CVEs published in September 2023
2,233 vulnerabilities, 282 critical, 23 exploited.
- ormazabal ekorccp, ekorrci, ekorccp firmware +1 more +3 moreUse of Password Hash With Insufficient Computational Effort in Ormazabal products6.1 Medium
- ormazabal ekorrci, ekorccp firmware, ekorrci firmware +2 moreUncontrolled Resource Consumption in Ormazabal products6.5 Medium
- ormazabal ekorccp, ekorrci, ekorccp firmware +1 more +3 moreImproper Neutralization of Special Elements in Ormazabal products9.3 Critical
- ormazabal ekorccp, ekorrci, ekorccp firmware +1 more +3 moreExposure of Sensitive Information in Ormazabal products8.2 High
- apache flink stateful functionsApache Flink Stateful Functions allowed HTTP header injection due to Improper Neutralization of CRLF Sequences6.1 Medium
- symantec identity portal, symantec - a division of broadcom identity governance and administration +1 moreOpen Redirection Vulnerability in Symantec Identity Portal 14.45.4 Medium
- ormazabal ekorccp, ekorrci, ekorccp firmware +1 more +3 moreImproper Authorization in Ormazabal products8.6 High
- whisperfish blurhash-rsblurhash panics on parsing crafted inputs8.6 High
- whisperfish phonenumber, rust-phonenumber +1 morephonenumber panics on parsing crafted RF3966 inputs8.6 High
- hashgraph guardian, nozomi networks cmc +1 moreDoS on IDS parsing of malformed asset fields in Guardian/CMC >= 22.6.0 before 22.6.3 and 23.1.08.2 High
- hashgraph guardian, nozomi networks cmc +1 moreSQL Injection on IDS parsing of malformed asset fields in Guardian/CMC >= 22.6.0 before 22.6.3 and 23.1.09.2 Critical
- hashgraph guardian, nozomi networks cmc +1 moreAuthenticated SQL Injection on Query functionality in Guardian/CMC before 22.6.3 and 23.1.08.7 High
- uniview ip camera ipc322lb-sf28-a, ipc322lb-sf28-a firmware +1 moreUnauthorized Access Control Vulnerability in Uniview IP Camera9.1 Critical
- gitlabIncorrect Authorization in GitLab8.2 High
- highwarden super store finder, super store finder store finder +1 moreSuper Store Finder <= 6.9.3 - Unauthenticated Email Creation/Sending5.8 Medium
- blamer project blamerblamer vulnerable to Arbitrary Argument Injection via the blameByFile() API6.5 Medium
- librenms, librenms librenms/librenms +1 moreCross-site Scripting (XSS) - DOM in librenms/librenms8.4 High
- mariadb, fedoraproject fedora, red hat enterprise linux 7 +18 more +20 moreMariadb: node crashes with transport endpoint is not connected mysqld got signal 67.5 High
- xdsoft joditeditorJodit Editor vulnerable to cross-site scripting6.1 Medium
- jfinalcms project jfinalcmsAn issue in the component /common/DownController.java of JFinalCMS v5.0.0 allows attackers to...5.3 Medium
- patreon flutter downloaderA SQL injection in the flutter_downloader component through 1.11.1 for iOS allows remote...9.1 Critical
- nagios xiA SQL injection vulnerability in Nagios XI 5.11.1 and below allows authenticated attackers with...7.2 High
- nagios xiA SQL injection vulnerability in Nagios XI v5.11.1 and below allows authenticated attackers with...8.8 High
- nagios xiA Cross-site scripting (XSS) vulnerability in Nagios XI version 5.11.1 and below allows...5.4 Medium
- nagios xiA SQL injection vulnerability in Nagios XI from version 5.11.0 up to and including 5.11.1 allows...6.5 Medium
- isl arp-guardA reflected cross-site scripting (XSS) vulnerability in the url_str URL parameter of ISL ARP...5.4 Medium
- minitool power data recoveryMiniTool Power Data Recovery 11.6 contains an insecure installation process that allows attackers...8.1 High
- minitool movie makerMiniTool Movie Maker 6.1.0 contains an insecure installation process that allows attackers to...8.1 High
- minitool shadowmakerMiniTool Movie Maker 4.1 contains an insecure installation process that allows attackers to...8.1 High
- minitool power data recoveryMiniTool Power Data Recovery 11.5 contains an insecure in-app payment system that allows...5.9 Medium
- minitool partition wizardMiniTool Partition Wizard 12.8 contains an insecure update mechanism that allows attackers to...8.1 High
- minitool partition wizardMiniTool Partition Wizard 12.8 contains an insecure installation mechanism that allows attackers...8.1 High
- openupload project openuploadFile Upload vulnerability in Openupload Stable v.0.4.3 allows a remote attacker to execute...8.8 High
- technicolor tg670, tg670 firmware +1 moreTechnicolor TG670 10.5.N.9 devices contain multiple accounts with hard-coded passwords. One...7.2 High
- linuxfoundation nats-serverNATS nats-server allows directory traversal via unintended path to a management action9.8 Critical
- iobit malware fighterAn issue was discovered in ImfHpRegFilter.sys in IOBit Malware Fighter version 8.0.2, allows...5.5 Medium
- lovasoa sqlpageSQLpage vulnerable to public exposure of database credentials10.0 Critical
- pow-auth powPow Mnesia cache doesn't invalidate all expired keys on startup6.5 Medium
- vyperlang vyperVyper vulnerable to memory corruption in certain builtins utilizing `msize`8.1 High
- socomec modulys gp (mod3gp-sy-120k), modulys gp firmware +1 moreSocomec MOD3GP-SY-120K Cross-site Scripting6.5 Medium
- socomec modulys gp (mod3gp-sy-120k), modulys gp firmware +1 moreSocomec MOD3GP-SY-120K Cross-site Scripting6.3 Medium
- socomec modulys gp (mod3gp-sy-120k), modulys gp firmware +1 moreSocomec MOD3GP-SY-120K Cross-Site Request Forgery8.9 High
- socomec modulys gp (mod3gp-sy-120k), modulys gp firmware +1 moreSocomec MOD3GP-SY-120K Plaintext Storage of a Password7.5 High
- socomec modulys gp (mod3gp-sy-120k), modulys gp firmware +1 moreSocomec MOD3GP-SY-120K Code Injection8.8 High
- socomec modulys gp (mod3gp-sy-120k), modulys gp firmware +1 moreSocomec MOD3GP-SY-120K Reliance on Cookies without Validation and Integrity Checking10.0 Critical
- socomec modulys gp (mod3gp-sy-120k), modulys gp firmware +1 moreSocomec MOD3GP-SY-120K Insecure Storage of Sensitive Information7.5 High
- vyperlang vyperVyper has incorrect re-entrancy lock when key is empty string5.3 Medium
- juplink rx4-1500, rx4-1500 firmware +1 moreJuplink RX4-1500 Hard-coded Credential Vulnerability6.3 Medium
- gnu glibc, fedoraproject fedora, red hat enterprise linux 6 +28 more +30 moreGlibc: potential use-after-free in getaddrinfo()5.9 Medium
- gnu glibc, fedoraproject fedora, netapp h300s firmware +31 more +33 moreGlibc: stack read overflow in getaddrinfo in no-aaaa mode6.5 Medium
- Show moreLoading…