Vulnerabilities
Summary — last 7 days
New vulnerabilities2,761▲ 61 vs. last week
Critical / high1,285▼ 211 vs. last week
New active exploitation (KEV)6▼ 1 vs. last week
Unscored (no CVSS)233▲ 215 vs. last week
268 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Modified | Medium (6.5) | 0.67% | — | Oracle Communications Billing AND Revenue Management | 10/18/2022 | 6/17/2026 | Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications Applications (component: Connection Manager). Supported versions that are affected are 12.0.0.4.0-12.0.0.7.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to… | |
| Modified | High (7.2) | 1.2% | — | Billing System Project Billing System | 10/18/2022 | 6/17/2026 | An arbitrary file upload vulnerability in the component /php_action/editProductImage.php of Billing System Project v1.0 allows attackers to execute arbitrary code via a crafted PHP file. | |
| Modified | High (7.2) | 44% | 💥 Exploit | Boxbilling | 10/17/2022 | 6/17/2026 | Unrestricted Upload of File with Dangerous Type in GitHub repository boxbilling/boxbilling prior to 0.0.1. | |
| Modified | High (7.2) | 0.78% | — | Billing System Project Billing System | 10/17/2022 | 6/17/2026 | Billing System Project v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /phpinventory/editbrand.php. | |
| Modified | High (7.1) | 0.41% | — | WOO Billingo Plus Project WOO Billingo PlusIntegration FOR Billingo & Gravity Forms Project Integration FOR Billingo & Gravity FormsIntegration FOR Szamlazz.hu & Gravity Forms Project Integration FOR Szamlazz.hu & Gravity Forms | 10/10/2022 | 6/17/2026 | The Woo Billingo Plus WordPress plugin before 4.4.5.4, Integration for Billingo & Gravity Forms WordPress plugin before 1.0.4, Integration for Szamlazz.hu & Gravity Forms WordPress plugin before 1.2.7 are lacking CSRF checks in various AJAX actions, which could allow attackers to make logged in Shop Managers and above… | |
| Modified | High (7.2) | 0.86% | — | Billing System Project Project Billing System Project | 9/30/2022 | 6/17/2026 | Billing System Project v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /phpinventory/editcategory.php. | |
| Modified | High (7.2) | 0.86% | — | Billing System Project Project Billing System Project | 9/30/2022 | 6/17/2026 | Billing System Project v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /phpinventory/edituser.php. | |
| Modified | High (7.2) | 1.7% | — | Billing System Project Project Billing System Project | 9/30/2022 | 6/17/2026 | Billing System Project v1.0 was discovered to contain a remote code execution (RCE) vulnerability via the component /php_action/createProduct.php. | |
| Modified | Critical (9.8) | 0.63% | — | Automated Beer Parlour Billing System Project Automated Beer Parlour Billing System | 8/12/2022 | 6/17/2026 | A vulnerability, which was classified as critical, was found in SourceCodester Automated Beer Parlour Billing System. This affects an unknown part of the component Login. The manipulation of the argument username leads to sql injection. It is possible to initiate the attack remotely. The associated identifier of this… | |
| Modified | Medium (5.9) | 0.52% | — | Oracle Financial Services Revenue Management AND Billing | 7/19/2022 | 6/17/2026 | Vulnerability in the Oracle Financial Services Revenue Management and Billing product of Oracle Financial Services Applications (component: Infrastructure). Supported versions that are affected are 2.9.0.0.0, 2.9.0.1.0, 3.0.0.0.0-3.2.0.0.0 and 4.0.0.0.0. Difficult to exploit vulnerability allows low privileged… | |
| Modified | Medium (5.3) | 1.0% | — | Oracle Communications Billing AND Revenue Management | 7/19/2022 | 6/17/2026 | Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications Applications (component: Connection Manager). Supported versions that are affected are 12.0.0.4.0-12.0.0.6.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to… | |
| Modified | Medium (6.5) | 0.78% | — | Oracle Communications Billing AND Revenue Management | 7/19/2022 | 6/17/2026 | Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications Applications (component: Billing Care). Supported versions that are affected are 12.0.0.4.0-12.0.0.6.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise… | |
