deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-22159
Published: 2023-07-18
Description: EVERTZ devices 3080IPX exe-guest-v1.2-r26125, 7801FC 1.3 Build 27, and 7890IXG V494 are vulnerable to Arbitrary File Upload, allowing an authenticated attacker to upload a webshell or overwrite any critical system files.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: https://cacharros-inthewild.blogspot.com/2023/07/the-3080ipx-is-integrated-multicast.html; https://sku11army.blogspot.com/2020/02/evertz-path-transversal-arbitrary-file.html; https://cacharros-inthewild.blogspot.com/2023/07/the-3080ipx-is-integrated-multicast.html
CVE: CVE-2021-37522
Published: 2023-07-18
Description: SQL injection vulnerability in HKing2802 Locke-Bot 2.0.2 allows remote attackers to run arbitrary SQL commands via crafted string to /src/db.js, /commands/mute.js, /modules/event/messageDelete.js.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://cinquito.github.io/jekyll/update/2021/10/17/discord_bot_sqli.html; https://gist.github.com/0xHornet/9789d70454a47764b611afc8e84d6c0d; https://cinquito.github.io/jekyll/update/2021/10/17/discord_bot_sqli.html
CVE: CVE-2023-28019
Published: 2023-07-18
Description: Insufficient validation in Bigfix WebUI API App site version < 14 allows an authenticated WebUI user to issue SQL queries via an unparameterized SQL query.

CVSS Score: 5.5 (MEDIUM)
CWE: CWE-89
References: https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0106123; https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0106123
CVE: CVE-2023-33312
Published: 2023-07-18
Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in wppal Easy Captcha plugin <= 1.0 versions.
CVSS Score: 7.1 (HIGH)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/easy-captcha/wordpress-easy-captcha-plugin-1-0-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/easy-captcha/wordpress-easy-captcha-plugin-1-0-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2023-33329
Published: 2023-07-18
Description: Auth. (admin+) Reflected Cross-Site Scripting (XSS) vulnerability in Hijiri Custom Post Type Generator plugin <= 2.4.2 versions.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://patchstack.com/database/vulnerability/custom-post-type-generator/wordpress-custom-post-type-generator-plugin-2-4-2-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/custom-post-type-generator/wordpress-custom-post-type-generator-plugin-2-4-2-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2023-33871
Published: 2023-07-18
Description: Iagona ScrutisWeb versions 2.1.37 and prior are vulnerable to a directory traversal vulnerability that could allow an unauthenticated user to directly access any file outside the webroot.
CVSS Score: 7.5 (HIGH)
References: https://www.cisa.gov/news-events/ics-advisories/icsa-23-199-03; https://www.cisa.gov/news-events/ics-advisories/icsa-23-199-03
CVE: CVE-2023-34329
Published: 2023-07-18
Description: AMI MegaRAC SPx12 contains a vulnerability in BMC where a User may cause an authentication bypass by spoofing the HTTP header. A successful exploit of this vulnerability may lead to loss of confidentiality, integrity, and availability.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-290, CWE-306, CWE-290
References: https://9443417.fs1.hubspotusercontent-na1.net/hubfs/9443417/Security%20Advisories/AMI-SA-2023006.pdf; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://9443417.fs1.hubspotusercontent-na1.net/hubfs/9443417/Security%20Advisories/AMI-SA-2023006.pdf
CVE: CVE-2023-34330
Published: 2023-07-18
Description: AMI SPx contains a vulnerability in the BMC where a user may inject code which could be executed via a Dynamic Redfish Extension interface. A successful exploit of this vulnerability may lead to a loss of confidentiality, integrity, and availability.
CVSS Score: 8.2 (HIGH)
CWE: CWE-94, CWE-94
References: https://9443417.fs1.hubspotusercontent-na1.net/hubfs/9443417/Security%20Advisories/AMI-SA-2023006.pdf; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://9443417.fs1.hubspotusercontent-na1.net/hubfs/9443417/Security%20Advisories/AMI-SA-2023006.pdf
CVE: CVE-2023-35189
Published: 2023-07-18
Description: Iagona ScrutisWeb versions 2.1.37 and prior are vulnerable to a remote 
code execution vulnerability that could allow an unauthenticated user to
 upload a malicious payload and execute it.




