CVEs published in September 2023
2,233 vulnerabilities, 282 critical, 23 exploited.
- ormazabal ekorccp, ekorccp firmware, ekorrci +1 more +3 moreUnprotected Storage of Credentials in Ormazabal products7.3 High
- ormazabal ekorccp, ekorrci, ekorccp firmware +1 more +3 moreCleartext Transmission of Sensitive Information in Ormazabal products5.7 Medium
pillowPyPIPillow versions before v10.0.1 bundled libwebp binaries in wheels that are vulnerable to CVE-2023-5129 (previously CVE-2023-4863). Pillow v10.0.1 upgrades the bundled libwebp binary to v1.3.2.No scoreimagecodecsPyPIimagecodecs versions before v2023.9.18 bundled libwebp binaries in wheels that are vulnerable to CVE-2023-5129 (previously CVE-2023-4863). imagecodecs v2023.9.18 upgrades the bundled libwebp binary to…No score- @tinacms graphqlgraphql Uncontrolled Resource Consumption vulnerability5.3 Medium
- stefanoai widget responsive for youtubeWidget Responsive for Youtube <= 1.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4 Medium
- webfactory wordpress chartsWordPress Charts <= 0.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4 Medium
- mitsubishi electric melsoft fielddeviceconfigurator, melsoft iq appportal, mx sheet +23 more +25 moreMalicious Code Execution Vulnerability in FA Engineering Software Products9.3 Critical
- nvidia geforce now, geforce now for android mobile and tv app +1 moreNVIDIA GeForce Now for Android contains a vulnerability in the game launcher component, where a...4.2 Medium
- nvidia dgx h100 bmc, dgx h100 firmware +1 moreNVIDIA DGX H100 BMC contains a vulnerability in the REST service where a host user may cause as...6.6 Medium
- nvidia dgx h100 bmc, dgx h100 firmware +1 moreNVIDIA DGX H100 BMC contains a vulnerability in the REST service, where an attacker may cause...6.1 Medium
- nvidia dgx h100 bmc, dgx h100 firmware +1 moreNVIDIA DGX H100 BMC contains a vulnerability in the REST service where an attacker may cause...6.1 Medium
- nvidia dgx h100 bmc, dgx h100 firmware +1 moreNVIDIA DGX H100 BMC contains a vulnerability in the REST service where an attacker may cause...5.2 Medium
- nvidia dgx h100 bmc, dgx h100 firmware +1 moreNVIDIA DGX H100 BMC contains a vulnerability in IPMI, where an attacker may cause improper input...6.8 Medium
- nvidia dgx h100 bmc, dgx h100 firmware +1 moreNVIDIA DGX H100 BMC contains a vulnerability in the REST service, where an attacker may cause...8.3 High
- nvidia dgx h100 bmc, dgx h100 firmware +1 moreNVIDIA DGX H100 BMC contains a vulnerability in IPMI, where an attacker may cause improper input...7.3 High
- nvidia dgx h100 bmc, dgx h100 firmware +1 moreNVIDIA DGX H100 BMC contains a vulnerability in IPMI, where an attacker may cause improper input...5.7 Medium
- nvidia dgx h100 bmc, dgx h100 firmware +1 moreNVIDIA DGX H100 BMC contains a vulnerability in the web UI, where an attacker may cause improper...8.3 High
- nvidia dgx h100 bmc, dgx h100 firmware +1 moreNVIDIA DGX H100 BMC contains a vulnerability in IPMI, where an attacker may cause insufficient...6.5 Medium
- nvidia dgx h100 bmc, dgx h100 firmware +1 moreNVIDIA DGX H100 BMC contains a vulnerability in IPMI, where an attacker may cause insufficient...7.6 High
- nvidia dgx h100 bmc, dgx h100 firmware +1 moreNVIDIA DGX H100 BMC contains a vulnerability in the KVM service, where an attacker may cause...8.0 High
- nvidia dgx a100 bmc, dgx h100 bmc, dgx h100 firmware +2 moreNVIDIA DGX H100 BMC contains a vulnerability in the host KVM daemon, where an unauthenticated...8.0 High
- nvidia dgx h100 bmc, dgx h100 firmware +1 moreNVIDIA DGX H100 baseboard management controller (BMC) contains a vulnerability in a web server...8.8 High
