CVEs published in September 2023
2,233 vulnerabilities, 282 critical, 23 exploited.
moodleUbuntu[Unknown description]No scoremoodleUbuntu[Unknown description]No scoremoodleUbuntu[Unknown description]No scoremoodleUbuntu[Unknown description]No scoremoodleUbuntu[Unknown description]No scoremoodleUbuntu[Unknown description]No scoremoodleUbuntu[Unknown description]No scoremoodleUbuntu[Unknown description]No scoremoodleUbuntu[Unknown description]No scoremoodleUbuntu[Unknown description]No score- android mycrops higrade, mycrops higrade +1 moreAn issue was discovered in the MyCrops HiGrade "THC Testing & Cannabi" application 1.0.337 for...5.3 Medium
- arris tg1672g, tg852g, tg862g +3 more +5 moreAn issue was discovered on ARRIS TG852G, TG862G, and TG1672G devices. A remote attacker (in...9.8 Critical
- asus rt-ax55, rt-ax55 routers, rt-ax55 firmware +2 moreASUS RT-AX55 v3.0.0.4.386.51598 was discovered to contain an authenticated command injection...8.8 High
- cppchecksolutions cppcheckAn issue in Cppcheck 2.12 dev allows a local attacker to execute arbitrary code via the...7.8 High
- strangebee cortex, thehive +1 moreAn issue in StrangeBee TheHive v.5.0.8, v.4.1.21 and Cortex v.3.1.6 allows a remote attacker to...9.8 Critical
- nbd80n32ra-kl-v3, nbd80s09s-klc, xiongmaitech nb080s09s-klc firmware +1 more +3 moreBuffer Overflow vulnerability in NBD80S09S-KLC v.YK_HZXM_NBD80S09S-KLC_V4.03.R11.7601.Nat.OnvifC...7.5 High
- zlmediakitCross Site Scripting vulnerability in ZLMediaKiet v.4.0 and v.5.0 allows an attacker to execute...6.1 Medium
- raidenftpdBuffer Overflow vulnerability in RaidenFTPD 2.4.4005 allows a local attacker to execute arbitrary...7.8 High
- devcode openstamanagerA reflected cross-site scripting (XSS) vulnerability in DevCode OpenSTAManager versions 2.4.24 to...6.1 Medium
- netis-systems wf2409e, wf2409e firmware +1 moreAn issue in NETIS SYSTEMS WF2409E v.3.6.42541 allows a remote attacker to execute arbitrary code...8.8 High
- zohocorp manageengine admanager plusZoho ManageEngine ADManager Plus before Build 7200 allows admin users to execute commands on the...7.2 High
- ethereum blockchainAn issue in Ethereum Blockchain v0.1.1+commit.6ff4cd6 cause the balance to be zeroed out when the...5.3 Medium
- quboworld smart plug 10a, smart plug 10a firmware +1 moreAn issue was discovered in Qubo Smart Plug 10A version HSP02_01_01_14_SYSTEM-10A, allows...7.5 High
- phpjabbers cleaning business softwareIn PHPJabbers Cleaning Business Software 1.0, there is no encryption on user passwords allowing...9.8 Critical
- anaconda anaconda3Anaconda 3 2023.03-1-Linux allows local users to disrupt TLS certificate validation by modifying...4.7 Medium
- inosoft visiwin 7An issue was discovered in Inosoft VisiWin 7 through 2022-2.1 (Runtime RT7.3 RC3 20221209.5). The...7.8 High
- tsplus remote workAn issue was discovered in TSplus Remote Access through 16.0.2.14. Credentials are stored as...9.8 Critical
- tsplus remote workAn issue was discovered in TSplus Remote Access through 16.0.2.14. There are Full Control...9.8 Critical
- tsplus remote accessAn issue was discovered in TSplus Remote Access through 16.0.2.14. There are Full Control...9.8 Critical
- xxyopen novel-plusnovel-plus 3.6.2 is vulnerable to SQL Injection.9.8 Critical
- n-able take controlBASupSrvcUpdater.exe in N-able Take Control Agent through 7.0.41.1141 before 7.0.43 has a TOCTOU...7.0 High
- hichip shenzhen hichip vision technology firmwareShenzhen Hichip Vision Technology IP Camera Firmware V11.4.8.1.1-20170926 has a denial of service...8.1 High
- foxconn live update utilityAn issue was discovered in MmMapIoSpace routine in Foxconn Live Update Utility 2.1.6.26, allows...7.8 High
- dieboldnixdorf agilis xfs for optevaAn issue in Diebold Aglis XFS for Opteva v.4.1.61.1 allows a remote attacker to execute arbitrary...9.8 Critical
- d-link dir-619l, dlink dir-619l firmware +1 moreAn issue was discovered in /bin/mini_upnpd on D-Link DIR-619L 2.06beta devices. There is a heap...7.5 High
- d-link dir-619l, dlink dir-619l firmware +1 moreBuffer overflow vulnerability in DLINK 619L version B 2.06beta via the curTime parameter on login.9.8 Critical
- d-link 202l, dlink dir-619l firmware +1 moreBuffer overflow vulnerability in DLINK 619L version B 2.06beta via the FILECODE parameter on login.9.8 Critical
- d-link dir-605l, dlink dir-605l firmware +1 moreBuffer Overflow vulnerability in D-Link DIR-605L, hardware version AX, firmware version 1.17beta...8.8 High
- instantsoft instantsoft/icms2, instantcms +1 moreCross-site Scripting (XSS) - Stored in instantsoft/icms23.5 Low
- instantsoft instantsoft/icms2, instantcms +1 moreServer-Side Request Forgery (SSRF) in instantsoft/icms24.3 Medium
userscrates.ioUsers vulnerable to unaligned read of `*const *const c_char` pointerNo scoreinventorycrates.ioInventory fails to prohibit standard library access prior to initialization of Rust standard library runtimeNo scoreinventorycrates.ioInventory exposes reference to non-Sync data to an arbitrary threadNo score- byzoro smart s45f multi-service secure gateway intelligent management platform, smart s45f firmware +1 moreByzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform importexport.php os command injection6.3 Medium
- contact manager app project manager app, sourcecodester contact manager app +1 moreSourceCodester Contact Manager App add.php sql injection6.3 Medium
- contact manager app project manager app, sourcecodester contact manager app +1 moreSourceCodester Contact Manager App delete.php sql injection6.3 Medium
- contact manager app project manager app, sourcecodester contact manager app +1 moreSourceCodester Contact Manager App Contact Information index.php cross site scripting3.5 Low
- contact manager app project manager app, sourcecodester contact manager app +1 moreSourceCodester Contact Manager App update.php cross-site request forgery4.3 Medium
- contact manager app project manager app, sourcecodester contact manager app +1 moreSourceCodester Contact Manager App add.php cross-site request forgery4.3 Medium
- hamza417 hamza417/inure, inure +1 moreExposure of Sensitive Information to an Unauthorized Actor in hamza417/inure5.5 Medium
- Show moreLoading…