CVEs published in September 2023
2,233 vulnerabilities, 282 critical, 23 exploited.
- nextbx qwalerter, quescom nextbx qwalerter +1 moreNextBX QWAlerter QWAlerter.exe unquoted search path7.8 High
- bettershop laiketuiBettershop LaikeTui unrestricted upload6.3 Medium
- infinitietech taskhubinfinitietech taskhub GET Parameter get_tasks_list sql injection5.5 Medium
- supcon inplant scadaSupcon InPlant SCADA Project.xml unknown vulnerability2.5 Low
wasmedgeOSS-FuzzSegv on unknown address in FunctionCompiler::compileReturnNo scorelibredwgOSS-FuzzHeap-double-free in dwg_free_common_entity_dataNo scorelibredwgOSS-FuzzHeap-buffer-overflow in bit_TV_to_utf8No scoreicuOSS-FuzzStack-buffer-overflow in ulocimp_toLanguageTag_74No score- supcon inplant scadaSupcon InPlant SCADA Project.xml improper authentication5.9 Medium
- didi knowsearchdidi KnowSearch 1 credentials storage4.3 Medium
- app1pro shopicialapp1pro Shopicial search cross site scripting4.3 Medium
- kubernetes cri-o, redhat openshift container platform, red hat openshift container platform 3.11 +1 more +3 moreCri-o: security regression of cve-2022-276524.8 Medium
hpackcrates.io`hpack` is unmaintainedNo scorehpackcrates.ioHPACK decoder panics on invalid input7.5 HighatftpUbuntuatftp vulnerabilityNo score- redhat quay, red hat quay 3 +1 moreQuay: cross-site request forgery (csrf) on config-editor page6.5 Medium
- adobe connectPrivilage Escalation in Saphira Connect8.8 High
- adobe connectPrivilage Escalation in Saphira Connect8.8 High
- adobe connectXSS in Saphira Connect6.1 Medium
- adobe connectRCE in Saphira Connect9.8 Critical
- adobe connectSQLi in Saphira Connect9.8 Critical
- besttem network marketing software, besttem network marketing project network marketing +1 moreSQLi in Besttem's Network Marketing Software9.8 Critical
- cf software oil management software, petroleum management software application project management software application +1 moreSQLi in CF's Oil Management Software9.8 Critical
- cevik informatics online payment system, cevik informatics online payment system +1 moreSQLi in Cevik Informatics' Online Payment System9.8 Critical
- innosa probbysSQLi in Innosa's Probbys9.8 Critical
- ncode ncep, weather ncode ncep +1 moreSQLi in nCep9.8 Critical
- dell emc xc core xc450 firmware, emc xc core xc650 firmware, emc xc core xc6520 firmware +50 more +52 moreDell PowerEdge BIOS and Dell Precision BIOS contain a buffer overflow vulnerability. A local...5.0 Medium
- tura signalixSQLi in Tura's Signalix9.8 Critical
- sanalogi turasistanSQLi in Sanalogy's Turasistan9.8 Critical
- webshouter ws facebook like box widgetWS Facebook Like Box Widget <= 5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4 Medium
- cisco jabberA vulnerability in the Extensible Messaging and Presence Protocol (XMPP) message processing...4.3 Medium
- lapceLapce v0.2.8 - Privilege escalation via Race Condition7.3 High
- academy lms, creativeitem academy lms +1 moreAcademy LMS GET Parameter filter sql injection6.3 Medium
- academy lms, creativeitem academy lms +1 moreAcademy LMS GET Parameter filter cross site scripting3.5 Low
- librenms, librenms librenms/librenms +1 moreCross-site Scripting (XSS) - Stored in librenms/librenms9.8 Critical
- librenms, librenms librenms/librenms +1 moreCross-site Scripting (XSS) - DOM in librenms/librenms8.8 High
- librenms, librenms librenms/librenms +1 moreCross-site Scripting (XSS) - Generic in librenms/librenms8.8 High
- librenms, librenms librenms/librenms +1 moreCross-site Scripting (XSS) - Reflected in librenms/librenms8.8 High
- librenms, librenms librenms/librenms +1 moreCross-site Scripting (XSS) - DOM in librenms/librenms9.0 Critical
- librenms, librenms librenms/librenms +1 moreCode Injection in librenms/librenms7.3 High
- zzcmsAn issue in zzCMS v.2023 allows a remote attacker to execute arbitrary code and obtain sensitive...9.8 Critical
- grocy project grocyGrocy <= 4.0.2 is vulnerable to Cross Site Request Forgery (CSRF).8.8 High
- gradio project gradioGradio arbitrary file upload vulnerability4.8 Medium
- cskaza cszcmsCross Site Scripting vulnerability in CSZCMS v.1.3.0 allows a local attacker to execute arbitrary...5.4 Medium
- webminA stored cross-site scripting (XSS) vulnerability in the Usermin Configuration function of Webmin...5.4 Medium
- webminAn issue was discovered in Webmin 2.100. The File Manager functionality allows an attacker to...5.4 Medium
- webminA reflected cross-site scripting (XSS) vulnerability in the File Manager function of Webmin v2...5.4 Medium
- webminA reflected cross-site scripting (XSS) vulnerability in the File Manager function of Webmin v2...6.1 Medium
- webminA stored cross-site scripting (XSS) vulnerability in Webmin v2.100 allows attackers to execute...5.4 Medium
- blmodules xmlfeeds proBl Modules xmlfeeds before v3.9.8 was discovered to contain a SQL injection vulnerability via the...9.8 Critical
- Show moreLoading…