CVSS Score: 10.0 (CRITICAL)
CWE: CWE-434
References: https://www.cisa.gov/news-events/ics-advisories/icsa-23-199-03; https://www.cisa.gov/news-events/ics-advisories/icsa-23-199-03
CVE: CVE-2023-35763
Published: 2023-07-18
Description: Iagona ScrutisWeb versions 2.1.37 and prior are vulnerable to a cryptographic vulnerability that could allow an unauthenticated user to decrypt encrypted passwords into plaintext.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-798
References: https://www.cisa.gov/news-events/ics-advisories/icsa-23-199-03; https://www.cisa.gov/news-events/ics-advisories/icsa-23-199-03
CVE: CVE-2023-36669
Published: 2023-07-18
Description: Missing Authentication for a Critical Function within the Kratos NGC Indoor Unit (IDU) before 11.4 allows remote attackers to obtain arbitrary control of the IDU/ODU system. Any attacker with layer-3 network access to the IDU can impersonate the Touch Panel Unit (TPU) within the IDU by sending crafted TCP requests to the IDU.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-306
References: https://kratosdefense.com; https://www.kratosdefense.com/vulnerability-advisories/cve-2023-36669; https://kratosdefense.com
CVE: CVE-2023-38257
Published: 2023-07-18
Description: Iagona ScrutisWeb versions 2.1.37 and prior are vulnerable to an insecure direct object reference vulnerability that could allow an unauthenticated user to view profile information, including user login names and encrypted passwords.
CVSS Score: 7.5 (HIGH)
References: https://www.cisa.gov/news-events/ics-advisories/icsa-23-199-03; https://www.cisa.gov/news-events/ics-advisories/icsa-23-199-03
CVE: CVE-2023-28020
Published: 2023-07-18
Description:  URL redirection in Login page in HCL BigFix WebUI allows malicious user to redirect the client browser to an external site via redirect URL response header.

CVSS Score: 4.7 (MEDIUM)
CWE: CWE-601
References: https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0106123; https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0106123
CVE: CVE-2023-28021
Published: 2023-07-18
Description: The BigFix WebUI uses weak cipher suites.

CVSS Score: 5.9 (MEDIUM)
CWE: CWE-326
References: https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0106123; https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0106123
CVE: CVE-2023-30153
Published: 2023-07-18
Description: An SQL injection vulnerability in the Payplug (payplug) module for PrestaShop, in versions 3.6.0, 3.6.1, 3.6.2, 3.6.3, 3.7.0 and 3.7.1, allows remote attackers to execute arbitrary SQL commands via the ajax.php front controller.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://addons.prestashop.com/en/payment-card-wallet/8795--payplug-accept-customer-payments-wherever-they-are.html; https://security.friendsofpresta.org/module/2023/07/18/payplug.html; https://addons.prestashop.com/en/payment-card-wallet/8795--payplug-accept-customer-payments-wherever-they-are.html
CVE: CVE-2023-30383
Published: 2023-07-18
Description: TP-LINK Archer C50v2 Archer C50(US)_V2_160801, TP-LINK Archer C20v1 Archer_C20_V1_150707, and TP-LINK Archer C2v1 Archer_C2_US__V1_170228 were discovered to contain a buffer overflow which may lead to a Denial of Service (DoS) when parsing crafted data.
