CVEs published in September 2023
2,233 vulnerabilities, 282 critical, 23 exploited.
- moosocialCross Site Request Forgery vulnerability in mooSocial MooSocial Software v.Demo allows a remote...8.8 High
- icewarp deep castle g2An issue in IceWarp Mail Server Deep Castle 2 v.13.0.1.2 allows a remote attacker to execute...6.1 Medium
- carts.guru cartsguruCarts Guru cartsguru up to v2.4.2 was discovered to contain a SQL injection vulnerability via the...9.8 Critical
- activedesign full affiliatesActive Design psaffiliate before v1.9.8 was discovered to contain a SQL injection vulnerability...9.8 Critical
- leotheme leoblogLeoTheme leoblog up to v3.1.2 was discovered to contain a SQL injection vulnerability via the...9.8 Critical
- d-link dir-859 a1, dlink dir-859 a1 firmware +1 moreD-LINK DIR-859 A1 1.05 and A1 1.06B01 Beta01 was discovered to contain a command injection...9.8 Critical
- mitel connect mobility routerA vulnerability in the Connect Mobility Router component of Mitel MiVoice Connect through 9.6...4.3 Medium
- mitel mivoice connectA vulnerability in the Edge Gateway component of Mitel MiVoice Connect through 19.3 SP3 (22.24...4.3 Medium
- superstorefinder php scriptSQL injection vulnerability in Super Store Finder PHP Script v.3.6 allows a remote attacker to...9.8 Critical
- vtiger crmSQL injection vulnerability in Vtiger CRM v.7.5.0 allows a remote authenticated attacker to...8.8 High
- i-doitI-doit pro 25 and below and I-doit open 25 and below employ weak password requirements for...9.8 Critical
- i-doiti-doit pro 25 and below and I-doit open 25 and below are configured with insecure default...9.8 Critical
- i-doiti-doit Pro v25 and below was discovered to be vulnerable to path traversal.6.5 Medium
- gnome gnome-time trackerCSV Injection vulnerability in GNOME time tracker version 3.0.2, allows local attackers to...7.8 High
- razer synapseRazer Synapse through 3.7.1209.121307 allows privilege escalation due to an unsafe installation...7.8 High
- ericsson mobile switching center server bc 18a firmwareEricsson Mobile Switching Center Server (MSC-S) BC 18A and IS 3.1 releases before IS 3.1 CP22...4.3 Medium
- solarwinds platform, orion platform +1 moreSolarWinds Platform Exposed Dangerous Method Vulnerability6.8 Medium
- solarwinds platform, orion platform +1 moreSolarWinds Platform Exposed Dangerous Method Vulnerability6.8 Medium
- papercut ngPaperCut NG Unauthenticated XMLRPC6.5 Medium
- 3ds teamwork cloud no magic release, dassault systèmes teamwork cloud - business edition, teamwork cloud - business pro edition +2 more +4 moreStored Cross-site Scripting (XSS) vulnerability affecting Teamwork Cloud from No Magic Release 2021x through No Magic Release 2022x5.4 Medium
- qemu, red hat enterprise linux 9, redhat enterprise linux +7 more +9 moreDma reentrancy issue (incomplete fix for cve-2021-3750)7.5 High
- cisco ios xr software, ios xr +1 moreA vulnerability in the classic access control list (ACL) compression feature of Cisco IOS XR...5.8 Medium
- cisco ios xr software, ios xr +1 moreA vulnerability in the access control list (ACL) processing on MPLS interfaces in the ingress...5.8 Medium
- cisco ios xr software, ios xr +1 moreA vulnerability in the Connectivity Fault Management (CFM) feature of Cisco IOS XR Software could...4.3 Medium
- cisco ios xr software, ios xr +1 moreA vulnerability in the iPXE boot function of Cisco IOS XR software could allow an authenticated,...6.7 Medium
- cisco ios xr software, ios xr +1 moreA vulnerability in Cisco IOS XR Software image verification checks could allow an authenticated,...5.7 Medium
- strapiStrapi Improper Rate Limiting vulnerability7.3 High
- google grpcDenial of Service in gRPC Core7.5 High
- strapiStrapi's field level permissions not being respected in relationship title6.8 Medium
- strapiStrapi may leak sensitive user information, user reset password, tokens via content-manager views5.8 Medium
- palo alto networks cortex xdr agentCortex XDR Agent: Local Windows User Can Disable the Agent5.5 Medium
drupal/mail_loginPackagistThis module enables users to log in by email address with minimal configurations. Drupal core contains protection against brute force attacks via a flood control mechanism. This module's functionality…No score- craftcms cms, craft cms +1 moreCraft CMS Remote Code Execution vulnerability10.0 Critical
- proofpoint insider threat management, itm server, insider threat management server +2 moreITM Server Communications Hijack6.4 Medium
- proofpoint insider threat management, itm server +1 moreITM Server Cross-site Scripting in WriteWindowTitle Endpoint4.8 Medium
- proofpoint insider threat management, itm server +1 moreITM Server Cross-site Scripting in UpdateInstalledSoftware Endpoint4.8 Medium
- proofpoint insider threat managementITM MacOS Agent Improper Certificate Validation7.5 High
- nlnet labs routinatorPossible path traversal when storing RRDP responses9.3 Critical
- nlnet labs routinatorCrashes on parsing certain invalid RPKI objects7.5 High
libavcOSS-FuzzNull-dereference READ in isvcd_parse_inter_slice_data_cavlc_enh_lyrNo score- wibu codemeter runtime, phoenixcontact activation wizard, e-mobility charging suite +21 more +23 moreWibu: Buffer Overflow in CodeMeter Runtime9.8 Critical
- adobe experience manager, experience manager cloud service +1 moreAdobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- fortinet forticlientems, forticlient endpoint management server +1 moreAn exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in...3.6 Low
- fortinet fortiadcAn improper neutralization of special elements used in an OS command vulnerability [CWE-78] in...7.4 High
- fortinet fortios, fortiproxy +1 moreAn improper neutralization of input during web page generation ('Cross-site Scripting')...7.3 High
- fortinet fortitesterA cleartext storage of sensitive information vulnerability [CWE-312] in FortiTester 2.3.0 through...5.2 Medium
- fortinet fortitesterA use of hard-coded credentials vulnerability [CWE-798] in FortiTester 2.3.0 through 7.2.3 may...5.0 Medium
- fortinet fortianalyzer, fortimanager +1 moreAn improper privilege management vulnerability [CWE-269] in FortiManager 7.2.0 through 7.2.2, 7.0...4.2 Medium
- fortinet fortiap-uAn incomplete filtering of one or more instances of special elements vulnerability [CWE-792] in...6.5 Medium
- Show moreLoading…