CVEs published in September 2023
2,233 vulnerabilities, 282 critical, 23 exploited.
- fortinet fortitesterAn improper neutralization of special elements used in an OS command vulnerability [CWE-78] in...6.5 Medium
- fortinet fortiwebA protection mechanism failure in Fortinet FortiWeb 7.2.0 through 7.2.1, 7.0.0 through 7.0.6, 6.4...7.1 High
- fortinet fortipresenceA lack of custom error pages vulnerability [CWE-756] in FortiPresence versions 1.2.0 through 1.2...5.3 Medium
- fortinet fortisiemA exposure of sensitive information to an unauthorized actor in Fortinet FortiSIEM version 6.7.0...4.2 Medium
- fortinet fortiap, fortiap-c, fortiap-u +2 more +4 moreAn incomplete filtering of one or more instances of special elements vulnerability [CWE-792] in...5.2 Medium
- nlnet labs bcderBER/CER/DER decoder panics on invalid input7.5 High
- apache tomcat connectorsApache Tomcat Connectors: Unexpected use of first declared worker in mod_jk for unmapped request7.5 High
- adobe connectAdobe Connect Reflected Cross-Site Scripting (XSS) Arbitrary code execution6.1 Medium
- adobe connectAdobe Connect Reflected Cross-Site Scripting (XSS) Arbitrary code execution6.1 Medium
- adobe acrobat, acrobat reader, acrobat dc +2 more +4 more[Google Project Zero] Adobe Acrobat DC OOBW 0-day actively exploited in the wild7.8 High
- skyhigh security secure web gateway (swg), skyhighsecurity secure web gateway +1 moreA password management vulnerability in Skyhigh Secure Web Gateway (SWG) in main releases 11.x...6.2 Medium
- shadow-maint shadow-utils, red hat enterprise linux 6, enterprise linux 7 +12 more +14 moreShadow-utils: possible password leak during passwd(1) change4.7 Medium
- palmspark wp user controlWP User Control <= 1.5.3 - Insecure Password Reset Mechanism5.3 Medium
- te-st leykaLeyka <= 3.30.7 - Authenticated (Subscriber+) Sensitive Information Exposure5.3 Medium
- webmedia ban usersBAN Users <= 1.5.3 - Missing Authorization to Authenticated (Subscriber+) Settings Update & Privilege Escalation8.8 High
- idehweb login with phone number, glboy otp login with phone number, otp verification +1 moreLogin with phone number <= 1.5.6 - Cross-Site Request Forgery to User Password Change8.8 High
- mpvanwinkle77 simplr registration form plus+, mikevanwinkle simplr registration form plus\+ +1 moreSimplr Registration Form Plus+ <= 2.4.5 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary User Password Change8.8 High
- instantcms icms2, instantsoft instantsoft/icms2 +1 moreSQL Injection in instantsoft/icms27.2 High
- fulldive full dialerThe com.full.dialer.top.secure.encrypted application through 1.0.1 for Android enables any...3.3 Low
- azmobileapps color phoneThe com.cutestudio.colordialer application through 2.1.8-2 for Android allows a remote attacker...5.3 Medium
- webmin userminA Reflected Cross-site scripting (XSS) vulnerability in the file manager tab in Usermin 2.000...6.1 Medium
- webmin userminA Stored Cross-Site Scripting (XSS) vulnerability in the MIME type programs tab in Usermin 2.000...5.4 Medium
- webmin usermin, webmin +1 moreA Stored Cross-Site Scripting (XSS) vulnerability in the mail forwarding and replies tab in...5.4 Medium
- webmin userminA Stored Cross-Site Scripting (XSS) vulnerability in the scheduled cron jobs tab in Usermin 2.000...5.4 Medium
- webmin userminA Stored Cross-Site Scripting (XSS) vulnerability in the MIME type programs tab in Usermin 2.000...5.4 Medium
- netentsec ns-asg, ns-asg firmware +1 morenetentsec NS-ASG 6.3 is vulnerable to Incorrect Access Control. There is a file leak in the...7.5 High
- openknowledgemaps head startA reflected cross-site scripting (XSS) vulnerability in OpenKnowledgeMaps Head Start 7 allows...6.1 Medium
- curl, fedoraproject fedora, microsoft windows 10 1809 +7 more +9 moreWhen curl retrieves an HTTP response, it stores the incoming headers so that they can be accessed...7.5 High
- gnu glibc, fedoraproject fedora, netapp active iq unified manager +22 more +24 moreGlibc: potential use-after-free in gaih_inet()5.9 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in Interstitials in Google Chrome prior to 117.0.5938.62 allowed a...4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in Picture in Picture in Google Chrome prior to 117.0.5938.62...4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in Intents in Google Chrome on Android prior to 117.0.5938.62...4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInsufficient policy enforcement in Autofill in Google Chrome prior to 117.0.5938.62 allowed a...4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in Prompts in Google Chrome prior to 117.0.5938.62 allowed a remote...4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInsufficient policy enforcement in Downloads in Google Chrome prior to 117.0.5938.62 allowed a...4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in Custom Mobile Tabs in Google Chrome on Android prior to 117.0...4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in Input in Google Chrome prior to 117.0.5938.62 allowed a remote...4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in Prompts in Google Chrome prior to 117.0.5938.62 allowed a remote...4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in Custom Tabs in Google Chrome on Android prior to 117.0.5938.62...4.3 Medium
- honeywell pc23/43, pd43, pd45, px240, pm23/43 +7 more +9 morePotential user privilege escalation6.6 Medium
- sofastack sofarpc, sofa-rpc +1 moreSOFARPC Remote Command Execution (RCE) Vulnerability9.8 Critical
- honeywell pc23/43, pd43, pd45, px240, pm23/43 +7 more +9 morePotential Predictable Session ID6.4 Medium
- zoom cleanzoomUntrusted search path in CleanZoom before file date 07/24/2023 may allow a privileged user to...7.2 High
- honeywell pc23/43, pd43, pc23 43, pd43 +15 more +17 morePrinter web page invalid command execution9.9 Critical
- zoom, zoom video communications, inc. desktop client for linux +1 moreImproper input validation in Zoom Desktop Client for Linux before version 5.15.10 may allow an...6.5 Medium
- zoom, zoom communications inc. clients, zoom meeting software development kit +1 more +3 moreImproper authentication in Zoom clients may allow an authenticated user to conduct a denial of...7.1 High
- macvimMacvim's Insecure Usage of IPC Mechanisms7.8 High
- blackberry athocA PII Enumeration via Credential Recovery in the Self Service (Credential...5.3 Medium
- debian linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +3 more +5 moreUse-after-free in Linux kernel's net/sched: sch_qfq component7.8 High
- blackberry athocA Stored Cross-site Scripting (XSS) vulnerability in the Management...5.4 Medium
- Show moreLoading…