CVSS Score: 7.5 (HIGH)
CWE: CWE-120
References: http://tplink.com; https://gist.github.com/a2ure123/a4eda2813d85d8b414bb87e855ab4bf8; https://www.tp-link.com/us/support/download/archer-c2/v1/#Firmware
CVE: CVE-2023-36670
Published: 2023-07-18
Description: A remotely exploitable command injection vulnerability was found on the Kratos NGC-IDU 9.1.0.4. An attacker can execute arbitrary Linux commands as root by sending crafted TCP requests to the device.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://kratosdefense.com; https://www.kratosdefense.com/vulnerability-advisories/cve-2023-36670; https://kratosdefense.com
CVE: CVE-2023-37477
Published: 2023-07-18
Description: 1Panel is an open source Linux server operation and maintenance management panel. An OS command injection vulnerability exists in 1Panel firewall functionality. A specially-crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability. 1Panel firewall functionality `/hosts/firewall/ip` endpoint read user input without validation, the attacker extends the default functionality of the application, which execute system commands. An attacker can execute arbitrary code on the target system, which can lead to a complete compromise of the system. This issue has been addressed in commit `e17b80cff49` which is included in release version `1.4.3`. Users are advised to upgrade. There are no known workarounds for this vulnerability.

CVSS Score: 7.2 (HIGH)
CWE: CWE-78, CWE-78
References: https://github.com/1Panel-dev/1Panel/commit/e17b80cff4975ee343568ff526b62319f499005d; https://github.com/1Panel-dev/1Panel/security/advisories/GHSA-p9xf-74xh-mhw5; https://github.com/1Panel-dev/1Panel/commit/e17b80cff4975ee343568ff526b62319f499005d
CVE: CVE-2023-37480
Published: 2023-07-18
Description: Fides is an open-source privacy engineering platform for managing data privacy requests and privacy regulations. The Fides webserver is vulnerable to a type of Denial of Service (DoS) attack. Attackers can exploit a weakness in the connector template upload feature to upload a malicious zip bomb file, resulting in resource exhaustion and service unavailability for all users of the Fides webserver. This vulnerability affects Fides versions `2.11.0` through `2.15.1`. Exploitation is limited to users with elevated privileges with the `CONNECTOR_TEMPLATE_REGISTER` scope, which includes root users and users with the owner role. The vulnerability has been patched in Fides version `2.16.0`. Users are advised to upgrade to this version or later to secure their systems against this threat. There is no known workaround to remediate this vulnerability without upgrading. If an attack occurs, the impact can be mitigated by manually or automatically restarting the affected container.

CVSS Score: 2.7 (LOW)
CWE: CWE-400
References: https://github.com/ethyca/fides/commit/5aea738463960d81821c11ae7ade1d627a46bf32; https://github.com/ethyca/fides/security/advisories/GHSA-g95c-2jgm-hqc6; https://github.com/ethyca/fides/commit/5aea738463960d81821c11ae7ade1d627a46bf32
CVE: CVE-2023-37481
Published: 2023-07-18
Description: Fides is an open-source privacy engineering platform for managing data privacy requests and privacy regulations. The Fides webserver is vulnerable to a type of Denial of Service (DoS) attack. Attackers can exploit this vulnerability to upload zip files containing malicious SVG bombs (similar to a billion laughs attack), causing resource exhaustion in Admin UI browser tabs and creating a persistent denial of service of the 'new connector' page (`datastore-connection/new`). This vulnerability affects Fides versions `2.11.0` through `2.15.1`. Exploitation is limited to users with elevated privileges with the `CONNECTOR_TEMPLATE_REGISTER` scope, which includes root users and users with the owner role. The vulnerability has been patched in Fides version `2.16.0`. Users are advised to upgrade to this version or later to secure their systems against this threat. There is no known workaround to remediate this vulnerability without upgrading.
CVSS Score: 2.7 (LOW)
CWE: CWE-400, CWE-400
References: https://github.com/ethyca/fides/commit/8beaace082b325e693dc7682029a3cb7e6c2b69d; https://github.com/ethyca/fides/security/advisories/GHSA-3rw2-wfc8-wmj5; https://github.com/ethyca/fides/commit/8beaace082b325e693dc7682029a3cb7e6c2b69d
CVE: CVE-2023-37758
Published: 2023-07-18
Description: D-LINK DIR-815 v1.01 was discovered to contain a buffer overflow via the component /web/captcha.cgi.
