CVEs published in September 2023
2,233 vulnerabilities, 282 critical, 23 exploited.
- adobe illustratorAdobe Illustrator Font Parsing Out-of-bounds Write Remote Code Execution Vulnerability7.8 High
- adobe illustratorAdobe Illustrator SVG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 High
- adobe illustratorAdobe Illustrator Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 High
- adobe after effectsAdobe After Effects MOV File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability3.3 Low
- adobe after effectsAdobe After Effects JPEG2000 Parsing Use-After-Free Information Disclosure Vulnerability3.3 Low
- adobe after effectsAdobe After Effects JPEG File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability3.3 Low
- adobe after effectsAdobe After Effects 3GP File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability3.3 Low
- adobe after effectsAdobe After Effects MOV File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability3.3 Low
- adobe after effectsAdobe After Effects MP4 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability3.3 Low
- adobe after effectsAdobe After Effects MP4 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability3.3 Low
github.com/cyphar/filepath-securejoinGoSecureJoin: on windows, paths outside of the rootfs could be inadvertently producedNo score- adobe premiere proAdobe Premiere Pro MOV File Parsing Use-After-Free Information Disclosure Vulnerability5.5 Medium
- adobe coldfusionColdFusion CFIDE Improper Access Control Leads To Privilege Escalation7.4 High
- adobe photoshop, photoshop desktop +1 moreAdobe Photoshop TIF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability5.5 Medium
- adobe premiere proAdobe Premiere Pro JPEG File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability5.5 Medium
- adobe premiere proAdobe Premiere Pro MP4 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability5.5 Medium
- adobe after effectsAdobe After Effects 3GP File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability7.8 High
- adobe photoshop, photoshop desktop +1 moreAdobe Photoshop JPEG2000 Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 High
- adobe premiere proAdobe Premiere Pro 3GP File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability7.8 High
- adobe coldfusionColdFusion Use of Inherently Dangerous Function Leads To Security feature bypass7.4 High
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreAcrobat Reader DC Out-Of-Bounds Read Information Disclosure Vulnerability5.5 Medium
- adobe lightroom, lightroom desktop +1 moreAdobe Lightroom TIF File Parsing Use-After-Free Information Disclosure Vulnerability7.8 High
- adobe after effectsAdobe After Effects TIF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability7.8 High
- adobe premiere proAdobe Premiere Pro MP4 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability3.3 Low
- fortinet fortiswitchmanagerAn improper access control in Fortinet FortiSwitchManager version 7.2.0 through 7.2.2 7.0.0...6.9 Medium
- resort data processing, inc. irm next generation, resortdata internet reservation module next generation +1 moreImproper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') in RDPngFileUpload.dll9.9 Critical
- resort data processing, inc. irm next generation, resortdata internet reservation module next generation +1 moreImproper Neutralization of Special Elements used in an SQL Command in RDPData.dll8.6 High
- resort data processing, inc. irm next generation, resortdata internet reservation module next generation +1 moreUse of Hard-coded Credentials in multiple /irmdata/api/ endpoints6.5 Medium
- resort data processing, inc. irm next generation, resortdata internet reservation module next generation +1 moreUse of Hard-coded Credentials in RDPWin.dll7.7 High
- resort data processing, inc. irm next generation, resortdata internet reservation module next generation +1 moreUse of Hard-coded Credentials in RDPCore.dll9.9 Critical
- cloudflare warp, warp client +1 moreInsufficient Validation on Override Codes for Always-Enabled WARP Mode5.5 Medium
- asus rt-ax55, rt-ax56u v2, rt-ac86u firmware +2 more +4 moreASUS RT-AX55、RT-AX56U_V2 - Format String - 37.2 High
- asus rt-ac86u, rt-ax55, rt-ax56u v2 +3 more +5 moreASUS RT-AX55、RT-AX56U_V2、RT-AC86U - Format String - 27.2 High
- asus rt-ax55, rt-ax56u v2, rt-ac86u firmware +2 more +4 moreASUS RT-AX55、RT-AX56U_V2 - Format String - 17.2 High
- asus rt-ac86u, rt-ac86u firmware +1 moreASUS RT-AC86U - Command injection vulnerability - 58.8 High
- asus rt-ac86u, rt-ac86u firmware +1 moreASUS RT-AC86U - Command injection vulnerability - 48.8 High
- asus rt-ac86u, rt-ac86u firmware +1 moreASUS RT-AC86U - Command injection vulnerability - 38.8 High
- asus rt-ac86u, rt-ac86u firmware +1 moreASUS RT-AC86U - Command injection vulnerability - 28.8 High
- answer, answerdev answerdev/answer +1 moreMissing Authentication for Critical Function in answerdev/answer8.3 High
- asus rt-ac86u, rt-ac86u firmware +1 moreASUS RT-AC86U - Command injection vulnerability - 18.8 High
- scshr hr portalSoar Cloud Ltd. HR Portal - Weak Password Recovery Mechanism for Forgotten Password7.8 High
- inqsys duplicate post page menu & custom post type, duplicate post page menu \& custom post type +1 moreDuplicate Post Page Menu & Custom Post Type <= 2.3.1 - Missing Authorization to Post Duplication4.3 Medium
- thenewsletterplugin newsletter, satollo newsletter – send awesome emails from wordpress +1 moreNewsletter <= 7.8.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4 Medium
- perrymitchell buttercupButtercup allows attackers to obtain the hash of the master password5.3 Medium
- webmin userminMultiple stored cross-site scripting (XSS) vulnerabilities in Usermin 2.000 allow remote...5.4 Medium
- tenda ac9v3.0br, tendacn ac9 firmware +1 moreTenda AC9 V3.0BR_V15.03.06.42_multi_TD01 was discovered stack overflow via parameter ...9.8 Critical
- free and open source inventory management system project and open source inventory management systemMultiple cross-site scripting (XSS) vulnerabilities in Free and Open Source Inventory Management...6.1 Medium
- vanderbilt redcapA stored cross-site scripting (XSS) vulnerability in the new REDCap project creation function of...5.4 Medium
github.com/cosmos/cosmos-sdkGoCosmos-SDK Cosmovisor component may be vulnerable to denial of serviceNo score- apple macos, ipados, iphone os +2 moreThis issue was addressed with improved redaction of sensitive information. This issue is fixed in...3.3 Low
- Show moreLoading…