CVEs published in September 2023
2,233 vulnerabilities, 282 critical, 23 exploited.
- apple macosA buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS...7.8 High
- apple macosA buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS...7.8 High
- apple macosAn out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS...5.5 Medium
- apple macosA buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS...7.8 High
- apple macosError handling was changed to not reveal sensitive information. This issue is fixed in macOS...6.5 Medium
- apple macosThis issue was addressed with improved state management. This issue is fixed in macOS Ventura 13...6.5 Medium
- apple xcodeThe issue was addressed with improved checks. This issue is fixed in Xcode 14.0. Parsing a file...5.5 Medium
- cszcms csz cmsMultiple cross-site scripting (XSS) vulnerabilities in install/index.php of CSZ CMS v1.3.0 allow...6.1 Medium
- kodcloud kodexplorerA Cross Site Scrtpting (XSS) vulnerability in KodExplorer 4.45 allows remote attackers to run...6.1 Medium
- ardereg sistemas scadaARDEREG Sistemas SCADA SQL Injection9.8 Critical
- ge cimplicityGE Digital CIMPLICITY Process Control7.8 High
- google chrome, debian linux +1 moreIncorrect security UI in BFCache in Google Chrome prior to 116.0.5845.179 allowed a remote...6.5 Medium
- google chrome, debian linux +1 moreUse after free in Networks in Google Chrome prior to 116.0.5845.179 allowed a remote attacker to...8.8 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreType Confusion in V8 in Google Chrome prior to 116.0.5845.179 allowed a remote attacker to...8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreOut of bounds memory access in FedCM in Google Chrome prior to 116.0.5845.179 allowed a remote...8.1 High
- cacti, fedoraproject fedora +1 moreInsecure Deserialization in Cacti4.3 Medium
- cactiCacti Privilege Escalation7.8 High
- cacti, fedoraproject fedora +1 moreAuthenticated command injection in SNMP options of a Device7.2 High
- cacti, fedoraproject fedora +1 moreOpen redirect in change password functionality in Cacti3.5 Low
- cacti, fedoraproject fedora +1 moreStored Cross-Site-Scripting on data_sources.php debug html-block in Cacti6.1 Medium
- cacti, fedoraproject fedora +1 moreUnchecked regular expressions can lead to SQL Injection and data leakage in Cacti4.6 Medium
- cacti, fedoraproject fedora +1 moreA Defect in sql_save() Causes Multiple SQL Injection Vulnerabilities in Cacti8.8 High
- cacti, fedoraproject fedora +1 moreAuthenticated SQL injection vulnerability in reports_user.php in Cacti8.8 High
- cacti, fedoraproject fedora +1 moreAuthenticated SQL injection vulnerability in graphs.php in Cacti8.8 High
- cacti, fedoraproject fedora +1 moreUnauthenticated SQL Injection in graph_view.php in Cacti9.8 Critical
- cacti, fedoraproject fedora +1 moreReflected Cross-site Scripting in graphs_new.php in Cacti6.1 Medium
- cacti, fedoraproject fedora +1 moreStored Cross-site Scripting in data_sources.php through Device-Name in 'select' input in Cacti6.1 Medium
- cacti, fedoraproject fedora +1 moreStored Cross-site Scripting in reports_admin.php through Device-Name in 'select' input in Cacti6.1 Medium
- cacti, fedoraproject fedora +1 moreStored Cross-site Scripting on data_sources.php device name view in Cacti6.1 Medium
- beyondtrust privileged remote access (pra), privileged remote access, remote support (rs) +1 more +3 moreBeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) versions 23.2.1 and 23.2.2...9.8 Critical
- cacti, fedoraproject fedora +1 moreStored Cross-site Scripting on host.php verbose data-query debug view in Cacti6.1 Medium
- cacti, fedoraproject fedora +1 moreStored Cross-site Scripting on data_debug.php datasource path view in Cacti6.1 Medium
- cacti, fedoraproject fedora +1 moreStored Cross-site Scripting on graphs.php data template formated name view in Cacti6.1 Medium
- searchbloxSearchBlox product before V-9.2.1 is vulnerable to Stored-Cross Site Scripting5.4 Medium
- neutron smart vmsAuthentication Bypass in Neutron Smart VMS9.8 Critical
- digital ant e-commerce softwareSQLi in Mestavs E-commerce Software9.8 Critical
- vim, vim vim/vim, apple macos +2 more +4 moreHeap-based Buffer Overflow in vim/vim7.8 High
- apollographql apollo router, router +1 moreUnnamed "Subscription" operation results in Denial-of-Service in apollographql/router7.5 High
- digita information technology smartrise document management systemSQLi in Smartrise Document Management System9.8 Critical
- mava hotel management systemSQLi in Mava Softwares Hotel Management System9.8 Critical
- coyav travel proagentSQLi in Coyav Travels Proagent9.8 Critical
- bma personnel tracking systemSQLi in BMAs Personnel Tracking System9.8 Critical
- osoft paint production management, dyeing - printing - finishing production management +1 moreSQLi in Osofts Paint Production Management9.8 Critical
- bookreenUnrestricted File Upload in Bookreen7.2 High
- bookreenPrivilege Escalation in Bookreen9.8 Critical
- open automation software oas platformAn authentication bypass vulnerability exists in the OAS Engine functionality of Open Automation...8.1 High
- open automation software oas platformAn authentication bypass vulnerability exists in the OAS Engine functionality of Open Automation...8.1 High
- open automation software oas platformAn improper input validation vulnerability exists in the OAS Engine User Creation functionality...6.5 Medium
- open automation software oas platformA file write vulnerability exists in the OAS Engine configuration functionality of Open...6.5 Medium
- open automation software oas platformAn improper resource allocation vulnerability exists in the OAS Engine configuration management...3.1 Low
- Show moreLoading…