CVEs published in September 2023
2,233 vulnerabilities, 282 critical, 23 exploited.
- apple macos, ipados, iphone os +2 moreA privacy issue was addressed with improved private data redaction for log entries. This issue is...3.3 Low
- apple macosA race condition was addressed with improved state handling. This issue is fixed in macOS Ventura...7.0 High
- wiremock studio, wiremock +1 moreFull read and controlled SSRF through URL parameter when testing a request inside wiremock-studio10.0 Critical
- wiremock studio, wiremock +1 moreControlled SSRF through URL in the WireMock4.6 Medium
- wiremock studio, wiremock, wiremock docker +1 more +3 moreDomain restrictions bypass via DNS Rebinding in WireMock and WireMock Studio3.9 Low
- redisRedis SORT_RO may bypass ACL configuration3.3 Low
- electronElectron: Out-of-package code execution when launched with arbitrary cwd6.1 Medium
- electronContext isolation bypass via nested unserializable return value in Electron6.0 Medium
- freebsdpf incorrectly handles multiple IPv6 fragment headers7.5 High
- searchbloxCVE-2020-101326.1 Medium
- searchbloxCVE-2020-101319.8 Critical
- searchbloxCVE-2020-101308.8 High
- searchbloxCVE-2020-101298.8 High
- atom electronContent-Secrity-Policy disabling eval not applied consistently in renderers with sandbox disabled in Electron7.5 High
- ethereum go-ethereum, go ethereum +1 moreDenial of service via malicious p2p message in go-ethereum7.5 High
- zope accesscontrol, zope +1 moreInformation disclosure through Python's "format" functionality in Zope AccessControl6.8 Medium
- ethyca fidesRemote Code Execution in Custom Integration Upload in Fides8.8 High
- arubanetworks arubaos, hewlett packard enterprise (hpe) 9200 series mobility controllers and sd-wan gateways, 9000 series mobility controllers and sd-wan gateways +1 moreHardware Root of Trust Bypass in 9200 and 9000 Series Controllers and Gateways7.7 High
- arubanetworks arubaos, hewlett packard enterprise (hpe) 9200 series mobility controllers and sd-wan gateways, 9000 series mobility controllers and sd-wan gateways, hewlett packard enterprise 9200 series mobility controllers and sd-wan gateways 9000 series mobility controllers and sd-wan +2 moreMultiple Buffer Overflow Vulnerabilities in BIOS Implementation of 9200 and 9000 Series Controllers and Gateways8.0 High
- arubanetworks arubaos, hewlett packard enterprise (hpe) 9200 series mobility controllers and sd-wan gateways, 9000 series mobility controllers and sd-wan gateways, hewlett packard enterprise 9200 series mobility controllers and sd-wan gateways 9000 series mobility controllers and sd-wan +2 moreMultiple Buffer Overflow Vulnerabilities in BIOS Implementation of 9200 and 9000 Series Controllers and Gateways8.0 High
- elated-themes frappePossibility limited SQL injection due to insufficient validation in Frappe4.2 Medium
- cacti, fedoraproject fedora +1 moreStored Cross-Site-Scripting on reports_admin.php device name in Cacti6.1 Medium
- knplabs snappyUnsafe deserialization in knplabs/knp-snappy9.8 Critical
- azul zulu, software ag webmethods onedata, softwareag webmethods +2 moreSoftware AG webMethods OneData Deserialization Vulnerability9.8 Critical
- cisco hyperflex hx data platformA vulnerability in the web-based management interface of Cisco HyperFlex HX Data Platform could...4.7 Medium
- cisco adaptive security appliance (asa) software, adaptive security appliance and firepower threat defense, adaptive security appliance software +2 more +4 moreA vulnerability in the remote access VPN feature of Cisco Adaptive Security Appliance (ASA)...5.0 Medium
- cisco broadworks application delivery platform, broadworks xtended services platform, broadworks +2 moreA vulnerability in the single sign-on (SSO) implementation of Cisco BroadWorks Application...10.0 Critical
- cisco identity services engine, identity services engine software +1 moreA vulnerability in the RADIUS message processing feature of Cisco Identity Services Engine (ISE)...8.6 High
- cisco small business rv series router firmware, rv110w firmware, rv130 firmware +2 more +4 moreA vulnerability in the web-based management interface of Cisco Small Business RV110W, RV130,...6.5 Medium
drupal/webprofilerPackagistThe Webprofiler module provides a way of displaying the Symfony profile debugging tool at the bottom of each page. The abbr_class Twig filter can be used to bypass the Twig auto-escape feature. This v…No score- tenda n300 wireless n vdsl2 modem router, n300 firmware +1 moreAuthentication Bypass in Tenda N300 Wireless N VDSL2 Modem Router5.3 Medium
drupal/highlight_phpPackagistProvides highlight.php integration to Drupal, allowing <code> blocks to be automatically highlighted with the correct language. The module's Twig function doesn't sufficiently filter user-entered data…No scorekimageformatsOSS-FuzzStack-buffer-overflow in QBuffer::readDataNo scoreapache-poiOSS-FuzzSecurity exception in org.apache.poi.hwpf.converter.AbstractWordConverter.processNoteAnchorNo scoreluceneOSS-FuzzSecurity exception in org.apache.lucene.util.BytesRefBuilder.<init>No score- debian linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +3 more +5 moreUse-after-free in Linux kernel's net/sched: sch_hfsc (HFSC qdisc traffic control) component7.8 High
- debian linux, linux kernel +1 moreUse-after-free in Linux kernel's af_unix component7.8 High
- debian linux, linux kernel +1 moreUse-after-free in Linux kernel's netfilter: nf_tables component7.8 High
- debian linux, linux kernel +1 moreUse-after-free in Linux kernel's net/sched: cls_u32 component7.8 High
- debian linux, linux kernel +1 moreUse-after-free in Linux kernel's net/sched: cls_fw component7.8 High
- debian linux, linux kernel +1 moreUse-after-free in Linux kernel's net/sched: cls_route component7.8 High
- apache supersetApache Superset: SQL parser edge case bypasses data access authorization4.3 Medium
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreAdobe Acrobat Pro DC Use-After-Free Remote Code Execution Vulnerability7.8 High
- adobe commerce, magento +1 moreMagento Commerce Media Gallery Upload Improper Access Control Could Lead To Remote Code Execution7.2 High
- adobe commerce, magento +1 moreMagento Commerce CMS Page Improper Input Validation Could Lead To Remote Code Execution7.2 High
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreUse After Free Adobe Acrobat Pro DC [HB-21-0339]5.5 Medium
- adobe media encoderAdobe Media Encoder MPEG File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability5.5 Medium
- adobe commerce, magento +1 moreMagento Commerce Widgets Update Layout XML Injection Vulnerability Could Lead To Remote Code Execution9.1 Critical
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreAdobe Acrobat Reader SpellDictionaryExport Path Traversal Remote Code Execution Vulnerability7.8 High
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreAdobe Acrobat SpellDictionaryCreate Path Traversal Remote Code Execution Vulnerability7.8 High
- Show moreLoading…