CVEs published in September 2023
2,233 vulnerabilities, 282 critical, 23 exploited.
- tplink tl-er5120g, tp-link tl-er5120g firmware +1 moreTPLINK TL-ER5120G 4.0 2.0.0 Build 210817 Rel.80868n has a command injection vulnerability, when...8.8 High
- tp-link er5120g, tl-er5120g firmware +1 moreThere is an unauthorized access vulnerability in TP-LINK ER5120G 4.0 2.0.0 Build 210817 Rel...9.8 Critical
- netis-systems 360rac1200, 360r firmware +1 moreThere is an unauthorized access vulnerability in Netis 360RAC1200 v1.3.4517, which allows...9.8 Critical
- isc bind, bind 9, debian linux +6 more +8 morenamed may terminate unexpectedly under high DNS-over-TLS query load7.5 High
- fl3xx crew, dispatch +1 moreUnrestricted File Upload vulnerability in Fl3xx Dispatch 2.10.37 and fl3xx Crew 2.10.37 allows a...8.8 High
- fl3xx crew, dispatch +1 moreAn Indirect Object Reference (IDOR) in Fl3xx Dispatch 2.10.37 and fl3xx Crew 2.10.37 allows a...6.5 Medium
- elitecms elite cmsA file upload vulnerability in EliteCMS 1.01 allows a remote attacker to execute arbitrary code...8.8 High
- icmsdev icmsInsecure Permissions vulnerability in icmsdev iCMS v.7.0.16 allows a remote attacker to obtain...9.8 Critical
- icmsdev icmsCross Site Request Forgery (CSRF) vulnerability in icmsdev iCMSv.7.0.16 allows a remote attacker...8.8 High
- fit2cloud cloudexplorer liteAn issue in CloudExplorer Lite 1.3.1 allows an attacker to obtain sensitive information via the...7.5 High
- corecode macupdaterAn XPC misconfiguration vulnerability in CoreCode MacUpdater before 2.3.8, and 3.x before 3.1.2,...7.8 High
- cimgAn issue in cimg.eu Cimg Library v2.9.3 allows an attacker to obtain sensitive information via a...8.1 High
- skyworth osSkyworth 3.0 OS is vulnerable to Directory Traversal.6.8 Medium
- phppgadmin project phppgadminphpPgAdmin 7.14.4 and earlier is vulnerable to deserialization of untrusted data which may lead...9.8 Critical
- openknowledgemaps head startA reflected cross-site scripting (XSS) vulnerability in OpenKnowledgeMaps Head Start versions 4,...6.1 Medium
- updateproducts project updateproducts, myprestamodules product catalog \(csv\, excel\) import +1 moreMyPrestaModules Prestashop Module v6.2.9 and UpdateProducts Prestashop Module v3.6.9 were...7.5 High
- myprestamodules product catalog \(csv\, excel\) importSimpleImportProduct Prestashop Module v6.2.9 was discovered to contain a SQL injection...9.8 Critical
- earthgarden waiting project waitingAn information leak in Earthgarden_waiting 13.6.1 allows attackers to obtain the channel access...6.5 Medium
- kokoroe members card project members cardAn information leak in kokoroe_members card Line 13.6.1 allows attackers to obtain the channel...6.5 Medium
- ajino-shiretoko project ajino-shiretokoAn information leak in ajino-Shiretoko Line v13.6.1 allows attackers to obtain the channel access...6.5 Medium
- kukurudeli project kukurudeliAn information leak in KUKURUDELI Line v13.6.1 allows attackers to obtain the channel access...6.5 Medium
- dolibarr erp\/crmCross Site Scripting vulnerability in Dolibarr ERP CRM9.6 Critical
- dolibarr erp\/crmFile Upload vulnerability in Dolibarr ERP CRM8.8 High
- dolibarr erp\/crmDolibarr allows a remote privileged attacker to execute arbitrary code via a crafted command/script7.2 High
- msaad1999 php-login-systemA reflected cross-site scripting (XSS) vulnerability in msaad1999's PHP-Login-System 2.0.1 allows...6.1 Medium
- msaad1999 php-login-systemA reflected cross-site scripting (XSS) vulnerability in msaad1999's PHP-Login-System 2.0.1 allows...6.1 Medium
- netboxCross Site Scripting (XSS) vulnerability in Netbox 3.5.1, allows attackers to execute arbitrary...5.4 Medium
- jerryscriptBuffer Overflow vulnerability in JerryScript version 3.0, allows remote attackers to execute...9.8 Critical
- store-opart op\'art save cartSQL injection vulnerability in PrestaShop opartsavecart through 2.0.7 allows remote attackers to...9.8 Critical
- isc bind, bind 9, debian linux +1 more +3 moreA stack exhaustion flaw in control channel code may cause named to terminate unexpectedly7.5 High
- reportlab, debian linux +1 moreReportLab vulnerable to remote code execution via paraparser9.8 Critical
- te-st leykaLeyka < 3.30.4 - Admin+ Stored XSS4.8 Medium
- nikolov serial codes generator and validator with woocommerce supportSerial Codes Generator and Validator with WooCommerce Support < 2.4.15 - Admin+ Stored XSS4.8 Medium
- atlassian bitbucket data center, bitbucket server +1 moreThis High severity RCE (Remote Code Execution) vulnerability was introduced in version 8.0.0 of...8.5 High
- jetbrains teamcityIn JetBrains TeamCity before 2023.05.4 stored XSS was possible during nodes configuration3.5 Low
- jetbrains teamcityIn JetBrains TeamCity before 2023.05.4 authentication bypass leading to RCE on TeamCity Server...9.8 Critical
- joinmastodon mastodonMastodon vulnerable to Stored XSS through the translation feature6.1 Medium
- joinmastodon mastodonMastodon Invalid Domain Name Normalization vulnerability7.4 High
- joinmastodon mastodonMastodon Server-Side Request Forgery vulnerability5.4 Medium
- mim software assistant, client +1 moreUnsafe XML parsing of 3rd party DICOM private tags may lead to XXE5.6 Medium
- simplesamlphp saml2Sustainsys.Saml2 Insufficient Identity Provider Issuer Validation7.5 High
mrubyOSS-FuzzHeap-buffer-overflow in read_tmplNo score- trend micro apex one, trend micro, inc. micro apex one, trendmicro worry-free business security +4 more +6 moreA vulnerability in the 3rd party AV uninstaller module contained in Trend Micro Apex One (on-prem...7.2 High
- fujitsu arconte áurea, arconte aurea +1 moreWeak password recovery mechanism vulnerability in Fujitsu Arconte Áurea8.6 High
- fujitsu arconte áurea, arconte aurea +1 moreUser enumeration vulnerability in Fujitsu Arconte Áurea5.3 Medium
- fujitsu arconte áurea, arconte aurea +1 moreWeak authentication vulnerability in Fujitsu Arconte Áurea6.5 Medium
- ormazabal ekorccp, ekorrci, ekorccp firmware +1 more +3 moreCross-Site Request Forgery in Ormazabal products8.6 High
- fujitsu arconte áurea, arconte aurea +1 moreReflected and persistent XSS vulnerability in Fujitsu Arconte Áurea5.5 Medium
- ormazabal ekorccp, ekorrci, ekorccp firmware +1 more +3 moreImproper Access Control in Ormazabal products9.4 Critical
- fujitsu arconte áurea, arconte aurea +1 moreSQL injection vulnerability in Fujitsu Arconte Áurea8.8 High
- Show moreLoading…