CVEs published in September 2023
2,233 vulnerabilities, 282 critical, 23 exploited.
- artem abramovich art decoration shortcodeWordPress Art Decoration Shortcode Plugin <= 1.5.6 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- shopconstructWordPress ShopConstruct Plugin <= 1.1.2 is vulnerable to Cross Site Scripting (XSS)7.1 High
- cyberlord92 yourmembership single sign on – ym sso login, minorange wordpress yourmembership single sign-on +1 moreWordPress YourMembership Single Sign On Plugin <= 1.1.3 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- chop-chop coming soon chop chopWordPress Coming Soon Chop Chop Plugin <= 2.2.4 is vulnerable to Cross Site Scripting (XSS)7.1 High
- duc bui quang wp default feature imageWordPress WP Default Feature Image Plugin <= 1.0.1.1 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- sumo social share boostWordPress Social Share Boost Plugin <= 4.4 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- liam gladdy (storm consultancy) oauth twitter feed for developersWordPress oAuth Twitter Feed for Developers Plugin <= 2.3.0 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- web-settler image social feedWordPress Image Social Feed Plugin Plugin <= 1.7.6 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- i thirteen web solution video galleryWordPress Video Gallery Plugin <= 1.3.12 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- gitlabInefficient Regular Expression Complexity in GitLab6.5 Medium
- gitlabCleartext Storage of Sensitive Information in GitLab5.5 Medium
- gitlabDirect Request ('Forced Browsing') in GitLab4.3 Medium
- gitlabInsertion of Sensitive Information Into Sent Data in GitLab5.5 Medium
- gitlabAllocation of Resources Without Limits or Throttling in GitLab5.3 Medium
- gitlabExposure of Sensitive Information to an Unauthorized Actor in GitLab5.0 Medium
- gitlabIncorrect Authorization in GitLab3.5 Low
- gitlabURL Redirection to Untrusted Site in GitLab2.6 Low
- gitlabMissing Authorization in GitLab2.7 Low
- gitlabInefficient Regular Expression Complexity in GitLab6.5 Medium
- gitlabIncorrect Execution-Assigned Permissions in GitLab6.5 Medium
- instantsoft instantsoft/icms2, instantcms +1 moreExternal Control of System or Configuration Setting in instantsoft/icms28.8 High
terraform-provider-helmSUSESecurity update for terraform-provider-helmNo score- usememos memos, usememos/memos +1 moreImproper Input Validation in usememos/memos7.5 High
- usememos memos, usememos/memos +1 moreImproper Privilege Management in usememos/memos8.8 High
- usememos memos, usememos/memos +1 moreImproper Access Control in usememos/memos9.8 Critical
- pkp pkp/pkp-lib, pkb-lib +1 moreUse of Predictable Algorithm in Random Number Generator in pkp/pkp-lib9.6 Critical
- arm mali gpu kernel driver, 5th gen gpu architecture kernel driver, bifrost gpu kernel driver +3 more +5 moreMali GPU Kernel Driver Allows Improper GPU Memory Processing Operations5.5 Medium
- fossies catdocCatdoc v0.95 was discovered to contain a NULL pointer dereference via the component xls2csv at...5.5 Medium
- o-ran-sc e2An issue in O-RAN Software Community E2 G-Release allows attackers to cause a Denial of Service ...7.5 High
- o-ran-sc ric message routerO-RAN Software Community ric-plt-lib-rmr v4.9.0 does not validate the source of the routing...7.5 High
- metaways tineIn tine through 2023.01.14.325, the sort parameter of the /index.php endpoint allows SQL Injection.9.8 Critical
- diaowen dwsurveyFile Upload vulnerability in DWSurvey DWSurvey-OSS v.3.2.0 and before allows a remote attacker to...9.8 Critical
- slims senayan library management systemSenayan Library Management Systems SLIMS 9 Bulian v 9.6.1 is vulnerable to SQL Injection via...8.8 High
- slims senayan library management systemSenayan Library Management Systems SLIMS 9 Bulian v9.6.1 is vulnerable to Server Side Request...6.1 Medium
- hzeller timgBuffer Overflow vulnerability in hzeller timg v.1.5.2 and before allows a remote attacker to...7.5 High
- dataeaseDataEase vulnerable to SQL injection7.5 High
- lexmark cs310, c2132 firmware, cs310 firmware +80 more +82 moreCertain Lexmark devices (such as CS310) before 2023-08-25 allow XXE attacks, leading to...7.5 High
- free and open source inventory management system project and open source inventory management systemMultiple cross-site scripting (XSS) vulnerabilities in Free and Open Source Inventory Management...6.1 Medium
- free and open source inventory management system project and open source inventory management systemMultiple cross-site scripting (XSS) vulnerabilities in Free and Open Source Inventory Management...6.1 Medium
- typoraA cross site scripting (XSS) vulnerability in the Markdown Editor component of Typora v1.6.7...6.1 Medium
- hjsonhson-java vulnerable to denial of service7.5 High
- langchainLangchain vulnerable to arbitrary code execution via the evaluate function in the numexpr library9.8 Critical
- chamilo lmsSQL Injection vulnerability in Chamilo LMS v.1.11 thru v.1.11.20 allows a remote privileged...4.9 Medium
- general-solutions contwise case2A cross-site scripting (XSS) vulnerability in General Solutions Steiner GmbH CASE 3...6.1 Medium
- general-solutions contwise case2A cross-site scripting (XSS) vulnerability in General Solutions Steiner GmbH CASE 3...6.1 Medium
- general-solutions contwise case2A cross-site scripting (XSS) vulnerability in General Solutions Steiner GmbH CASE 3...6.1 Medium
- general-solutions contwise case2A cross-site scripting (XSS) vulnerability in General Solutions Steiner GmbH CASE 3...6.1 Medium
- general-solutions contwise case2A cross-site scripting (XSS) vulnerability in General Solutions Steiner GmbH CASE 3...6.1 Medium
- libtom libtommath, fedoraproject fedora +1 moreInteger Overflow vulnerability in mp_grow in libtom libtommath before commit...9.8 Critical
- relic project relicInteger Overflow vulnerability in RELIC before commit 421f2e91cf2ba42473d4d54daf24e295679e290e,...9.8 Critical
- Show moreLoading…