Security
Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.
Advisory catalog
Public source statements across vendors. Explicit aliases connect records; each publisher keeps its own state, severity and affected-version evidence.
Collected statements
694240 source statements · aliases may refer to the same vulnerabilityInsertion of Sensitive Information Into Sent Data in GitLab
cve-program ·
Vendor product: GitLab
Malicious code in @atlisp/mcp (npm)
osv · GHSA-65cr-mcfq-59hh
npm: @atlisp/mcp
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Interoperability SEC). Supported versions that are affected are 9.2.0.0-9.2.26.5. Difficult to exploit vulnerability allows unauthenticated attack…
cve-program ·
Vendor product: JD Edwards EnterpriseOne Tools
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Interoperability SEC). Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows low privileged attacker …
cve-program ·
Vendor product: JD Edwards EnterpriseOne Tools
WordPress Booknetic plugin < 5.10.4 - Cross Site Request Forgery (CSRF) vulnerability
cve-program ·
https://codecanyon.net: booknetic
ffxiv-teamcraft FFXIV Teamcraft Renderer-Process IPC Bridge preload.ts clipboard.readText cross site scripting
cve-program ·
Vendor product: FFXIV Teamcraft
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). Supported versions that are affected are 9.2.0.0-9.2.26.5. Difficult to exploit vulnerability allows low privilege…
cve-program ·
Vendor product: JD Edwards EnterpriseOne Tools
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastruc…
cve-program ·
Vendor product: Oracle VM VirtualBox
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Database and Comm SEC). Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows low privileged attacker…
cve-program ·
Vendor product: JD Edwards EnterpriseOne Tools
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Package Build SEC). Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows low privileged attacker wit…
cve-program ·
Vendor product: JD Edwards EnterpriseOne Tools
Norton, Avast, and AVG local privilege escalation via link following in Data Shredder
cve-program ·
Vendor product: Norton Antivirus · Vendor product: Avast Antivirus · Vendor product: AVG Internet Security
A catalog match establishes published evidence, not applicability to your environment. Check resolved package dependencies, or open a Microsoft CVE for fixing KBs, releases and planning.