CVEs published in September 2023
2,233 vulnerabilities, 282 critical, 23 exploited.
- hamza417 hamza417/inure, inure +1 moreExposure of Sensitive Information to an Unauthorized Actor in hamza417/inure7.9 High
- xintian smart table integrated management systemXintian Smart Table Integrated Management System Added Site Page AddUpdateSites.aspx sql injection6.3 Medium
- sourcecodester online tours & travels management system, online tours \& travels management system project tours \& travels management system +1 moreSourceCodester Online Tours & Travels Management System booking.php exec sql injection6.3 Medium
- sourcecodester take-note app, take-note app project app +1 moreSourceCodester Take-Note App cross-site request forgery4.3 Medium
- sourcecodester take-note app, take-note app project app +1 moreSourceCodester Take-Note App index.php cross site scripting3.5 Low
- mutt, debian linux +1 moreUndefined Behavior for Input to API in Mutt4.3 Medium
- mutt, debian linux +1 moreUndefined Behavior for Input to API in Mutt2.2 Low
libuclOSS-FuzzHeap-buffer-overflow in ucl_object_dtor_unref_singleNo scorekamailioOSS-FuzzUNKNOWN READ in parse_priv_valueNo score- ibos, ibos oa +1 moreIBOS OA optimize sql injection6.3 Medium
- ibos, ibos oa +1 moreIBOS OA edit&op=member sql injection6.3 Medium
- ibos, ibos oa +1 moreIBOS OA del sql injection6.3 Medium
- linux, linux kernel +1 moreksmbd: validate session id and tree id in the compound request7.5 High
- linux, linux kernel +1 moreksmbd: fix out-of-bound read in smb2_write8.1 High
- ibos, ibos oa +1 moreIBOS OA trash&op=del sql injection6.3 Medium
- simple book catalog app project book catalog app, sourcecodester simple book catalog app +1 moreSourceCodester Simple Book Catalog App delete_book.php sql injection6.3 Medium
- simple book catalog app project book catalog app, sourcecodester simple book catalog app +1 moreSourceCodester Simple Book Catalog App Update Book Form cross site scripting3.5 Low
- razormist simple membership systemSourceCodester Simple Membership System delete_member.php sql injection6.3 Medium
- razormist simple membership systemSourceCodester Simple Membership System account_edit_query.php sql injection6.3 Medium
- plugin-planet simple download counterThe Simple Download Counter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via...6.4 Medium
- openpmix, debian linux, fedoraproject fedora +2 moreOpenPMIx PMIx before 4.2.6 and 5.0.x before 5.0.1 allows attackers to obtain ownership of...8.1 High
- razormist simple membership systemSourceCodester Simple Membership System club_edit_query.php sql injection6.3 Medium
- ibm aspera faspexIBM Aspera Faspex cross-site scripting5.4 Medium
- ibm aspera faspexIBM Aspera Faspex information disclosure5.9 Medium
- ibm aspera faspexIBM Aspera Faspex information disclosure5.3 Medium
- sap se s/4hana (manage catalog items and cross-catalog search), sap s\/4hana +1 moreURL Redirection vulnerability in SAP S/4HANA (Manage Catalog Items and Cross-Catalog search)6.1 Medium
- ibm aspera faspexIBM Aspera Faspex improper access control7.5 High
- ibm aspera faspexIBM Aspera Faspex improper access control5.8 Medium
- ibm aspera faspexIBM Aspera Faspex information disclosure5.9 Medium
- ibm security directory server, security directory integrator +1 moreIBM Security Directory Server path traversal8.7 High
- ibm maximo application suite, maximo asset management +1 moreIBM Maximo Application Suite and IBM Maximo Asset Management HTML injection5.4 Medium
- ibm qradar wincollect agent, qradar wincollect +1 moreIBM QRadar WinCollect Agent privilege escalation7.5 High
- hcl software domino server, hcltech domino +1 moreHCL Domino is susceptible to a sensitive information disclosure vulnerability4.0 Medium
- hashicorp terraformTerraform Allows Arbitrary File Write During Init Operation6.3 Medium
- pega platform, pegasystems pega platform +1 morePega Platform versions 7.1 to 8.8.3 are affected by an HTML Injection issue with a name field...4.3 Medium
libredwgOSS-FuzzInvalid-free in bit_chain_alloc_sizeNo scorehdf5OSS-FuzzHeap-buffer-overflow in H5F__accum_freeNo score- gofiber fiberVulnerability in Ctx.IsFromLocal() in gofiber5.3 Medium
- t2bot matrix-media-repoUnsafe media served inline on download endpoints in matrix-media-repo4.1 Medium
skopeoopenSUSESecurity update for skopeoNo scoregeoipupdateopenSUSESecurity update for geoipupdateNo scorerekoropenSUSESecurity update for rekorNo score- openssl, siemens sidis prime, simatic s7-1500 cpu 1518-4 pn/dp mfp +3 more +5 morePOLY1305 MAC implementation corrupts XMM registers on Windows7.8 High
- qualys container scanning connector, qualys,inc. container scanning connector jenkins plugin +1 moreIncorrect Permission Assignment on Qualys Container Scanning Connector Plugin 1.6.2.6 and earlier3.1 Low
- cloud foundry routing, cf deployment, cloudfoundry cf-deployment +1 more +3 moreCVE-2023-34041-Abuse of HTTP Hop-by-Hop Headers in Cloud Foundry Gorouter5.3 Medium
- l is b corp. 'direct' desktop app for macos, l-is-b direct +1 moreImproper access control vulnerability in 'direct' Desktop App for macOS ver 2.6.0 and earlier...5.5 Medium
- dell digital deliveryDell Digital Delivery versions prior to 5.0.82.0 contain an Insecure Operation on Windows...5.0 Medium
- tripodworks gigapod 2010 firmware, gigapod 3 firmware, gigapod officehard firmware +3 more +5 moreGIGAPOD file servers (Appliance model and Software model) provide two web interfaces, 80/tcp and...7.5 High
- qnap qvr pro clientQVR Pro Client6.7 Medium
- hutoolhutool Buffer Overflow vulnerability7.5 High
- Show moreLoading…