CVSS Score: 7.5 (HIGH)
CWE: CWE-120
References: https://hackmd.io/%40pSgS7xsnS5a4K7Y0yiB43g/rJr8oNn_n; https://support.dlink.ca/productinfo.aspx?m=dir-815; https://www.dlink.com/en/security-bulletin/
CVE: CVE-2023-37788
Published: 2023-07-18
Description: goproxy v1.1 was discovered to contain an issue which can lead to a Denial of service (DoS) via unspecified vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://github.com/elazarl/goproxy; https://github.com/elazarl/goproxy/issues/502; https://github.com/elazarl/goproxy
CVE: CVE-2023-28023
Published: 2023-07-18
Description: A cross site request forgery vulnerability in the BigFix WebUI Software Distribution interface site version 44 and before allows an NMO attacker to access files on server side systems (server machine and all the ones in its network). 

CVSS Score: 4.9 (MEDIUM)
CWE: CWE-352
References: https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0106123; https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0106123
CVE: CVE-2023-2913
Published: 2023-07-18
Description: 
An executable used in Rockwell Automation ThinManager ThinServer can be configured to enable an API feature in the HTTPS Server Settings. This feature is disabled by default. When the API is enabled and handling requests, a path traversal vulnerability exists that allows a remote actor to leverage the privileges of the server’s file system and read arbitrary files stored in it. A malicious user could exploit this vulnerability by executing a path that contains manipulating variables.



CVSS Score: 7.5 (HIGH)
CWE: CWE-23, CWE-22
References: https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1140160; https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1140160
CVE: CVE-2023-37139
Published: 2023-07-18
Description: ChakraCore branch master cbb9b was discovered to contain a stack overflow vulnerability via the function Js::ScopeSlots::IsDebuggerScopeSlotArray().
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787
References: https://github.com/chakra-core/ChakraCore/issues/6884; https://github.com/chakra-core/ChakraCore/issues/6884
CVE: CVE-2023-37140
Published: 2023-07-18
Description: ChakraCore branch master cbb9b was discovered to contain a segmentation violation via the function Js::DiagScopeVariablesWalker::GetChildrenCount().
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-400
References: https://github.com/chakra-core/ChakraCore/issues/6885; https://github.com/chakra-core/ChakraCore/issues/6885
CVE: CVE-2023-37141
Published: 2023-07-18
Description: ChakraCore branch master cbb9b was discovered to contain a segmentation violation via the function Js::ProfilingHelpers::ProfiledNewScArray().
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-400
References: https://github.com/chakra-core/ChakraCore/issues/6886; https://github.com/chakra-core/ChakraCore/issues/6886
CVE: CVE-2023-37142
Published: 2023-07-18
Description: ChakraCore branch master cbb9b was discovered to contain a segmentation violation via the function Js::EntryPointInfo::HasInlinees().
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-400
References: https://github.com/chakra-core/ChakraCore/issues/6887; https://github.com/chakra-core/ChakraCore/issues/6887
CVE: CVE-2023-37143
Published: 2023-07-18
Description: ChakraCore branch master cbb9b was discovered to contain a segmentation violation via the function BackwardPass::IsEmptyLoopAfterMemOp().
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-400
References: https://github.com/chakra-core/ChakraCore/issues/6888; https://github.com/chakra-core/ChakraCore/issues/6888
CVE: CVE-2023-21949
Published: 2023-07-18
Description: Vulnerability in the Advanced Networking Option component of Oracle Database Server.  Supported versions that are affected are 19.3-19.19 and  21.3-21.10. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Oracle Net to compromise Advanced Networking Option.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Advanced Networking Option accessible data. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).
