CVEs published in September 2023
2,233 vulnerabilities, 282 critical, 23 exploited.
- mintplex-labs mintplex-labs/anything-llm, mintplexlabs anythingllm +1 moreRelative Path Traversal in mintplex-labs/anything-llm8.7 High
- kaizencoders url shortifyURL Shortify < 1.7.6 - Unauthenticated Stored XSS via referer header6.1 Medium
- tagdiv composer, unknown tagdiv composer +1 moretagDiv Composer < 4.2 - Admin+ Stored XSS4.8 Medium
- stylemixthemes masterstudy lms, unknown masterstudy lms wordpress plugin +1 moreMasterStudy LMS < 3.0.18 - Unauthenticated Instructor Account Creation7.5 High
- liton arefin wp adminifyWP Adminify < 3.1.6 - Admin+ Stored XSS4.8 Medium
- danialhatami ftp accessFTP Access <= 1.0 - Subscriber+ Stored XSS5.4 Medium
- tagdiv composer, unknown tagdiv composer +1 moretagDiv Composer < 4.2 - Unauthenticated Stored XSS6.1 Medium
- tms-outsource wpdatatableswpDataTables < 2.1.66 - Admin+ PHP Object Injection7.2 High
- unknown herd effectsHerd Effects < 5.2.3 - Admin+ Stored XSS4.8 Medium
- gappointmentsAppointment booking addon for Gravity Forms < 1.10.0 - Reflected Cross-Site Scripting6.1 Medium
- unknown herd effectsHerd Effects < 5.2.4 - Effect Deletion via CSRF4.3 Medium
- codeastrology min max controlMin Max Control < 4.6 - Reflected XSS6.1 Medium
- teknigar lock user accountLock User Account <= 1.0.3 - Arbitrary Account Lock/Unlock via CSRF4.3 Medium
- dover fueling solutions maglink lx web console configurationDover Fueling Solutions MAGLINK LX Web Console Authentication Bypass by Primary Weakness8.8 High
- dover fueling solutions maglink lx web console configurationDover Fueling Solutions MAGLINK LX Console Path Traversal6.8 Medium
- softneta meddream pacsSoftneta MedDream PACS Plaintext Storage of a Password6.1 Medium
- softneta meddream pacsSoftneta MedDream PACS Exposed Dangerous Method or Function9.8 Critical
- dover fueling solutions maglink lx web console configurationDover Fueling Solutions MAGLINK LX Console Authentication Bypass9.1 Critical
- libvips, fedoraproject fedora +1 morePotential segfault due to NULL pointer dereference in libvips5.5 Medium
- symfony ux-autocomplete, ux autocomplete +1 morePrevent injection of invalid entity ids for "autocomplete" fields in symfony ux-autocomplete6.5 Medium
- adobe acrobat reader, acrobat dc, acrobat reader dc +2 moreUse-After-Free in app.measureDialog - Tianfu Cup7.8 High
- adobe acrobat reader, acrobat dc, acrobat reader dc +2 moreCoolType.dll crash - Tianfu Cup7.8 High
- adobe acrobat reader, acrobat dc, acrobat reader dc +2 moreAdobe Acrobat Pro DC PostScript File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability5.5 Medium
- suse rke2, rancher rke2 +1 moreRKE2 supervisor port is vulnerable to unauthenticated remote denial-of-service (DoS) attack via TLS SAN stuffing attack7.5 High
- k3sK3s apiserver port is vulnerable to unauthenticated remote denial-of-service (DoS) attack via TLS SAN stuffing attack7.5 High
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreAdobe Acrobat Reader DC Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability5.5 Medium
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreAdobe Acrobat Reader DC AcroForm value Use-After-Free Remote Code Execution Vulnerability7.8 High
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreAdobe Acrobat Reader DC AcroForm setItems Use-After-Free Remote Code Execution Vulnerability7.8 High
- adobe incopyAdobe InCopy Font Parsing Use-After-Free Remote Code Execution Vulnerability7.8 High
- adobe incopyAdobe InCopy Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 High
- adobe incopyAdobe InCopy Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 High
- adobe indesign, indesign desktop +1 moreAdobe InDesign Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 High
- adobe indesign, indesign desktop +1 moreAdobe InDesign Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 High
- adobe indesign, indesign desktop +1 moreAdobe InDesign Font Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability7.8 High
- gitlabMissing Authorization in GitLab5.0 Medium
- govee homeUnprotected WebView access in Govee Home App8.2 High
- mozilla vpn 2.16.1, vpn, vpn client for linux +2 moreAn invalid Polkit Authentication check and missing authentication requirements for D-Bus methods...5.5 Medium
- hitachi energy asset suite 9, hitachienergy asset suite +1 moreA vulnerability exists in the Equipment Tag Out authentication, when configured with Single Sign...6.9 Medium
gitlabUbuntu[Unknown description]No score- wave-ai waveThe wave.ai.browser application through 1.0.35 for Android allows a remote attacker to execute...9.8 Critical
- imoulife lifeThe Imou Life com.mm.android.smartlifeiot application through 6.8.0 for Android allows Remote...9.8 Critical
- qemuQEMU through 8.0.0 could trigger a division by zero in scsi_disk_reset in hw/scsi/scsi-disk.c...5.5 Medium
- couchcmsAn open redirect vulnerability in the sanitize_url() parameter of CouchCMS v2.3 allows attackers...6.1 Medium
- phpgurukul dairy farm shop management systemMultiple cross-site scripting (XSS) vulnerabilities in Dairy Farm Shop Management System Using...5.4 Medium
- interactsoftware interactInteract 7.9.79.5 allows stored Cross-site Scripting (XSS) attacks in several locations, allowing...5.4 Medium
- gpacGPAC through 2.2.1 has a use-after-free vulnerability in the function gf_bifs_flush_command_list...5.5 Medium
- schoolmate project schoolmateSchoolmate 1.3 is vulnerable to SQL Injection in the variable $username from SESSION in...9.8 Critical
- doctor appointment system project appointment systemSourcecodester Doctor Appointment System 1.0 is vulnerable to SQL Injection in the variable ...9.8 Critical
- schoolmate project schoolmateSchoolmate 1.3 is vulnerable to SQL Injection in the variable $schoolname from Database at ~...9.8 Critical
- hkcmsHKcms v2.3.0.230709 is vulnerable to Cross Site Scripting (XSS) allowing administrator cookies to...5.4 Medium
- Show moreLoading…