CVEs published in September 2023
2,233 vulnerabilities, 282 critical, 23 exploited.
libbpfOSS-FuzzHeap-buffer-overflow in btf_ensure_modifiableNo scorelibredwgOSS-FuzzMemcpy-param-overlap in bit_u_expandNo scoreicuOSS-FuzzUNKNOWN WRITE in icu_74::Calendar::setNo scorespring-data-mongodbOSS-FuzzSecurity exception in org.springframework.expression.spel.ast.OpPlus.getValueInternalNo score- bosch rts vlink virtual matrix, rts vlink virtual matrix software +1 moreA command injection vulnerability exists in RTS VLink Virtual Matrix Software Versions v5 (< 5.7...8.4 High
- usememos memos, usememos/memos +1 moreCross-Site Request Forgery (CSRF) in usememos/memos7.3 High
- my food recipe project food recipe, sourcecodester my food recipe +1 moreSourceCodester My Food Recipe Image Upload index.php unrestricted upload6.3 Medium
- openrapid rapidcmsOpenRapid RapidCMS cate-edit-run.php sql injection6.3 Medium
- openrapid rapidcmsOpenRapid RapidCMS article-edit-run.php sql injection6.3 Medium
- asus rt-ax88u, rt-ax88u firmware +1 moreASUS RT-AX88U - externally-controlled format string8.8 High
- sun.net wmproSUNNET WMPro - SQL Injection7.5 High
- sun.net wmproSUNNET WMPro - Command Injection7.2 High
- openrapid rapidcmsOpenRapid RapidCMS article-add.php sql injection6.3 Medium
- google chromeOut of bounds write in SwiftShader in Google Chrome prior to 117.0.5938.62 allowed a remote...8.8 High
- google chromeInsufficient data validation in Permission Prompts in Google Chrome prior to 117.0.5938.62...9.6 Critical
- google chromeUse after free in WebRTC in Google Chrome prior to 117.0.5938.62 allowed a remote attacker to...8.8 High
- artifex ghostscript, fedoraproject fedora +1 moreIn Artifex Ghostscript through 10.01.2, gdevijs.c in GhostPDL can lead to remote code execution...8.8 High
- qtAn issue was discovered in Qt before 5.15.16, 6.x before 6.2.10, and 6.3.x through 6.5.x before 6...5.5 Medium
- gnome gnome-shell, fedoraproject fedora +1 moreGnome-shell: screenshot tool allows viewing open windows when session is locked5.5 Medium
- withsecure atlant, client security, elements endpoint protection +4 more +6 moreCertain WithSecure products allow a remote crash of a scanning engine via decompression of...7.5 High
- withsecure atlant, client security, elements endpoint protection +4 more +6 moreCertain WithSecure products allow an infinite loop in a scanning engine via unspecified file...7.5 High
- withsecure atlant, client security, elements endpoint protection +4 more +6 moreCertain WithSecure products allow an infinite loop in a scanning engine via unspecified file...7.5 High
- withsecure atlant, client security, elements endpoint protection +4 more +6 moreCertain WithSecure products allow a remote crash of a scanning engine via unpacking of a PE file....7.5 High
- withsecure atlant, client security, elements endpoint protection +4 more +6 moreCertain WithSecure products allow a remote crash of a scanning engine via processing of an import...7.5 High
- withsecure atlant, client security, elements endpoint protection +4 more +6 moreCertain WithSecure products allow a remote crash of a scanning engine via processing of a...7.5 High
- withsecure atlant, client security, elements endpoint protection +4 more +6 moreCertain WithSecure products allow a remote crash of a scanning engine via unpacking of crafted...7.5 High
- tdsql chitu project chituAn issue in TDSQL Chitu management platform v.10.3.19.5.0 allows a remote attacker to obtain...7.5 High
- summernote rich text editorCross Site Scripting vulnerability in Summernote Rich Text Editor v.0.8.18 and before allows a...5.4 Medium
- exam form submission in php with source code project form submission in php with source codeSQL injection vulnerability in Exam Form Submission in PHP with Source Code v.1.0 allows a remote...9.8 Critical
- peppermintAn issue in PeppermintLabs Peppermint v.0.2.4 and before allows a remote attacker to obtain...8.8 High
- tenda ac10v4, ac10 firmware +1 moreBuffer Overflow vulnerability in Tenda AC10V4 v.US_AC10V4.0si_V16.03.10.13_cn_TDC01 allows a...9.8 Critical
- vehicle management project managementCode-Projects Vehicle Management 1.0 is vulnerable to Cross Site Scripting (XSS) in Add Accounts...6.1 Medium
- samsung memory card \& ufd authenticationA DLL hijacking vulnerability in Samsung Memory Card & UFD Authentication Utility PC Software...7.3 High
- vaxilu x-uiAn issue in xui-xray v1.8.3 allows attackers to obtain sensitive information via default password.7.5 High
- xxyopen novel-plusSQL injection vulnerability in Novel-Plus v.4.1.0 allows a remote attacker to execute arbitrary...7.2 High
- bladex springbladeSpringBlade <=V3.6.0 is vulnerable to Incorrect Access Control due to incorrect configuration in...5.3 Medium
- the b members card project b members cardAn information leak in THE_B_members card v13.6.1 allows attackers to obtain the channel access...6.5 Medium
- coffee-jumbo project coffee-jumboAn information leak in Coffee-jumbo v13.6.1 allows attackers to obtain the channel access token...6.5 Medium
- youmart-tokunaga project youmart-tokunagaAn information leak in youmart-tokunaga v13.6.1 allows attackers to obtain the channel access...6.5 Medium
- tonton-tei waiting project waitingAn information leak in TonTon-Tei_waiting Line v13.6.1 allows attackers to obtain the channel...6.5 Medium
- ykc tokushima awayokochoAn information leak in YKC Tokushima_awayokocho Line v13.6.1 allows attackers to obtain the...6.5 Medium
- cheese cafe line project cafe lineAn information leak in Cheese Cafe Line v13.6.1 allows attackers to obtain the channel access...6.5 Medium
- camp style project line project style project lineAn information leak in Camp Style Project Line v13.6.1 allows attackers to obtain the channel...6.5 Medium
- neos cmsNeos CMS Cross Site Scripting vulnerability5.4 Medium
- insyde insydeh2oAn issue was discovered in SystemFirmwareManagementRuntimeDxe in Insyde InsydeH2O with kernel 5.0...7.8 High
- frangoteam fuxaA remote command execution (RCE) vulnerability in the /api/runscript endpoint of FUXA9.8 Critical
- fortra delivernowSQL Injection vulnerability in SearchTextBox parameter in Fortra (Formerly HelpSystems)...9.8 Critical
- linux kernelAn issue was discovered in the Linux kernel before 5.8.6. drivers/media/cec/core/cec-api.c leaks...3.3 Low
- jinher oa, tongda2000 tongda office anywhere +1 moreTongda OA delete.php sql injection5.5 Medium
- chshcms mccmsmccms 1 sql injection5.5 Medium
- Show moreLoading…