CVSS Score: 3.7 (LOW)
References: https://www.oracle.com/security-alerts/cpujul2023.html; https://www.oracle.com/security-alerts/cpujul2023.html
CVE: CVE-2023-21950
Published: 2023-07-18
Description: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication).  Supported versions that are affected are 8.0.27 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
CVSS Score: 4.9 (MEDIUM)
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.oracle.com/security-alerts/cpujul2023.html; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2023-21961
Published: 2023-07-18
Description: Vulnerability in the Oracle Hyperion Essbase Administration Services product of Oracle Essbase (component: EAS Administration and EAS Console).   The supported version that is affected is 21.4.3.0.0. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Hyperion Essbase Administration Services executes to compromise Oracle Hyperion Essbase Administration Services.  While the vulnerability is in Oracle Hyperion Essbase Administration Services, attacks may significantly impact additional products (scope change).  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Hyperion Essbase Administration Services accessible data. CVSS 3.1 Base Score 6.0 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N).
CVSS Score: 6.0 (MEDIUM)
References: https://www.oracle.com/security-alerts/cpujul2023.html; https://www.oracle.com/security-alerts/cpujul2023.html
CVE: CVE-2023-21974
Published: 2023-07-18
Description: Vulnerability in the Application Express Team Calendar Plugin product of Oracle Application Express (component: User Account).  Supported versions that are affected are Application Express Team Calendar Plugin: 18.2-22.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Application Express Team Calendar Plugin.  Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Application Express Team Calendar Plugin, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Application Express Team Calendar Plugin. CVSS 3.1 Base Score 9.0 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H).
CVSS Score: 9.0 (CRITICAL)
References: https://www.oracle.com/security-alerts/cpujul2023.html; https://www.oracle.com/security-alerts/cpujul2023.html
CVE: CVE-2023-21975
Published: 2023-07-18
Description: Vulnerability in the Application Express Customers Plugin product of Oracle Application Express (component: User Account).  Supported versions that are affected are Application Express Customers Plugin: 18.2-22.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Application Express Customers Plugin.  Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Application Express Customers Plugin, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Application Express Customers Plugin. CVSS 3.1 Base Score 9.0 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H).
CVSS Score: 9.0 (CRITICAL)
References: https://www.oracle.com/security-alerts/cpujul2023.html; https://www.oracle.com/security-alerts/cpujul2023.html
CVE: CVE-2023-21983
Published: 2023-07-18
Description: Vulnerability in the Application Express Administration product of Oracle Application Express (component: None).  Supported versions that are affected are Application Express Administration: 18.2-22.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Application Express Administration.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Application Express Administration accessible data as well as  unauthorized read access to a subset of Application Express Administration accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Application Express Administration. CVSS 3.1 Base Score 5.6 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L).
CVSS Score: 5.6 (MEDIUM)
References: https://www.oracle.com/security-alerts/cpujul2023.html; https://www.oracle.com/security-alerts/cpujul2023.html
CVE: CVE-2023-21994
Published: 2023-07-18
Description: Vulnerability in the Oracle Mobile Security Suite product of Oracle Fusion Middleware (component: Android Mobile Authenticator App).  Supported versions that are affected are Prior to 11.1.2.3.1. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the Oracle Mobile Security Suite executes to compromise Oracle Mobile Security Suite.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Mobile Security Suite accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).
CVSS Score: 6.5 (MEDIUM)
References: https://www.oracle.com/security-alerts/cpujul2023.html; https://www.oracle.com/security-alerts/cpujul2023.html
CVE: CVE-2023-22004
Published: 2023-07-18
Description: Vulnerability in the Oracle Applications Technology product of Oracle E-Business Suite (component: Reports Configuration).  Supported versions that are affected are 12.2.3-12.2.12. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Applications Technology.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Applications Technology accessible data. CVSS 3.1 Base Score 4.3 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N).
CVSS Score: 4.3 (MEDIUM)
References: https://www.oracle.com/security-alerts/cpujul2023.html; https://www.oracle.com/security-alerts/cpujul2023.html