| Modified | Medium (5.4) | 0.46% | — | Oracle Communications Billing AND Revenue Management | 7/19/2022 | 6/17/2026 | Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications Applications (component: Billing Care). Supported versions that are affected are 12.0.0.4.0-12.0.0.6.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise… | |
| Modified | High (8.1) | 1.4% | — | Oracle Communications Billing AND Revenue Management | 7/19/2022 | 6/17/2026 | Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications Applications (component: Billing Care). Supported versions that are affected are 12.0.0.4.0-12.0.0.6.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to… | |
| Modified | Medium (5.4) | 0.50% | — | Water Billing System Project Water Billing System | 5/24/2022 | 6/17/2026 | Water-billing-management-system v1.0 is affected by: Cross Site Scripting (XSS) via /wbms/classes/Users.php?f=save, firstname. | |
| Modified | Critical (9.8) | 1.1% | — | Water Billing System Project Water Billing System | 5/24/2022 | 6/17/2026 | Water-billing-management-system v1.0 is vulnerable to SQL Injection via /wbms/classes/Master.php?f=delete_client, id | |
| Modified | Critical (10) | 2.1% | — | Oracle Communications Billing AND Revenue Management | 4/19/2022 | 6/17/2026 | Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications Applications (component: Connection Manager). Supported versions that are affected are 12.0.0.4 and 12.0.0.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to… | |
| Modified | High (8.5) | 1.2% | — | Oracle Communications Billing AND Revenue Management | 4/19/2022 | 6/17/2026 | Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications Applications (component: Connection Manager). Supported versions that are affected are 12.0.0.4 and 12.0.0.5. Difficult to exploit vulnerability allows low privileged attacker with network access via TCP to… | |
| Modified | High (8.3) | 1.3% | — | Oracle Communications Billing AND Revenue Management | 4/19/2022 | 6/17/2026 | Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications Applications (component: Connection Manager). The supported version that is affected is 12.0.0.4. Easily exploitable vulnerability allows low privileged attacker with network access via TCP to compromise Oracle… | |
| Modified | High (7.5) | 1.0% | — | Oracle Communications Billing AND Revenue Management | 4/19/2022 | 6/17/2026 | Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications Applications (component: Connection Manager). Supported versions that are affected are 12.0.0.4 and 12.0.0.5. Difficult to exploit vulnerability allows low privileged attacker with network access via TCP to… | |
| Modified | High (7.5) | 4.9% | 💥 PoC | Fasterxml Jackson-databindOracle BIG Data Spatial AND GraphOracle CoherenceOracle Commerce Platform+32 | 3/11/2022 | 6/17/2026 | jackson-databind before 2.13.0 allows a Java StackOverflow exception and denial of service via a large depth of nested objects. | |
| Modified | Medium (6.1) | 1.0% | — | THE Electric Billing Management System Project THE Electric Billing Management System | 1/24/2022 | 6/17/2026 | Cross Site Scripting (XSS) in Sourcecodester The Electric Billing Management System 1.0 by oretnom23, allows attackers to execute arbitrary code via the about page. | |
| Modified | Critical (9.9) | 1.2% | — | Oracle Communications Billing AND Revenue Management | 1/19/2022 | 6/17/2026 | Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications Applications (component: Connection Manager). Supported versions that are affected are 12.0.0.3 and 12.0.0.4. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to… | |
| Modified | Critical (10) | 2.4% | — | Oracle Communications Billing AND Revenue Management | 1/19/2022 | 6/17/2026 | Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications Applications (component: Webservices Manager). Supported versions that are affected are 12.0.0.3 and 12.0.0.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to… | |
| Modified | Critical (10) | 1.9% | — | Oracle Communications Billing AND Revenue Management | 1/19/2022 | 6/17/2026 | Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications Applications (component: Connection Manager). Supported versions that are affected are 12.0.0.3 and 12.0.0.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to… |