CVEs published in September 2023
2,233 vulnerabilities, 282 critical, 23 exploited.
- hutoolhutool Buffer Overflow vulnerability9.8 Critical
- hutoolhutool Buffer Overflow vulnerability9.8 Critical
- jeecg bootJeecg boot SQL Injection vulnerability9.8 Critical
- phpgurukul zoo management systemZoo Management System v1.0 was discovered to contain multiple SQL injection vulnerabilities in...9.8 Critical
- phpgurukul dairy farm shop management systemDairy Farm Shop Management System Using PHP and MySQL v1.1 was discovered to contain multiple SQL...7.5 High
- jeecg bootJeecg boot arbitrary file read vulnerability7.5 High
- phpgurukul blood bank \& donor management systemMultiple stored cross-site scripting (XSS) vulnerabilities in /bbdms/sign-up.php of Blood Bank &...5.4 Medium
- agentejo cockpitCockpit CMS arbitrary file upload vulnerability6.1 Medium
- idreamsoft icmsicms 7.0.16 is vulnerable to Cross Site Request Forgery (CSRF).8.8 High
- solar view compact, contec solarview compact firmware +1 moreSolarView Compact < 6.00 is vulnerable to Directory Traversal.7.5 High
- samsung exynos 2100 firmware, exynos 980 firmware +1 moreAn issue was discovered in Exynos Mobile Processor 980 and 2100. An integer overflow at a buffer...2.0 Low
- trustedfirmware trusted firmware-mIn Trusted Firmware-M through TF-Mv1.8.0, for platforms that integrate the CryptoCell accelerator...7.5 High
- free and open source inventory management system project and open source inventory management systemMultiple cross-site scripting (XSS) vulnerabilities in Free and Open Source Inventory Management...6.1 Medium
- fieldthemes fieldpopupnewsletterSimpleImportProduct Prestashop Module v1.0.0 was discovered to contain a reflected cross-site...6.1 Medium
- buffalo america inc terastation nas ts5410r, buffalo terastation nas 5410r firmware +1 moreAn Issue in Buffalo America, Inc. TeraStation NAS TS5410R v.5.00 thru v.0.07 allows a remote...7.5 High
- hexoHexo `include_code` has a path traversal7.5 High
- gm mylink infotainment systemInjecting random data into the USB memory area on a General Motors (GM) Chevrolet Equinox 2021...4.6 Medium
- trendylogics crypto currency trackerIncorrect access control in the User Registration page of Crypto Currency Tracker (CCT) before v9...9.8 Critical
- samsung exynos 2100 firmware, exynos 850 firmware, exynos 980 firmware +2 more +4 moreAn issue was discovered in Samsung Exynos Mobile Processor and Wearable Processor (Exynos 980,...2.0 Low
- samsung exynos 1080 firmware, exynos 1280 firmware, exynos 1330 firmware +13 more +15 moreAn issue was discovered in Samsung Exynos Mobile Processor, Automotive Processor, and Modem ...5.9 Medium
- samsung exynos 1080 firmware, exynos 1280 firmware, exynos 1330 firmware +9 more +11 moreAn issue was discovered in Samsung Exynos Mobile Processor, Automotive Processor, and Modem ...5.3 Medium
- mystenlabs sui, aptosfoundation aptos, move project move +2 moreCMysten Labs Sui blockchain v1.2.0 was discovered to contain a stack overflow via the component ...7.5 High
- enhancesoft osticketA SQL injection vulnerability in the "Search" functionality of "tickets.php" page in osTicket 1...6.5 Medium
- insyde h2offt, iscflashx64.sys +1 moreAn issue was discovered in iscflashx64.sys 3.9.3.0 in Insyde H2OFFT 6.20.00. When handling IOCTL...7.1 High
- mofinetwork mofi4500-4gxelte-v2, mofi4500-4gxelte-v2 firmware +1 moreAn issue was discovered in MoFi Network MOFI4500-4GXeLTE-V2 3.5.6-xnet-5052 allows attackers to...9.8 Critical
- argoproj argo cd, argo-cd +1 moreDenial of Service to Argo CD repo-server6.5 Medium
- argoproj argo cd, argo-cd +1 moreCluster secret might leak in cluster details page in Argo CD9.9 Critical
- hp oneview, hewlett packard enterprise (hpe) hpe oneview +1 morePotential security vulnerabilities have been identified in Hewlett Packard Enterprise OneView...9.8 Critical
- tolgee, tolgee tolgee-platform +1 moreHTML Injection with email in Tolgee5.5 Medium
- cisco identity services engine software, identity services engine +1 moreA vulnerability in the ERS API of Cisco ISE could allow an authenticated, remote attacker to read...4.9 Medium
- cisco identity services engine software, identity services engine +1 moreA vulnerability in the Embedded Service Router (ESR) of Cisco ISE could allow an authenticated,...6.0 Medium
- deltaww cncsoft-b, dopsoft, delta industrial automation cncsoft-b dopsoft +2 moreCVE-2023-46857.8 High
- redwood jscape mft, redwood software jscape mft server +1 moreJSCAPE MFT Server Unsafe Deserialization on Management Port7.2 High
- apple ipados, macos, ios and ipados +2 more +4 moreA buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS...7.8 High
- apple ipados, watchos, ios and ipados +2 more +4 moreA validation issue was addressed with improved logic. This issue is fixed in watchOS 9.6.2, iOS...7.8 High
- go standard library crypto/tls, golang go +1 morePanic when processing post-handshake message on QUIC connections in crypto/tls7.5 High
- go standard library crypto/tls, crypto tls, golang go +2 moreMemory exhaustion in QUIC connection handling in crypto/tls7.5 High
- go standard library html/template, golang go +1 moreImproper handling of special tags within script contexts in html/template6.1 Medium
- go toolchain cmd/go, golang go +1 moreArbitrary code execution via go.mod toolchain directive in cmd/go9.8 Critical
- go standard library html/template, golang go +1 moreImproper handling of HTML-like comments in script contexts in html/template6.1 Medium
- solarwinds serv-u2FA/MFA Bypass Vulnerability in Serv-U 15.4 and 15.4 Hotfix 17.2 High
- mikrotik routerosMikroTik RouterOS Web Interface Heap Corruption7.5 High
kimageformatsOSS-FuzzHeap-buffer-overflow in XCFImageFormat::loadTileRLENo score- adobe illustratorAdobe Illustrator Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 High
- adobe illustratorAdobe Illustrator Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 High
- adobe illustratorAdobe Illustrator Font Parsing Use-After-Free Remote Code Execution Vulnerability7.8 High
- adobe illustratorAdobe Illustrator Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 High
- adobe illustratorAdobe Illustrator SVG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 High
- adobe illustratorAdobe Illustrator Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 High
- adobe illustratorAdobe Illustrator Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 High
- Show moreLoading…