- nvidia dgx h100 bmc, dgx h100 firmware +1 moreNVIDIA DGX H100 BMC contains a vulnerability in the host KVM daemon, where an authenticated local...7.8 High
- nvidia cumulus linuxNVIDIA Cumulus Linux contains a vulnerability in neighmgrd and nlmanager where an attacker on an...6.5 Medium
- nvidia cumulus linuxNVIDIA Cumulus Linux contains a vulnerability in forwarding where a VxLAN-encapsulated IPv6...7.5 High
- schollz crocCroc may expose secret to local users4.7 Medium
- schollz crocCroc sender may place ANSI or CSI escape sequences in filename to attach receiver's terminal device7.8 High
- schollz crocCroc sender may send dangerous new files to receiver7.8 High
- schollz crocCroc requires senders to provide local IP addresses in cleartext5.3 Medium
- schollz crocCros secrets may be disclosed to untrusted relay5.3 Medium
- schollz crocSender can cause a receiver to overwrite files during ZIP extraction in Croc5.5 Medium
- digitaldruid hoteldruidA cross-site scripting (XSS) vulnerability in /hoteldruid/visualizza_contratto.php of Hoteldruid...5.4 Medium
- digitaldruid hoteldruidA cross-site scripting (XSS) vulnerability in /hoteldruid/clienti.php of Hoteldruid v3.0.5 allows...5.4 Medium
- digitaldruid hoteldruidHoteldruid v3.0.5 was discovered to contain multiple SQL injection vulnerabilities at /hoteldruid...9.8 Critical
- digitaldruid hoteldruidHoteldruid v3.0.5 was discovered to contain a SQL injection vulnerability via the id_utente_log...9.8 Critical
- digitaldruid hoteldruidHoteldruid v3.0.5 was discovered to contain a SQL injection vulnerability via the n_utente_agg...9.8 Critical
- digitaldruid hoteldruidHoteldruid v3.0.5 was discovered to contain a SQL injection vulnerability via the numcaselle...9.8 Critical
- dlink dwl-6610ap firmwareD-LINK DWL-6610 FW_v_4.3.0.8B003C was discovered to contain a command injection vulnerability in...9.8 Critical
- dlink dwl-6610ap firmwareD-LINK DWL-6610 FW_v_4.3.0.8B003C was discovered to contain a command injection vulnerability in...9.8 Critical
- dlink dwl-6610ap firmwareD-LINK DWL-6610 FW_v_4.3.0.8B003C was discovered to contain a command injection vulnerability in...9.8 Critical
- dlink dwl-6610ap firmwareD-LINK DWL-6610 FW_v_4.3.0.8B003C was discovered to contain a stack overflow vulnerability in the...9.8 Critical
- dlink dwl-6610ap firmwareD-LINK DWL-6610 FW_v_4.3.0.8B003C was discovered to contain a command injection vulnerability in...9.8 Critical
- d-link di-7200gv2.e1, dlink di-7200g firmware +1 moreD-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a stack overflow via the hi_up...9.8 Critical
- d-link di-7200gv2.e1, dlink di-7200g firmware +1 moreD-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a stack overflow via the id...9.8 Critical
- d-link di-7200gv2.e1, dlink di-7200g firmware +1 moreD-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a stack overflow via the prev...9.8 Critical
- d-link di-7200gv2.e1, dlink di-7200g firmware +1 moreD-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a stack overflow via the...9.8 Critical
- d-link di-7200gv2.e1, dlink di-7200g firmware +1 moreD-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a stack overflow via the fn...9.8 Critical
- d-link di-7200gv2.e1, dlink di-7200g firmware +1 moreD-Link DI-7200GV2.E1 v21.04.09E1 was discovered to contain a stack overflow via the zn_jb...9.8 Critical
- tplink tl-er5120g, tp-link tl-er5120g firmware +1 moreTPLINK TL-ER5120G 4.0 2.0.0 Build 210817 Rel.80868n has a command injection vulnerability, when...8.8 High
- Show moreLoading…