CVEs published in September 2023
2,233 vulnerabilities, 282 critical, 23 exploited.
- qualcomm ar8035 firmware, qca6390 firmware, qca6391 firmware +54 more +56 moreReachable Assertion in Modem7.5 High
- qualcomm aqt1000 firmware, qca6390 firmware, qca6391 firmware +51 more +53 moreInteger Overflow to Buffer Overflow in RIL6.7 Medium
- qualcomm aqt1000 firmware, qca6390 firmware, qca6391 firmware +49 more +51 moreImproper Validation of Array Index in Linux6.7 Medium
- qualcomm snapdragon w5\+ gen 1 wearable platform firmware, sw5100 firmware, sw5100p firmware +11 more +13 moreImproper Validation of Array Index in Audio8.4 High
- qualcomm aqt1000 firmware, qca6390 firmware, qca6391 firmware +36 more +38 moreBuffer over-read in Modem6.7 Medium
- qualcomm 315 5g iot modem firmware, apq5053-aa firmware, aqt1000 firmware +257 more +259 moreImproper validation of array index in WLAN HAL8.4 High
- qualcomm aqt1000 firmware, qam8295p firmware, qca6390 firmware +43 more +45 moreBuffer over-read in Automotive multimedia5.1 Medium
- yongyou ufida-ncYongyou UFIDA-NC PrintTemplateFileServlet.java path traversal6.3 Medium
- userprivatefiles wordpress file sharing plugin, deepakkite file sharing & download manager – user private files +1 moreWordPress File Sharing Plugin <= 2.0.3 - Authenticated (Admin+) Stored Cross-Site Scripting4.4 Medium
- ibm aspera faspexIBM Aspera Faspex security bypass5.3 Medium
- ibm aspera faspexIBM Aspera Faspex information disclosure5.9 Medium
- ibm sterling secure proxy, sterling external authentication server +1 moreIBM Sterling Secure Proxy information disclosure5.1 Medium
- lldpd project lldpdAn issue was discovered in lldpd before 1.0.17. By crafting a CDP PDU packet with specific...9.8 Critical
- frrouting, debian linux, fedoraproject fedora +2 moreAn issue was discovered in FRRouting FRR through 9.0. bgp_nlri_parse_flowspec in bgpd...7.5 High
- cerebrate-project cerebrateCerebrate before 1.15 lacks the Secure attribute for the session cookie.5.3 Medium
- superstorefinder super store finderA hard coded password in Super Store Finder v3.6 allows attackers to access the administration...9.8 Critical
- superstorefinder super store finderSuper Store Finder v3.6 was discovered to contain multiple SQL injection vulnerabilities in the...9.8 Critical
- tef portalTEF portal 2023-07-17 is vulnerable to authenticated remote code execution.8.8 High
- tef portalTEF portal 2023-07-17 is vulnerable to a persistent cross site scripting (XSS)attack.5.4 Medium
- china mobile communications mobile intelligent home gateway, chinamobile intelligent home gateway firmware +1 moreAn issue in China Mobile Communications China Mobile Intelligent Home Gateway v.HG6543C4 allows a...9.8 Critical
- adlered bolo-soloFile Upload vulnerability in adlered bolo-solo v.2.6 allows a remote attacker to execute...9.8 Critical
- knowstreaming project knowstreamingKnowStreaming 3.3.0 is vulnerable to Escalation of Privileges. Unauthorized users can create a...8.8 High
- cuppacmsCuppa CMS v1.0 was discovered to contain a remote code execution (RCE) vulnerability via the...9.8 Critical
- abuquant abupyabupy up to v0.4.0 was discovered to contain a SQL injection vulnerability via the component...9.8 Critical
- icewarp webclientCross Site Scripting vulnerability in IceWarp Corporation WebClient v.10.2.1 allows a remote...6.1 Medium
- web-audimex audimexeeAudimexee v14.1.7 was discovered to contain a SQL injection vulnerability via the p_table_name...9.8 Critical
- disintegration imagingCrash when processing crafted TIFF files5.5 Medium
- simonwaldherr zplgfaIndex out of bounds leading to crash5.5 Medium
- isarnet isarflowA stored cross-site scripting (XSS) vulnerability in IsarNet AG IsarFlow v5.23 allows...5.4 Medium
- nokia access management systemAn issue was discovered in NOKIA AMS 9.7.05. Remote Code Execution exists via the debugger of the...8.8 High
- tenda ac6, ac6 firmware +1 moreTenda AC6 US_AC6V4.0RTL_V02.03.01.26_cn.bin allows attackers (who have the administrator password...4.9 Medium
- bmc patrol agentBMC PATROL Agent through 20.08.00 allows local privilege escalation via vectors involving pconfig...7.8 High
- bmc server automationBMC Server Automation before 8.9.01 patch 1 allows Process Spawner command execution because of...9.0 Critical
- arubanetworks airwaveAruba AirWave before 7.7.14.2 and 8.x before 8.0.7 allows administrative users to escalate...7.2 High
- arubanetworks airwaveAruba AirWave before 7.7.14.2 and 8.x before 8.0.7 allows VisualRF remote OS command execution...7.2 High
- hp airwaveAruba AirWave before 8.0.7 allows bypass of a CSRF protection mechanism.8.8 High
- hp airwaveAruba AirWave before 8.0.7 allows XSS attacks agsinat an administrator.6.1 Medium
- ibm sterling secure proxy, sterling external authentication server +1 moreIBM Sterling Secure Proxy information disclosure5.1 Medium
- ibm security guardiumIBM Security Guardium denial of service4.3 Medium
- ibm financial transaction manager for swift services, financial transaction manager +1 moreIBM Financial Transaction Manager for SWIFT Services XML external entity injection7.1 High
- parse-community parse-serverTrigger `beforeFind` not invoked in internal query pipeline in parse-server7.5 High
- ahwx libreyLibreY Server-Side Request Forgery (SSRF) vulnerability via wikipedia_language cookie7.5 High
- ahwx libreyLibreY Server-Side Request Forgery (SSRF) vulnerability in image_proxy.php8.2 High
- plannigan hyper-bump-it, hyper bump it +1 moreImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in hyper-bump-it5.5 Medium
- vyperlang vyperVyper: incorrect order of evaluation of side effects for some builtins3.7 Low
- vyperlang vyperVyper: reversed order of side effects for some operations3.7 Low
- gpac, gpac gpac/gpac +1 moreBuffer Over-read in gpac/gpac5.9 Medium
- dell alienware command center, alienware command center (awcc) +1 moreDell Alienware Command Center, versions prior to 5.5.51.0, contain a deserialization of...7.8 High
- vim, vim vim/vim, apple macos +2 more +4 moreUse After Free in vim/vim7.3 High
- vim, vim vim/vim, apple macos +2 more +4 moreUse After Free in vim/vim7.8 High
- Show moreLoading…