle Mobile Security Suite unspecifiedPlatforms Affected:Oracle Mobile Security SuiteRisk Level:6.5Exploitability:UnprovenConsequences:Other DESCRIPTION__________An unspecified vulnerability in Oracle Mobile Security Suite related to...

Oracle MySQL Server unspecified |

July 20, 2023

HCL BigFix WebUI SQL injection | CVE-2023-28019

July 20, 2023

NAME__________HCL BigFix WebUI SQL injectionPlatforms Affected:HCL BigFix WebUIRisk Level:5.5Exploitability:HighConsequences:Data Manipulation DESCRIPTION__________HCL BigFix WebUI is vulnerable to SQL injection. A remote...

Oracle Application Express unspecified | CVE-2023-21983

July 20, 2023

NAME__________Oracle Application Express unspecifiedPlatforms Affected:Oracle Application Express Administration 18.2 Oracle Application Express Administration 22.2Risk Level:5.6Exploitability:UnprovenConsequences:Unknown DESCRIPTION__________An unspecified vulnerability in Oracle...

Vulnerabilities

Oracle Hyperion Workspace unspecified |

Oracle Database Server unspecified | CVE-2023-22052

Mastery Lms cross-site scripting | CVE-2023-3753

HCL BigFix WebUI information disclosure | CVE-2023-28021

Oracle MySQL Server unspecified |

Crestron 3-Series Control Systems denial of service | CVE-2023-38405

Oracle GraalVM Enterprise Edition and Oracle GraalVM for JDK unspecified |

Oracle MySQL Server unspecified |

Oracle Applications Framework unspecified | CVE-2023-22042

Oracle Agile PLM unspecified | CVE-2023-22039

Oracle MySQL Server unspecified |

Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK unspecified | CVE-2023-22036

Atlas Business Directory Listing cross-site scripting | CVE-2023-3755

Oracle Business Intelligence Enterprise Edition unspecified |

Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK unspecified | CVE-2023-22044

Oracle VM VirtualBox unspecified |

Oracle MySQL Server unspecified |

Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK unspecified | CVE-2023-22049

HCL BigFix WebUI cross-site request forgery | CVE-2023-28023

Oracle MySQL Server unspecified |

Oracle Mobile Security Suite unspecified | CVE-2023-21994

Oracle MySQL Server unspecified |

HCL BigFix WebUI SQL injection | CVE-2023-28019

Oracle Application Express unspecified | CVE-2023-21983

HackerOne Bug Bounty Disclosure: stack-buffer-overflow-in-curl-cookie-parsing-leads-to-rce-batuhanilgarr

BugCrowd Bug Bounty Disclosure: P3 – Publicly Editable Google Docs Linked from NASA SnowEx PPT –

BugCrowd Bug Bounty Disclosure: P3 – Details of the collaboration between NASA and Inmarsat Government and the type of contract –

Apple Products Multiple Vulnerabilities

Miljödata – 870,108 breached accounts

You may have missed